LegalNod Privacy Policy

Effective 2026-11-17

Who we are

LegalNod is operated by Ostrel Software LLC, a Washington limited liability company ("LegalNod", "we" or "us").

Changes to this policy

We may update this policy from time to time. When we do, the new version is shown to each account holder with its effective date, and they are asked to accept it before they continue. New versions of this policy never apply retroactively. We keep the exact text of every version, so the one you accepted can always be produced.

How this policy applies

This policy describes the information we collect from you, how we use it and our legal basis for doing so. It also covers whether and how that information is shared, and your rights and choices. It applies to the legalnod.com website (the "Site") and to the LegalNod applications and connections (the "Services"). If you see a capitalized word that is not explained here, it is defined in our Terms of Service.

LegalNod holds information in two different roles:

• Matter Content. What a Client and their attorney or legal team send each other through the Services belongs to that relationship. We handle it on behalf of the Practice, as its service provider (a "processor" under some laws), to carry it between the two. Section 12 of the Terms of Service sets out our promises of confidentiality for it. If this policy and that section ever differ about Matter Content, the one that protects it more applies.
• Account and website information. For your account details, sign-in records, acceptance records, plan details and visits to the Site, we decide how the information is used and we are responsible for it.

By using the Services you acknowledge that you have agreed to our Terms of Service and that you have read and understood this policy.

Information you provide to us

We collect information you provide directly to us, information from third parties and information we collect through automated means. For example, we collect:

• Account details: your name, your email address, your role and your state.
• For attorneys and legal teams: license details (states and bar numbers), practice name, practice areas, team members, fee terms and engagement notices.
• Invitations: an attorney or legal team may give us the names and email addresses of their own clients, colleagues and outside counsel so that an invitation can be prepared for them.
• Matter Content: what a Client writes to their attorney, answers to intake questions, documents attached to a matter, the name of the other party, attorneys' directions, questions, answers and advice, and working notes, documents and work saved to a matter by a connected AI Assistant. Matter Content often includes information about other people.
• Agreement records: when you accept the Terms of Service and this policy, we record the time, the version and a fingerprint of each document, the exact sentence you agreed to, and the internet address and browser used. Where a Client agrees to a Practice's engagement terms or fee through the Services, we record that too.
• Plan details for Practices: the plan chosen and the number of attorney seats. Payment card details are given to our payment processor and are not stored by LegalNod.
• Notification settings, and the device subscription your browser creates when you turn notifications on.
• Communications you send to us, for example when you ask for support or report a problem.

You may decline to provide us with your information. However, this will limit your ability to register for an account or use the Services.

How we collect information

• From you, when you create an account, set up a Practice, send or answer a Nod, or contact us.
• From the Practice that invited you: your name, your email address and your relationship to that Practice.
• From a sign-in provider you choose. If you sign in with Google or Microsoft, we receive your name and your verified email address from that provider, and we use them only to sign you in or to start your account. We receive nothing else: no password, contacts, mail, files or calendar. For how those providers handle your information, please refer to their own privacy policies.
• From an AI Assistant you connect. We receive what it sends to your matter through the connection (requests, questions, working notes, documents and work for review), the name of the app, and when it connected and read. We do not receive your conversation with it.
• Through automated means when you use the Services: sign-ins, the device and browser used, the internet address, and a tamper-evident record of what happened on each matter and when.
• From public bar records, to check the license details an attorney gives us.
• On the Site, through Google Analytics: which pages and films you view, how much of a film you watch and which parts you skip to, how far down a page you scroll and which sections you reach, which buttons you click and which questions you open, the page or campaign that brought you there, and your browser, device and approximate location. See "Cookies and analytics" below.

How we use this information

Subject to applicable law and the controls available to you, we use the information we hold to:

• Provide the Services: carry matters between Clients and Practices, sign you in, send the notifications you have turned on, and keep matter records.
• Communicate with you about your account and your matters, and about changes to our terms and policies.
• Check attorney licenses and manage plans and billing for Practices.
• Keep records of what was agreed and of what took place on a matter.
• Operate, understand and improve the Site and the Services, using account, usage and website visit information.
• Detect, investigate and prevent activities that may violate our policies or be illegal, and keep the Services secure.
• Meet our legal obligations.

Where the law asks for a legal basis, we rely on performing our contract with you, on our legitimate interests in running, securing and improving the Services and in keeping records, on your consent where we ask for it, and on our legal obligations.

We use Matter Content only to run the Services for the Practice and the Client concerned. We do not use Matter Content to train AI models, for advertising, for marketing or for analytics.

We do not sell personal information, and we do not share it for targeted advertising. We do not send offers for third-party products.

We may compile statistics about how the Services are used, such as counts, timings and which features are used. They contain no Matter Content and identify no person, and we use them to run and improve the Services.

How this information is shared

Nothing is shown publicly

LegalNod has no public profiles, directories, forums or comments. A Practice's invitation page shows the Practice's name, its attorneys and their verified license states to anyone who holds the invitation link.

Within a matter

A matter is seen by the Client who opened it and by the Practice it was sent to: the attorney it is assigned to, the lead of that Practice, and the colleagues or outside counsel that Practice has put on its team. A company legal team sees matters sent by its own company's people. For a former client, the name of the other party is shown to the attorney for a conflict check before the facts of the matter are.

