Effective Date: 19 January 2026

1. Introduction

MindAI Technologies Limited ("Company", "we", "us", or "our") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.ilegalworks.com and use our services.

This Privacy Policy has been drafted in compliance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the UK GDPR, the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, and other applicable data protection laws.

By accessing or using our Website and services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

2. Data Controller Information

The data controller responsible for your personal data is:

MindAI Technologies Limited

Email: Support@i-Legal.me

Website: www.ilegalworks.com

For inquiries regarding data protection or to exercise your rights under applicable data protection laws, please contact our Data Protection Officer at: Support@i-Legal.me

3. Personal Data We Collect

We collect and process the following categories of personal data:

3.1 Information You Provide Directly

Identity Data: Full name, title, and government-issued identification numbers where required.
Contact Data: Email address, telephone numbers.
Account Data: Username, password (encrypted), account preferences, and subscription details.
Financial Data: Payment card details, bank account information, billing address, and transaction history.
Professional Data: Company name, job title, and business sector.
Content Data: Documents you upload, queries you submit, and any other content you provide through our services.

3.2 Information Collected Automatically

Technical Data: IP address, browser type and version, operating system, device identifiers, and hardware configuration.
Usage Data: Pages visited, time and date of visits, time spent on pages, clickstream data, and feature usage patterns.
Location Data: Approximate geographic location derived from IP address.
Cookie Data: Information collected through cookies, web beacons, and similar technologies.

3.3 Information from Third Parties

Identity and contact data from business partners and referral sources.
Technical data from analytics providers and advertising networks.
Credit reference and fraud prevention data from relevant agencies.

4. Legal Bases for Processing

We process your personal data on the following legal bases under Article 6 of the GDPR:

Legal Basis	Purpose of Processing
Contract Performance	Processing necessary to perform our contract with you, including providing our services, managing your account, and processing payments.
Legitimate Interests	Processing necessary for our legitimate business interests, including improving our services, fraud prevention, network security, and business analytics.
Legal Obligation	Processing necessary to comply with legal obligations, including tax reporting, anti-money laundering regulations, and regulatory requirements.
Consent	Processing based on your explicit consent for marketing communications, non-essential cookies, and processing of special category data where applicable.

5. How We Use Your Personal Data

5.1 Service Provision

To create and manage your account and subscription.
To provide our legal technology services and AI-powered tools.
To process and deliver documents and legal research outputs.
To facilitate Premium Services provided through our affiliate, iLegal Solutions Legal Consultancy LLC.

5.2 Communication

To respond to your enquiries and provide customer support.
To send service-related notifications and updates.
To send marketing communications where you have consented.

5.3 Service Improvement

To analyse usage patterns and improve our services.
To train and improve our AI models (using anonymised and aggregated data only).
To conduct research and development activities.

5.4 Security and Compliance

To detect, prevent, and address fraud and security issues.
To verify your identity and prevent unauthorised access.
To comply with legal and regulatory requirements.

6.1 Affiliated Entities

We ONLY share data with our affiliate, iLegal Solutions Legal Consultancy LLC, which provides Premium Services on a per-document request basis (WHEN You opt for the Premium Services ONLY).

6.2 Service Providers

We engage third-party service providers who process personal data on our behalf, including cloud hosting providers, payment processors, analytics services, and customer support platforms.

6.3 Channel Partners

Where you access our services through a channel partner or reseller, we may share relevant data with that partner to facilitate service delivery and billing.

6.4 Legal and Regulatory

We may disclose personal data to comply with legal obligations, respond to lawful requests from public authorities, protect our rights and interests, or in connection with legal proceedings.

7. International Data Transfers

Your personal data may be transferred to and processed in countries outside your country of residence. Such transfers are made in compliance with applicable data protection laws using one or more of the following safeguards:

Transfers to countries with an adequacy decision from the European Commission or UK Government.
Standard Contractual Clauses approved by the European Commission (SCCs).
Binding Corporate Rules where applicable.
Your explicit consent for specific transfers.

8. Data Retention

We retain your personal data only for as long as necessary. Retention periods vary based on the type of data:

Account Data: Retained for the duration of your account plus 7 years thereafter.
Transaction Data: Retained for 7 years for tax and accounting purposes.
Usage Data: Retained for 24 months in identifiable form; thereafter in anonymised form.
Marketing Preferences: Retained until you withdraw consent or request deletion.
Document Content: Deleted within 90 days of processing unless you request longer retention.

9. Your Data Protection Rights

Under applicable data protection laws, you have the following rights:

Right of Access: You have the right to request a copy of the personal data we hold about you.
Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data.
Right to Erasure: You have the right to request deletion of your personal data in certain circumstances.
Right to Restriction: You have the right to request restriction of processing in certain circumstances.
Right to Data Portability: You have the right to receive your personal data in a structured, commonly used format.
Right to Object: You have the right to object to processing based on legitimate interests or for direct marketing.
Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us at privacy@ilegalworks.com. We will respond to your request within one month.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data. These measures include:

Encryption of data in transit and at rest using industry-standard protocols.
Access controls and authentication mechanisms.
Regular security assessments and penetration testing.
Employee training on data protection and security.
Incident response and breach notification procedures.

11. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our Website with a new effective date.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us: