Privacy Policy
Last updated: January 2025
At AdlDesk, we are committed to protecting the privacy of our users and their data. This policy explains how we collect, use, and protect your information when using our legal practice management platform. We understand that legal data is inherently sensitive and treat it with the highest level of responsibility.
1. Information We Collect
1.1 Information You Provide
- Account Information: Full name, email, phone number, firm name, and job title when creating an account.
- Firm Data: Law firm name, address, license number, and billing information.
- Case Data: Information you enter about cases, clients, and documents.
- Documents: Files you upload to the platform.
- Communications: Messages you send through the platform or to us.
1.2 Information Collected Automatically
- Usage Data: Pages visited, features used, and time spent.
- Device Data: Browser type, operating system, IP address, and device type.
- Cookies: We use cookies to improve your experience and remember your preferences.
- Login Logs: Time and location of access for security purposes.
2. How We Use Your Information
- Providing, operating, and maintaining our platform services
- Improving the platform and developing new features based on usage patterns
- Communicating with you about your account, updates, and technical support
- Ensuring platform security and preventing unauthorized use
- Complying with legal and regulatory requirements
- Sending important service notifications (such as changes to terms)
- Providing technical support and resolving issues
We never sell your data to third parties. We do not use your case or client data for any marketing or advertising purpose.
3. Information Sharing
We only share your personal information in the following cases:
- Your Consent: When you request sharing data with specific parties (e.g., sharing documents with clients via the portal).
- Service Providers: We work with trusted service providers (such as Google Cloud for hosting) under contracts that ensure your data protection.
- Legal Requirements: When required by court order or binding legal obligation.
- Rights Protection: To protect our rights or the safety of our users or the public in emergencies.
4. Data Security
We implement the highest security standards to protect your data:
- Encryption in Transit: All communications encrypted with TLS 1.3.
- Encryption at Rest: Databases and files encrypted using AES-256.
- Data Isolation: Complete multi-tenant isolation at the database level between different law firms.
- Hosting: All data hosted on Google Cloud in the Middle East region (Doha, Qatar - me-central1).
- Backups: Daily backups with point-in-time recovery capability.
- Authentication: Multi-factor authentication (MFA) support with bcrypt password hashing.
- Audit Log: Complete logging of all access and modification operations.
- Security Testing: Regular security audits and penetration testing.
5. Data Retention
We retain your data as long as your account is active or as necessary to provide our services. When you close your account:
- You can export all your data before closure
- We delete your data within 30 days of the deletion request
- We may retain certain data longer if required by law
- Backups are purged within 90 days
6. Your Rights
Under applicable data protection laws, you have the following rights:
- Right of Access: Request a copy of your personal data held by us.
- Right to Rectification: Request correction of any inaccurate data.
- Right to Erasure: Request deletion of your personal data (subject to legal obligations).
- Right to Portability: Obtain your data in a machine-readable format.
- Right to Object: Object to processing of your data for certain purposes.
- Right to Withdraw Consent: Withdraw your consent to processing at any time.
To exercise any of these rights, contact us at: privacy@adldesk.com
7. Cookies
We use limited types of cookies:
- Essential Cookies: Required for platform operation (login, security).
- Analytics Cookies: To understand platform usage and improve it (Google Analytics with IP anonymization).
- Preference Cookies: To remember your settings (language, timezone).
We do not use third-party advertising or tracking cookies.
8. Changes to This Policy
We may update this policy from time to time. We will notify you of material changes via email or in-platform notification at least 30 days before the change takes effect. Your continued use of the platform after the update constitutes acceptance of the updated policy.
9. Contact Us
For privacy-related questions or concerns:
- Email: privacy@adldesk.com
- Address: Doha, Qatar
- Data Protection Officer: dpo@adldesk.com