LawOffice.AI
Start free
Legal

Privacy Policy

Effective Date: August 15, 2026

1. Overview

LawOffice AI (“LawOffice AI”, “we”, “our”, or “us”) provides a Microsoft Word add-in, optional integrations with third-party services such as Google Workspace, and related services (the “Service”). This Privacy Policy explains how we collect, use, disclose, transmit, store, and protect information when you use our Microsoft Word add-in, our website, and related APIs and backend services.

By using the Service, you agree to this Privacy Policy.

2. HIPAA Compliance

We maintain administrative, physical, and technical safeguards designed to support compliance with the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations (“HIPAA”) where applicable to our role as a service provider. If you are a Covered Entity or Business Associate under HIPAA, you are responsible for determining whether and how you may use the Service for Protected Health Information (“PHI”).

If your use of the Service involves PHI, we can provide (or may require) a Business Associate Agreement (“BAA”) as applicable. Please contact us at support@lawoffice.ai.

3. Information We Collect

3.1 Account Information

  • Name
  • Email address
  • Organization name (if applicable)
  • Billing and subscription details (payment information is processed by third-party payment providers)

3.2 Document Content Submitted Through the Microsoft Word Add-in

When you use the Microsoft Word add-in, you may choose to transmit document content to our servers to perform the function you requested. This may include:

  • Full document text
  • Selected text
  • Document structure or metadata needed to complete your request

We do not access your documents unless you initiate an action in the add-in that requires processing.

3.3 Usage and Device Information

We may collect information about how you use the Service for security, troubleshooting, and improvement purposes, such as feature usage, timestamps, approximate location (derived from IP address), browser/device type, and error logs.

4. How Document Data Is Transmitted and Processed

When you use a feature of the add-in that requires processing:

  1. Document content is transmitted securely over HTTPS (TLS 1.2 or higher).
  2. Content is processed on our backend systems to provide the requested functionality.
  3. Content may be temporarily stored and/or stored for a limited period as described in the “Data Retention” section.

We process document content only to provide the functionality you request.

5. Storage, Hosting, and Security (Google Cloud)

We store and host Service data (including document content submitted through the add-in) using Google Cloud Platform (“GCP”), including Google Cloud Storage.

Our security controls include:

  • Encryption in transit: HTTPS/TLS (TLS 1.2+)
  • Encryption at rest: Google Cloud Storage encryption at rest
  • Private storage: Access-restricted storage (no public buckets)
  • Access controls: Identity and Access Management (IAM) and least-privilege access
  • Operational safeguards: monitoring, logging, and security review practices

We do not sell your document content, and we do not make stored documents publicly available.

6. AI Processing, HIPAA BAA, and Zero Data Retention

Certain features of the Service may use automated systems and/or AI to generate outputs requested by the user. When AI features are enabled and you submit document content for AI processing:

  • HIPAA-compliant AI processing: We use AI providers and configurations intended to support HIPAA compliance when applicable.
  • Business Associate Agreement (BAA): We maintain a HIPAA-compliant Business Associate Agreement (“BAA”) with our AI provider(s) for HIPAA-regulated processing, where applicable.
  • No training on your data: We do not permit AI providers to train models on Customer Content, including PHI, submitted through the Service.
  • Zero data retention for AI: We maintain a zero data retention policy for AI processing. This means content submitted for AI processing is not retained by the AI provider after the request is completed, subject to limited transient processing required to deliver the output.

If you do not want document content processed by AI, do not use AI-enabled features.

Exclusion for Google user data: Data received from Google Workspace APIs is excluded from the AI processing described in this section. It is never sent to an AI provider and is never used to create, train, or improve any AI or machine learning model. See Section 7.

7. Google Workspace APIs and Limited Use

If you choose to connect your Google Account to the Service, we request access through Google’s OAuth consent screen. We only receive the data covered by the scopes you expressly approve, and you may revoke that access at any time at myaccount.google.com/permissions.

The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements. LawOffice.AI does not transfer Google user data to any third-party AI/ML service, and no Google user data is used to create, train, or improve any machine learning or artificial intelligence models.

