Privacy Policy

Leygo is a product of Agendos LLC, a company registered in Wyoming, USA. Questions about this page: privacy@leygo.ai.

The short version

• Your firm owns all of its data. We process it only to run the service for you.
• Your data — and your clients’ data — is never used to train AI models.
• Each firm’s data is isolated in its own environment.
• You can export everything, in standard formats, at any time.
• When you leave, you get a 30-day export window and then everything is permanently deleted.

1. What we collect

From Customers (law firms): account and contact details, firm configuration provided during setup, billing status (payment card details are handled by our payment processor and never touch our servers), and support communications.

On behalf of Customers (client and matter data): intake conversations, documents uploaded by clients, voice notes and their transcripts, emails processed through connected inboxes, appointment details, and matter summaries generated by the assistant. We process this data solely as your service provider, on your instructions. You are the data controller; we are the processor.

From website visitors: standard server logs (IP address, browser, pages viewed), and — only where you have allowed it through the notice on leygo.ai — a first-party count of page visits. We use no advertising trackers and no third-party analytics scripts.

2. How we use data

Only to: provide and operate the service; generate the assistant’s responses and summaries for your firm; send routine service communications; provide support when you ask for it; and comply with law. We do not sell personal data, and we do not use Customer or client data for advertising.

3. AI processing — no training, ever

No firm or client data — conversations, documents, emails, voice notes or knowledge bases — is ever used to train, retrain, fine-tune or improve any AI model, ours or a third party’s. Leygo uses enterprise AI endpoints under commercial terms that prohibit the use of your data for model training.

4. Connected email accounts

If you connect a Google email account, Leygo’s use of information received from Gmail APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Email data is used only to provide the inbox features you enable — triage, drafting for your review, filing to matters — is never used for advertising, and is never transferred to third parties except as necessary to provide those features, for security, or to comply with law. Equivalent limits apply to any other email provider you connect.

A connected mailbox is admitted to an assistant read-only by default. Widening what an assistant may do with it is a separate, deliberate act by the firm, and the grant records that it was made.

5. Subprocessors and data location

Customer data is stored in the United States. Locations above are each provider’s primary processing region. We will notify Customers before adding or replacing a subprocessor that processes Customer data.

Note for Quebec firms: Customer data may be stored outside Quebec and Canada as described above; we disclose this in accordance with Quebec’s Law 25.

6. Security

Data is encrypted in transit (TLS 1.2+) and at rest. Each firm’s data is logically isolated. Leygo staff cannot access your firm’s data except with your explicit permission for a support request, and such access is logged. See our Security page.

7. Your data: export at any time

You can export all of your firm’s data — conversation logs, intake records, transcripts, documents and summaries — in standard formats (ZIP / PDF / JSON) at any time during your subscription, through the service or by written request to privacy@leygo.ai, fulfilled within 7 days.

8. Retention and deletion

While your subscription is active your data is retained and under your control.

You have a 30-day window after cancellation to export everything. All Customer data is then permanently deleted from active systems within 14 days after your export completes, or 45 days after cancellation at the latest — whichever comes first. Backups are purged on a rolling basis within 35 days thereafter, and written confirmation of deletion is provided on request.

You may also request deletion of specific records at any time.

9. Individual rights

Clients of our Customers should direct access, correction or deletion requests to their law firm, which is the controller; we will assist the firm in fulfilling them. Where local law — including PIPEDA, Quebec Law 25, the New Zealand Privacy Act 2020, or the GDPR where applicable — grants you rights directly against us, you may exercise them at privacy@leygo.ai. You may also complain to your local privacy regulator.

10. Changes

We will post updates here and, for material changes, notify Customers by email at least 14 days before they take effect.