Privacy Policy
Legalbrain Platform
Effective Date: 18 February 2026
1. Introduction
This Privacy Policy explains how Zahoot AI collects, uses, stores, and protects personal data in connection with the Legalbrain platform.
Zahoot AI is committed to protecting your privacy and handling personal data transparently and lawfully.
By using the Platform, you acknowledge that your personal data will be processed in accordance with this Privacy Policy.
2. Who We Are
Zahoot AI operates the Legalbrain platform.
Registered address:
Louisa Ryland House
44 Newhall Street
Birmingham
B3 3PL
Email: privacy@zahoot.ai
For the purposes of UK data protection law, Zahoot AI is the data controller in relation to personal data collected directly from users, unless stated otherwise.
3. Scope
This Privacy Policy applies to:
- Visitors to our website
- Registered users of the Platform
- Business users uploading data
- Individuals whose personal data is processed through documents generated on the Platform
4. The Data We Collect
We may collect and process the following categories of personal data:
Identity Data
- Name
- Job title
- Company name
Contact Data
- Email address
- Telephone number
- Billing address
Account Data
- Login credentials
- Account preferences
Financial Data
- Payment details processed via secure third party providers
Document Data
- Information entered into contract templates
- Names and contact details of third parties included in documents
- Uploaded agreements or files
Technical Data
- IP address
- Browser type and version
- Device identifiers
- Usage data
- Log files
Audit and Signature Data
- Timestamp
- IP logs
- Signature metadata
We do not intentionally collect special category data. Users are responsible for ensuring that any personal data entered into the Platform is lawful and necessary.
5. How We Use Personal Data
We process personal data to:
- Provide and maintain the Platform
- Generate and analyse documents
- Manage user accounts
- Process payments
- Provide customer support
- Maintain audit trails
- Improve system performance
- Ensure security and prevent misuse
- Comply with legal obligations
We do not sell personal data.
6. Legal Bases for Processing
We rely on the following legal bases:
Contract
Where processing is necessary to provide access to the Platform.
Legitimate Interests
To operate, secure, and improve the Platform, provided those interests are not overridden by your rights.
Legal Obligation
Where required to comply with law or regulatory requirements.
Consent
Where you have given clear consent for specific processing activities.
7. Business Users and Controller Processor Roles
Where a business user uploads personal data relating to third parties:
- The business user acts as the data controller.
- Zahoot AI acts as a data processor.
Processing in these cases is governed by our Data Processing Addendum.
8. Sharing of Personal Data
We may share personal data with:
- Cloud hosting providers
- Payment processors
- Electronic signature providers
- Analytics providers
- Professional advisers
- Regulated Partners, where you request legal review
All third party providers are subject to contractual confidentiality and data protection obligations.
We do not share personal data for marketing by third parties.
9. International Transfers
Where personal data is transferred outside the United Kingdom, we ensure appropriate safeguards are in place, including:
- Adequacy decisions
- Standard contractual clauses
- Other lawful transfer mechanisms
10. Data Retention
We retain personal data:
- For as long as your account is active
- For up to six years after account closure for legal and audit purposes
- Longer where required by law
Document audit logs may be retained to protect against legal claims.
When data is no longer required, it will be securely deleted or anonymised.
11. Security
We implement appropriate technical and organisational measures to protect personal data, including:
- Encryption in transit
- Secure hosting environments
- Access controls
- Role based permissions
- Activity logging
- Regular system monitoring
No system can guarantee complete security. Users are responsible for maintaining confidentiality of login credentials.
12. Your Rights
Under UK data protection law, you may have the right to:
- Request access to your personal data
- Request correction of inaccurate data
- Request deletion of personal data
- Request restriction of processing
- Object to processing
- Request data portability
Requests should be sent to privacy@zahoot.ai.
We will respond within one month unless the request is complex or numerous.
You also have the right to lodge a complaint with the Information Commissioner’s Office.
13. Cookies and Analytics
We may use cookies and similar technologies to:
- Improve user experience
- Analyse usage
- Maintain security
Details are provided in our separate Cookie Policy.
14. Automated Processing
The Platform uses automated systems to generate and analyse documents based on user input.
These systems do not make legally binding decisions about individuals.
Users remain responsible for reviewing generated documents and seeking professional advice where appropriate.
15. Children
The Platform is not intended for individuals under the age of 18.
We do not knowingly collect data from children.
16. Changes to This Policy
We may update this Privacy Policy from time to time.
Material changes will be notified via the Platform or website.
Continued use of the Platform after updates constitutes acceptance of the revised Policy.
17. Contact
For any privacy related enquiries, please contact:
Zahoot AI
Louisa Ryland House
44 Newhall Street
Birmingham
B3 3PL
If you have questions or comments about this Privacy Policy, please contact us at:
Email: support@zahoot.ai
Phone: +44 121 630 3381