Privacy Notice

lawyerbase.ai (“lawyerbase”, “we”, “us”) is operated by Ideasets Teknoloji Yapay Zeka Ticaret A.Ş., a company incorporated in the Republic of Türkiye (“Ideasets”). Ideasets is the data controller for the personal data described in this notice — under the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and, where it applies to users in the European Economic Area and the United Kingdom, the General Data Protection Regulation (“GDPR”).

For anything in this notice, write to contact@lawyerbase.ai.

We collect only what the service needs to work. Specifically:

Account data. When you create an account: your email address and a password. Passwords are handled by Amazon Cognito, our identity service — we never see or store them in readable form. If you enable two-factor authentication, the authenticator secret is likewise held by Cognito, not by us.

Sign-in with Google or Amazon. If you sign in with a Google or Amazon account, we receive only your email address and basic profile identifiers from that provider — never your password, contacts, or anything else in that account.

Your legal work. The questions you ask, the follow-ups you send, and the documents you upload (contracts, memos, filings) are processed to produce your answer. Your conversation history is stored locally in your own browser — not on our servers. Uploaded documents are processed in memory to answer your request and are not retained as a stored copy of your file.

Usage and device data. Standard technical logs (IP address, browser type, pages visited, timestamps) and aggregate performance metrics, used for security, abuse prevention, and keeping the service fast.

Access requests and correspondence. If you write to us or submit a form, we keep the message and your email address so we can respond.

We process your data to: provide the service you asked for (performance of a contract — KVKK art. 5/2(c), GDPR art. 6(1)(b)); keep the platform secure and prevent abuse (legitimate interest — KVKK art. 5/2(f), GDPR art. 6(1)(f)); measure and improve how the site performs (consent for analytics cookies — KVKK art. 5/1, GDPR art. 6(1)(a)); and meet legal obligations where they genuinely apply (KVKK art. 5/2(a), GDPR art. 6(1)(c)).

What we never do: we do not sell your data. We do not train AI models on your questions or your documents. We do not use the content of your legal work for advertising. Your matters are yours.

Your questions and documents are processed by foundation models running on Amazon Web Services (Amazon Bedrock, Frankfurt region). Under the AWS Bedrock terms, the content sent to these models is not used to train them and is not retained by the model providers. The reasoning happens for your answer, and only for your answer.

lawyerbase is a support mechanism: it researches, reasons, and cites. The judgment — and the professional responsibility — always remains with the human using it.

Our infrastructure runs on Amazon Web Services in the European Union (Frankfurt, eu-central-1), with content delivery through Amazon CloudFront. Where data transits outside Türkiye or the EEA (for example, through a global CDN edge), it does so under the safeguards those frameworks require — standard contractual clauses and the KVKK's transfer conditions.

We share data only with the processors the service is built on:

Amazon Web Services (hosting, identity via Cognito, AI processing via Bedrock — Frankfurt, EU) · Google (sign-in with Google, if you choose it; Google Analytics for aggregate site statistics) · Amazon (sign-in with Amazon, if you choose it). Each acts under contract terms binding them to confidentiality and data protection. No other third party receives your data — unless the law compels it, in which case we disclose the minimum required.

Account data: for as long as your account exists, then deleted. Conversation history: held in your own browser — clear your browser storage or sign out of all devices and it is gone; we cannot recover it, because we never had it. Security logs: up to 12 months. Correspondence: as long as needed to resolve the matter.

Under KVKK article 11 and, where applicable, GDPR articles 15–22, you may: learn whether we process your data; request access, correction, or deletion; object to processing; request portability; and withdraw consent at any time where processing rests on consent. Write to contact@lawyerbase.ai — we respond within 30 days as KVKK requires. You may also lodge a complaint with the Turkish Personal Data Protection Authority (KVKK Kurumu) or, in the EEA, your local supervisory authority.

All traffic is encrypted in transit (TLS). Identity is handled by Amazon Cognito with optional two-factor authentication. Access to production systems is restricted to a single approved AWS account with least-privilege controls. We treat your legal work with the confidentiality the profession itself demands.

lawyerbase is a professional tool and is not directed at children under 16. We do not knowingly collect their data.

When we change this notice in any material way, we will update the date at the top and, for significant changes, tell you in the product. Cookies are covered separately in our Cookie Notice.