With an AI Assistant you connect

An AI Assistant you connect receives only what LegalNod's connection is built to give it. For a Client, that is the topic and status of a request before an attorney accepts and, once the matter is Under the Nod, the attorney's direction and answers and, where the attorney allows it, the account the Client wrote. What an AI Assistant receives is then held by its provider under that provider's terms and privacy policy.

With service providers

We share information with service providers that help us run the Services, and we require them to use it only for the purposes we have authorized and to protect it:

• Hosting and database providers, which store and process all information on our behalf, including Matter Content, under duties of confidentiality.
• Our email delivery provider (currently Zoho ZeptoMail), which delivers sign-in codes, copies of what you agreed to and service messages. Emails from LegalNod do not contain Matter Content.
• The notification service run by your browser or device maker, which delivers notifications you have turned on. Our notifications do not name a Client or describe a matter.
• Google and Microsoft, if you choose to sign in with them.
• Google, as our analytics provider for the Site, which receives website visit information. See "Cookies and analytics" below.
• Our payment processor, for Practices on a paid plan.
• An AI model provider (currently Anthropic), only where LegalNod's own intake assistant is switched on for a matter. What a Client writes to that assistant is processed by the provider on our behalf, and we use such a provider only on terms that bar it from training its models on that content.

To comply with the law and protect LegalNod

For Matter Content, section 12 of the Terms of Service applies: if we receive a legal demand, we notify the Practice concerned, unless the law forbids it, so that the Practice and its Client can assert any protection that applies, and we disclose only what we are legally compelled to disclose.

For other information, we reserve the right to disclose it when we believe that doing so is reasonably necessary to comply with the law or with law enforcement, to prevent fraud or abuse, or to protect the legal rights, property or safety of LegalNod, its people, its users or others.

If the business changes hands

If the business that operates LegalNod is merged, reorganized or sold, the information we hold passes to the successor, which remains bound by this policy and by section 12 of the Terms of Service.

Links to other websites and services

The Site and the Services may link to other websites or services, and an AI Assistant you connect is run by its own provider. Their privacy practices may differ from ours. When you use them, their own privacy policies govern.

Cookies and analytics

LegalNod uses the cookies needed to keep you signed in.

Our public website also uses Google Analytics, which sets its own cookies, to understand how visitors find the website and use it. Google receives the website visit information described above, including your internet address, and processes it under its own terms. Google signals and advertising features are turned off, and visitors in the European Economic Area, the United Kingdom and Switzerland are measured without analytics cookies.

When an attorney or a member of a legal team creates an account, we send Google Analytics one sign-up event linked to that website visit. It contains no name or email address. Nothing about Clients, matters, or anything written inside LegalNod is sent to Google Analytics.

LegalNod does not use advertising cookies. You can block or delete cookies in your browser settings, and Google offers a browser add-on that stops Google Analytics from measuring your visits.

Retention

We retain account details while your account is open. Matter records are kept so that attorneys can meet their record-keeping duties, and attorneys can export them at any time. Documents a Client removes before sending, and documents attached to a matter the Client withdraws before it is accepted, are erased. After a Practice closes its account, we delete its Matter Content from our active systems on its written request, as section 21 of the Terms of Service describes.

Acceptance records and the record of each matter are kept for as long as they may be needed to show what was agreed and what took place. We also retain information to the extent necessary to comply with our legal obligations, resolve disputes and enforce our agreements.

Where information is kept

Ostrel Software LLC is a United States company. The LegalNod application and its database are hosted in data centers in Germany. Some of our service providers, including those for email delivery, website analytics and sign-in, process limited information in the United States and other countries. The rules that protect personal information in those countries may differ from the rules in yours.

Your rights

You can see and correct your account details, export the records you are entitled to, turn notifications off, disconnect an AI Assistant, and ask us to close your account.

Depending on where you live, you may have further rights regarding your personal information, including the rights to access it, correct it, delete it, receive a copy of it, and restrict or object to certain uses of it. Residents of the European Economic Area and the United Kingdom also have the right to lodge a complaint with their local data protection authority. To use any of these rights, write to privacy@legalnod.com. We will not treat you differently for doing so.

Where the information you ask about is part of an attorney's client file, the attorney decides how the request is met under the rules that bind them, and we will refer your request to that attorney. We may retain certain information as required by law or as necessary for our legitimate business purposes.

Email and notifications

We send you email about your account and your matters, such as sign-in codes, a copy of what you agreed to, and service announcements when it is necessary to send them. We do not send marketing email to Clients. If we send product news to attorneys, each message will carry a way to stop it.

Notifications on your device are sent only after you turn them on, and you can turn them off at any time in your settings or in your browser.

Security

We take security seriously. Matter Content and documents are stored encrypted. Sign-in codes and connection tokens are stored only as fingerprints. LegalNod has no passwords to reuse or leak: you sign in with a code sent to your email address, with a passkey, or through Google or Microsoft, and we encourage you to add a passkey. Each time an attorney opens a document, or a connected AI Assistant reads a matter, it is noted in that matter's record. The tools our staff use from day to day show who is on a matter, when, and its status, and do not show its content.

However, no method of transmission over the internet or of electronic storage is completely secure, so LegalNod cannot guarantee absolute security. We encourage the responsible disclosure of vulnerabilities in our Services by email to security@legalnod.com.

Privacy contact

Questions and requests about this policy: privacy@legalnod.com. You can also write to us at Ostrel Software LLC, 522 W Riverside Ave, Ste N, Spokane, WA 99201.

Children

LegalNod restricts the use of the Site and the Services to individuals age 18 and above. LegalNod does not knowingly collect personal information from anyone under 18.