7.1 Scopes We Request and Why

We request only the narrowest scopes needed for the features you choose to use:

  • openid, email — to identify the Google Account you connected and display the connected address.
  • gmail.send — to send email on your behalf when you send a message from within the Service. We use this scope only to send; we do not use it to read, search, or browse your mailbox.
  • calendar.events — to create and manage the calendar events you schedule through the Service, including generating Google Meet links.
  • calendar.calendars.readonly — to read your calendar’s settings in order to determine whether your account can create Meet links. We do not use this scope to read your event contents.

Access is incremental: each feature requests only its own scope, so you are never asked to grant access for a feature you do not use, and you may decline individual scopes at the consent screen.

7.2 Limited Use Commitments

Specifically, with respect to data received from Google Workspace APIs:

  • Limited use: We use Google user data solely to provide and improve the user-facing features you request through the Service.
  • No advertising: We do not use Google user data for advertising, and we do not serve advertisements based on it.
  • No sale or transfer: We do not sell Google user data, and we do not transfer it to others except as necessary to provide or improve the Service, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to users.
  • No AI/ML training: Google user data is never transferred to, or processed by, any third-party artificial intelligence or machine learning service, and it is never used to create, train, fine-tune, evaluate, or otherwise improve any AI or ML model, whether ours or a third party’s.
  • No human reading: We do not allow humans to read Google user data unless we have your affirmative agreement for specific messages or files, it is necessary for security purposes (such as investigating abuse), it is required to comply with applicable law, or the data has been aggregated and anonymized for internal operations.

Google user data is stored and protected using the safeguards described in Section 5, and is deleted on request or when you disconnect your Google Account, as described in Section 9.

8. How We Use Information

We use information to:

  • Provide, operate, and maintain the Service
  • Process document content as requested by you
  • Authenticate users and manage accounts
  • Provide customer support
  • Prevent fraud, abuse, and security incidents
  • Improve reliability and performance
  • Comply with legal obligations

We do not use document content for advertising.

9. Data Retention

We retain document content and related data only as long as necessary to provide the Service and for legitimate business purposes such as security, audit, and troubleshooting, unless a longer retention period is required or permitted by law.

Document Content Retention: Until you delete it

You may request deletion of stored data at any time by contacting: support@lawoffice.ai. We will delete data from active systems within a commercially reasonable timeframe, subject to lawful exceptions.

Google user data: Data received from Google Workspace APIs is retained only as long as needed to provide the features you requested. You may disconnect your Google Account at any time from within the Service or at myaccount.google.com/permissions; when you do, we delete the associated Google user data and stored tokens from active systems within a commercially reasonable timeframe.

Note on AI Processing: Separate from the retention period above, content submitted specifically for AI processing is subject to the organization’s zero data retention policy as described in Section 6.

10. Sharing and Disclosure

We may share information as follows:

  • Service Providers: We use third-party providers (e.g., Google Cloud hosting, payment processors, AI service providers) who process data on our behalf under contractual confidentiality and security obligations.
  • Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request.
  • Business Transfers: If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction.

Google user data: The sharing described above does not include data received from Google Workspace APIs, which is never shared with AI service providers and is otherwise handled only as permitted by the Limited Use requirements described in Section 7.

11. Your Rights and Choices

Depending on your location, you may have rights regarding your personal information, including access, correction, deletion, restriction, or objection to processing.

To exercise your rights, contact: support@lawoffice.ai.

12. Cookies and Analytics

We may use cookies and similar technologies to operate our website, remember preferences, and understand usage. You can control cookies through your browser settings.

13. International Transfers

Your information may be processed in the United States or other jurisdictions where we or our service providers operate. By using the Service, you understand that information may be transferred to these locations.

14. Children’s Privacy

The Service is not intended for individuals under 18, and we do not knowingly collect personal information from children.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will post changes on this page and update the “Last Updated” date above.

16. Contact Us

LawOffice AI
10105 E Via Linda Ste 103-1816
Scottsdale, AZ 85258
Email: support@lawoffice.ai
Phone: (602) 428-4281