Data Processing Agreement

Leygo is a product of Agendos LLC, a company registered in Wyoming, USA. Questions about this page: privacy@leygo.ai.

Terms

1. Roles. Controller: the Customer law firm. Processor: Leygo. The subject matter, duration, nature and purpose of the processing, and the categories of data, are set out in Annex A below.
2. Instructions. Processor processes personal data only on Controller’s documented instructions, unless required by law — in which case Processor informs Controller unless prohibited from doing so.
3. Confidentiality. All personnel authorised to process personal data are bound by confidentiality obligations. No Processor personnel access Controller data except with Controller’s permission for a support request, and such access is logged.
4. Security. Appropriate technical and organisational measures, including encryption at rest, TLS 1.2+ in transit, per-tenant isolation, access logging and least-privilege controls. Annex B below.
5. No training. Personal data is never used to train, fine-tune or improve AI models.
6. Subprocessors. Controller authorises the subprocessors listed in the Privacy Policy. Processor gives prior notice of changes, and Controller may object on reasonable data-protection grounds.
7. Data subject rights. Processor assists Controller in responding to data-subject requests — access, correction, deletion, portability — without undue delay.
8. Breach notification. Processor notifies Controller of a personal data breach without undue delay, and in any case within 72 hours of becoming aware of it, with the information reasonably required for Controller’s own notification obligations.
9. International transfers. Where personal data is transferred across borders, the parties rely on Standard Contractual Clauses or equivalent contractual protections, as set out in Annex C below. Drafted to be compatible with PIPEDA, Quebec Law 25, the New Zealand Privacy Act 2020, and the GDPR where applicable.
10. Audit. Processor makes available the information reasonably necessary to demonstrate compliance, and permits audits no more than once in any twelve-month period, on notice, at Controller’s cost.
11. Return and deletion. On termination, the export window and deletion timeline below apply, with written confirmation on request.

You have a 30-day window after cancellation to export everything. All Customer data is then permanently deleted from active systems within 14 days after your export completes, or 45 days after cancellation at the latest — whichever comes first. Backups are purged on a rolling basis within 35 days thereafter, and written confirmation of deletion is provided on request.

Annex A — processing details

• Subject matter: provision of an AI practice assistant for client intake, communication, document collection, matter records and billing administration.
• Duration: the term of the Customer’s subscription, plus the export and deletion window below.
• Nature and purpose: storage, retrieval, transcription, summarisation and transmission of Controller’s client and matter records, on Controller’s instructions.
• Categories of data subjects: the Controller’s personnel, and the Controller’s clients and their counterparties where the Controller submits their data.
• Categories of personal data: contact details, identity documents and other files submitted by clients, conversation and voice-note content and transcripts, email content from connected mailboxes, appointment details, matter records and billing records.

Annex B — security measures

• Encryption of Customer data in transit (TLS 1.2+) and at rest.
• Logical per-tenant isolation; every request is scoped to the firm that made it.
• Least-privilege access controls; no staff access to Customer data without Customer permission for a support request, with such access logged.
• Segregated production credentials and no use of Customer data in development or test environments.
• Backups, purged on the rolling cycle stated in the retention terms above.

Annex C — transfers and subprocessors

Customer data is stored in the United States. Where a transfer of personal data leaves the data subject’s jurisdiction, it is made under Standard Contractual Clauses or the equivalent contractual protections offered by the receiving subprocessor.

Countersignature

A firm that needs a countersigned copy of these terms can request one at privacy@leygo.ai.