Privacy Policy
Effective May 18, 2026 · Sovereign Holdings LLC
1. Who we are
Sovereign Holdings LLC (“Sovereign Holdings,” “we,” “us”) operates the LegalBridge AI web and mobile application (the “Service”). We are an Alabama limited liability company. For privacy questions, contact us through the in‑app Help & Support channel or via the address on our Contact page.
2. Data we collect
- Account data: email, chosen username, optional name, phone, profile photo, role.
- Authentication data: sign‑in provider (email, Google, Apple), session tokens.
- Content you create: conversations with the assistant, documents, support tickets, cabinet notes.
- Billing data: Stripe customer ID, subscription status, last 4 of card (held by Stripe, not us).
- Compliance data: Terms & Conditions acceptance, disclaimer acknowledgments, audit log of administrative actions.
- Device data: coarse IP, browser/OS, app version — for security and abuse prevention.
3. How we use it
- To provide and secure the Service (authentication, RLS-scoped access, audit logging).
- To process payments and manage subscriptions through Stripe.
- To generate AI responses through trusted model providers (Google, OpenAI, Anthropic) routed via the Lovable AI Gateway.
- To send transactional emails (sign‑in, receipts, ticket replies).
- To comply with Alabama LLC governance and applicable law.
4. Who we share it with
We share data only with infrastructure providers strictly necessary to run the Service: Supabase (database, auth, storage), Stripe (payments), Lovable AI Gateway and its model providers (assistant responses), Apple and Google (sign‑in and store distribution), and our email delivery provider. Each operates under its own privacy policy and only receives the minimum data needed.
5. Retention
Account, billing, and audit‑log records are retained for as long as your account is active and for up to 7 years after deletion to satisfy U.S. corporate and tax record‑keeping obligations. Conversations and documents are deleted within 30 days of account deletion. Backups roll off within 90 days.
6. Your rights and choices
You can at any time:
- Access & export — request a copy of your data from your Account page.
- Correct — update profile fields directly in your Account.
- Delete — permanently delete your account in‑app from Account → Delete my account. Required by Apple App Store guideline 5.1.1(v) and offered to every user regardless of platform.
- Withdraw consent — revoke T&C consent will sign you out and disable further access until re‑accepted.
7. Children
The Service is not directed to children under 13. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
8. Security
Data is encrypted in transit (TLS) and at rest. Access is gated by per‑row security policies enforced at the database layer. Privileged actions are written to an audit log visible only to authorized officers.
9. International users
The Service is operated from the United States. By using the Service you consent to the transfer of your data to the U.S. and processing under U.S. law.
10. Changes
We will post any material change here and require re‑acceptance of the Terms & Conditions when a change affects user rights.