Privacy Policy

1. Who we are

MyLegalLetters is an AI-powered legal-technology platform operated as part of the Allcott group of brands ("we", "us"). We are not a law firm and do not provide formal legal advice. For data-protection purposes, the data controller is Allison Allcott Ltd (Company No. 10797673), registered office Manchester M1 4BT, United Kingdom. Contact: privacy@mylegalletters.com.

2. What we collect

• Matter information — the facts, dispute details, names, addresses and documents you provide during the interview and drafting process.
• Account details — name, email and password (hashed) when you create an account.
• Payment data — processed by Stripe; we never see or store full card numbers.
• Usage data — pages visited, approximate location (country), device/browser type, collected via standard server logs.

3. How we use it

• To draft, quality-score and deliver your letters and templates.
• To operate your account, wallet, letter credits and purchase history.
• To arrange solicitor review where you purchase it.
• To send service messages about your matter (receipts, delivery status, replies).
• To improve the product and prevent fraud and abuse.

Lawful bases (UK GDPR): performance of a contract, legitimate interests, and legal obligation. Where you provide special-category data within your matter details, you do so explicitly for the purpose of preparing your correspondence.

4. AI processing

Your matter details are processed by large-language-model providers under data-processing agreements to generate interviews, analyses and drafts. We do not use your matter details to train public models.

5. Sharing

We share data only with: Stripe (payments), our email/SMS delivery providers, AI processing providers, and — where purchased — the reviewing solicitor. We do not sell your personal data.

6. Retention

Drafted matters and account data are retained while your account is active and for up to 6 years afterwards where needed for legal/contractual limitation periods. Anonymous (unclaimed) drafts may be deleted after 90 days. You may request earlier deletion — see section 8.

7. Security

Data is encrypted in transit (TLS) and at rest. Access is limited to authorised personnel and vetted processors.

8. Your rights

You have the right to access, rectify, erase, restrict, object to processing, and port your data. To exercise any right, email privacy@mylegalletters.com. You also have the right to complain to the Information Commissioner's Office (ICO) in the UK or your local supervisory authority.

9. Cookies

We use essential storage only (authentication token and session preferences in your browser's local storage). We do not use third-party advertising cookies.

10. Changes

We may update this policy; material changes will be posted here with a new "last updated" date.