our privacy policy

1. Introduction

1.1 AVITECH INVESTMENTS LTD ("we", "us", "our", "the Company") respects your privacy and is committed to protecting your personal data.

1.2 This Privacy Policy sets out how we collect, use, disclose, store and delete personal data in connection with your use of the Platform operated under the domain LEGALPDF.CO (the "Platform").

1.3 By using the Platform you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this policy, please stop using the Platform.

1.4 We act as the data controller in respect of the personal data we collect through the Platform.

2. Definitions

For the purposes of this Privacy Policy:

"Account" means your registered profile on the Platform or a profile linked to you via a Credit issued by a Lawyer.

"Lawyer" means a verified legal professional registered on the Platform and authorised to allocate Credits to Users.

"User" means an individual operating under a valid Credit issued by a Lawyer and using the Platform to generate a Document.

"Credit" means a token issued by a Lawyer through the Platform that allows one Document generation event.

"Document" means any file (PDF, HTML, ZIP etc.) generated by the Platform from email or WhatsApp data.

"Third-Party Integrations" means links with external services such as Google LLC, Microsoft Corporation, and Meta Platforms Inc.

"Personal Data" means any information relating to an identified or identifiable individual in the context of the Platform.

"Services" means the functionality offered by the Platform including retrieval, processing, formatting, storage and delivery of Documents.

3. What Personal Data We Collect

3.1 We collect only the data necessary to provide the Services, including:

• Email address of the User (via supported provider: Google Gmail/Google Workspace or Microsoft Outlook/Hotmail) for login and API access;
• Email address of the correspondent supplied by the User for the purpose of retrieving communications;
• Exported chat files from WhatsApp (ZIP) when using the WhatsApp-to-Document service;
• Data generated by the Platform during Document creation (email contents, chat contents, media file references) associated with the Document;
• Account and contact information of the Lawyer for the purpose of linking the User's Credit and supervising the process.

3.2 We do not collect or store login credentials for your email provider (you authenticate directly with Google or Microsoft).

3.3 We do not collect unrelated personal data (e.g., social media profiles, financial data, health data) beyond what is strictly necessary for the Services.

4. How We Use Your Personal Data

4.1 We process your Personal Data to:

• Authenticate your Account through a supported provider;
• Retrieve relevant email or chat content from your authorised mailbox or exported archive;
• Generate the Document (PDF, HTML, ZIP) based on your instructions;
• Make the Document available for download by you and the Lawyer;
• Send you and the Lawyer email notifications regarding the password-protected Document;
• Manage the lifecycle of your Account (creation, temporary storage, deletion).

4.2 We will only use your data for these purposes and will not use it for marketing or profiling unless you explicitly consent.

5. Legal Basis for Processing

5.1 Under UK data protection law (including the UK GDPR and Data Protection Act 2018), we rely on the following legal bases:

• Performance of a contract: processing necessary to provide the Services you requested;
• Legitimate interests: processing for the purpose of maintaining security, managing our Platform, preventing abuse;
• Consent: where we ask you to provide explicit consent (e.g., if you opt-in for non-core features).

5.2 You have the right to withdraw any consent you may give; however, this will not affect the lawfulness of processing before the withdrawal.

6. Data Sharing and Disclosure

6.1 We do not sell, trade or lease your Personal Data to third parties.

6.2 We only share your data with:

• The Lawyer who issued your Credit — so they can access the corresponding Document;
• The third-party service providers (Google LLC, Microsoft Corporation, Meta Platforms Inc.) for the sole purpose of implementing the relevant integrations (API access / exported chat upload).

6.3 We ensure that any third-party recipient abides by appropriate security and confidentiality obligations.

6.4 We may share your data if required by law, a court order, or regulatory authority in the UK.

7. Third-Party Integrations

7.1 The Platform uses read-only API access or user-provided exports to integrate with:

• Google LLC – Gmail/Google Workspace;
• Microsoft Corporation – Outlook/Hotmail;
• Meta Platforms Inc. – WhatsApp chat exports via authorised bot.

