Your privacy is fundamental to Legum AI Pak

We collect only what is necessary to provide a secure, verified legal platform:

• Personal information — full name and account details you provide.
• CNIC — collected for identity verification and to keep the platform free of fraudulent and banned accounts.
• Date of birth — to confirm you meet the minimum age requirement (18+).
• Phone number — for account security and, where needed, to verify complaints.
• Email — for authentication, notifications and account recovery.
• Lawyer verification documents — bar council details and certificates submitted by lawyers for review.
• Uploaded files — documents you add to a Matter Management workspace or to AI tools.
• AI queries — the prompts and research you run, stored privately to your account.
• Payment & billing data — subscription plan status and limited payment confirmation data returned by our payment gateway when you pay for a platform plan. Full card numbers are processed by the payment provider, not stored on Legum AI Pak servers.
• Usage analytics — aggregated, non-identifying metrics that help us improve the platform.
• Cookies — essential, security, analytics and preference cookies (see our Cookie Policy).
• Device information — basic technical data such as browser and device type for security and compatibility.

Data is collected to authenticate users, verify identities and lawyers, deliver AI research and legal-service features, process platform subscription payments, secure the platform against abuse and fraud, support complaint resolution, and improve reliability through aggregated analytics. We do not sell your personal data.

• Encryption in transit — all traffic is served over HTTPS/TLS.
• Secure authentication — passwords are hashed; sessions use signed, HttpOnly cookies with expiry.
• Access control — role-based access control restricts what each account can reach.
• Secure storage — uploaded files are validated, renamed and stored outside public directories, with access checks on every download.

Every account's data is isolated. Lawyers cannot access another lawyer's data and clients cannot access another client's data. Your AI conversations, saved research and generated drafts belong exclusively to your account.

• Access and review the personal information associated with your account.
• Request correction of inaccurate information.
• Request deletion of your account and associated personal data, subject to legal and security retention requirements.
• Control optional cookies through your browser settings.

To exercise these rights, contact us using the details in the Contact section below.

To operate our subscription and AI-credit system we process your plan, renewal dates, AI-credit consumption, storage usage and fair-usage metrics. Platform subscription payments are processed through our payment gateway as described in the Refund Policy. For the student discount, we review the university name, roll number, year/semester and university ID you submit; these are used only to verify eligibility and are handled confidentially.

• AI credits and usage are tracked to enforce plan limits and show your remaining balance.
• Independent Lawyer contribution rewards include Legal Q&A answers and published Legal News (paid plans). Law Firm renewal discounts use Legal Jobs and Legal News only — forum answers do not credit the firm pool. Official Legal Blogs are written only by Legum AI Platform and do not count toward community contribution discounts.
• Legum AI Pak does not store full payment card details; card data is handled by the payment gateway provider.

To protect your account we record limited device and session information — device type, browser, operating system, a device fingerprint, approximate location (country/city), IP address and login time — and apply device login limits and secure session handling.

• Device login limit: 1 desktop and 1 mobile device (maximum 2 active sessions).
• Signing in on a new phone or computer signs out the previous device of the same type, with email and in-app notification.
• Suspicious or geographically distant logins require an additional one-time passcode (OTP).
• You can view trusted devices and full login history, sign out individual or all devices, and we force re-authentication after a password change.
• Inactive sessions expire automatically after a configurable timeout.

Matter Management workspaces, uploaded documents, AI conversations, proposals, invoices and client–lawyer messages are confidential. Access is governed by role-based access control, and within a firm only assigned team members can open a given matter.

We retain personal data only as long as necessary to operate the platform, meet legal obligations, and protect against fraud and abuse. You may request account deletion at any time. Certain records (for example, identity-verification logs or a permanently banned CNIC) may be retained where required to keep the platform safe and to prevent re-registration by banned accounts.

We use essential, authentication, security, analytics and preference cookies. For details and how to manage them, see our Cookie Policy.

Legum AI Pak operates in Pakistan and handles personal data in line with applicable Pakistani laws and good-faith data-protection practices. Where local data-protection legislation applies, we align our handling of personal information accordingly. This policy may be updated from time to time; material changes will be reflected on this page.

• Email Address: [email protected]
• Contact Number: 0334 7668157