Privacy Policy

1. Controller

The data controller is Agileful UG (haftungsbeschränkt). See our Imprint for full contact details.

2. What we collect

Clients

• Identity & contact: name, email, phone, preferred language.
• Case content: the facts, parties, jurisdiction, evidence, documents and any free-text descriptions you submit.
• Technical data: IP address, device and browser information, and basic usage logs.

Lawyers

• Professional profile: name, firm, country, bar / registration ID, declared specialty, years of experience.
• Contact details: email, phone, website.
• Technical data as above.

3. Why we use it (legal bases)

• To provide the service — running the assessment, generating case structuring and (with your consent) matching you with a lawyer (Art. 6(1)(b) GDPR — performance of a contract).
• To send you results — emailing your case summary where you have consented (Art. 6(1)(a) GDPR).
• To operate and improve the platform — analytics, error monitoring, fraud prevention (Art. 6(1)(f) GDPR — legitimate interest).
• To comply with legal obligations (Art. 6(1)(c) GDPR).

4. Sharing of data

We share personal data only where necessary:

• With lawyers in the network — only when you, as a client, have explicitly consented to a lawyer introduction. Only the information needed to evaluate the match is shared.
• With service providers (processors) — hosting, database, email delivery, AI providers used for case analysis. They are bound by data processing agreements.
• With authorities — where required by law.

5. International transfers

Some service providers may process data outside the EEA. Where this is the case, we rely on appropriate safeguards (such as Standard Contractual Clauses) to protect your data.

6. Retention

We keep personal data only as long as necessary for the purposes described above and to comply with legal retention requirements. You may request earlier deletion (see your rights below).

7. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, port or object to the processing of your personal data, and to withdraw consent at any time. You also have the right to lodge a complaint with a supervisory authority.

To exercise these rights, contact us via the address in the Imprint.

8. Security

We use technical and organisational measures including encryption in transit, access controls and row-level security in our database to protect personal data.

9. Changes

We may update this policy. Material changes will be communicated through the platform.