7.2 You authenticate directly with Google or Microsoft when providing email access; we do not have access to your login credentials.

7.3 For WhatsApp chat exports, you provide the chat ZIP file yourself. We convert it into Documents as described in Section 5.

7.4 These integrations are required for the core functionality of the Platform; their respective privacy policies and user-data policies may also apply when you interact with their services.

8. Data Storage, Retention & Deletion

8.1 All Documents and associated data are stored temporarily on our servers.

8.2 When a Document is generated, it appears in both the User's and the Lawyer's dashboards. Once the User has downloaded their copy, their Account and associated data are immediately deleted (cf. Section 6.3 of Terms of Service).

8.3 Once the Lawyer has downloaded the Document, we permanently delete the Document and all associated data from our servers.

8.4 We do not retain any Document or user data beyond the lifecycle described above.

8.5 Any backup copies are securely destroyed once the deletion point is reached.

8.6 If you request deletion of your data prior to those events, you may contact us via the details in Section 16; we will accommodate and delete data as soon as practicable.

9. Data Security

9.1 We apply appropriate technical and organizational measures to protect your Personal Data against unauthorised or unlawful processing, accidental loss, destruction or damage. These include encryption of data in transit and at rest, access controls, secure API configurations, and regularly reviewed security procedures.

9.2 Each Document is protected by a unique password, which is provided to the User and the Lawyer via secure email.

9.3 Whilst we strive for high security, no system is impenetrable and we cannot guarantee absolute security; you acknowledge that you provide data at your own risk.

10. Cookies and Tracking Technologies

10.1 We use cookies and similar tracking technologies on the Platform to ensure proper functioning, security, and performance.

10.2 Cookies categories may include: essential cookies, performance cookies, functional cookies.

10.3 By using the Platform you consent to cookies in accordance with our Cookies Policy (published separately).

10.4 You can manage your cookie preferences via the banner or settings mechanism available on the Platform.

11. Links to Other Websites

11.1 The Platform may contain links to third-party websites or services which are not operated or controlled by us. We are not responsible for their privacy practices and encourage you to review their policies.

12. Your Rights

12.1 You have rights under the UK data protection regime including:

• the right to access your Personal Data;
• the right to rectify inaccurate or incomplete data;
• the right to erasure (to have your data deleted) subject to the retention schedule set out above;
• the right to restrict processing;
• the right to object to processing;
• the right to data portability;
• the right to withdraw consent at any time (where relevant) and the right to lodge a complaint with a supervisory authority (in the UK, the Information Commissioner's Office ("ICO")).

12.2 To exercise these rights, please contact us using the details below. We will respond within a reasonable timeframe and in accordance with applicable UK law.

13. International Transfers

13.1 In the course of our Services we may transfer some Personal Data to or from countries outside the UK or European Economic Area. Such transfers are subject to appropriate safeguards such as standard contractual clauses or other UK-approved mechanisms.

13.2 We will only transfer data where required for the performance of the Services or by law.

14. Changes to This Privacy Policy

14.1 We reserve the right to update or amend this Privacy Policy at any time.

14.2 The date of "Last Updated" at the top will reflect the effective date of the revision.

14.3 We will notify Users of significant changes by posting the updated policy on the Platform; your continued use of the Platform after changes constitutes acceptance of the revised policy.

15. Children

15.1 The Platform is not intended for use by persons under the age of 18. We do not knowingly collect Personal Data from children under that age. If you believe we have inadvertently collected data from a child under 18, please contact us and we will delete it promptly.

16. Contact Information

If you have any questions or complaints about this Privacy Policy or our data handling practices, you may contact:

AVITECH INVESTMENTS LTD
Operator of LEGALPDF.CO
📧 legalpdf.mail@gmail.com
📞 +44-7548-255-377