Privacy Policy FyiLegal — privacy information This notice describes how FairCapital LTD ("we", "us") processes personal data in connection with FyiLegal. It is a high-level privacy notice for operational transparency. It is not legal advice and does not claim that GDPR or other privacy compliance is complete for every deployment or processing activity. 1. Operator and roles FairCapital LTD (Company number: 16573571), registered office , operates FyiLegal. Depending on the processing context, we may act as a controller for account, visitor, billing, security, and service-operation data. We may act as a processor where an organisation customer determines the purposes and means of workspace or case-data processing. The exact role depends on the relevant processing context and contract. We do not claim one universal role for every record. 2. Data sources and categories Personal data may come from you; from your organisation or invited collaborators; from service usage; from security and diagnostic systems; and from payment, identity, communication, or infrastructure providers where those capabilities are enabled. High-level categories may include account and profile details, authentication and security data, billing and subscription records, usage and diagnostic logs, support communications, uploaded content, and related operational metadata. The live data-category disclosure shown below this notice remains the deployment-specific public authority for active categories. This fallback body is not an exhaustive inventory. 3. Purposes We may process personal data for operational purposes such as account and access management; providing case, collaboration, and file functionality; billing where enabled; security, abuse prevention, and diagnostics; support and service communication; legal, accounting, and governance obligations; and consent-controlled analytics where enabled. This notice does not state or infer a lawful basis for every processing activity, and it does not treat platform readiness or authority records as legal approval. 4. Privacy requests Where applicable, you may request access, portability, rectification, restriction, objection, or erasure. Execution may be automatic, manual, external, partial, preserved, or blocked depending on the exact data domain. No universal automatic completion is claimed. Identity deletion is not treated as complete while mandatory domain outcomes remain unresolved. Legal holds and other recorded restrictions may block destructive processing. Provider-side follow-up may remain manual or external. Request status summaries, where shown, are operational summaries rather than complete inventories. 5. Retention Retention varies by data category, processing purpose, and applicable obligations. Legal holds can prevent deletion or retention purge. Billing, tax, security, audit, or dispute evidence may require preservation. The service does not claim that every domain is automatically purged. 6. Vendors and subprocessors Active vendors and subprocessors may be displayed in the live disclosure below this notice. Public inclusion describes actual active processing use. Public inclusion does not itself represent legal approval, transfer approval, or a complete contract assessment. Missing public location information must not be treated as proof that no processing occurs. Internal vendor statuses and evidence fields are not disclosed here. 7. International processing Processing locations depend on the active provider and deployment configuration. International-transfer requirements depend on the relevant countries, legal framework, and processing context. The public disclosure must not be treated as a universal adequacy, safeguard, or transfer-law conclusion. 8. Cookies and analytics Where enabled, the internal Cookie Consent module controls optional browser consent. Public analytics is fail-closed without valid analytics consent. Consent is browser-local unless separate account-wide synchronization is implemented. Necessary security or session technologies may still be used where required to provide the service. This notice does not claim account-wide, cross-device, SDK, or native consent support. 9. Security and files We apply technical and organisational safeguards suited to the service. Those measures reduce risk but cannot guarantee absolute security. Where file-security features are configured, we may process malware verdict records, quarantine metadata, and operator security-decision or override metadata to protect the service, investigate abuse, and keep accountability records. That does not imply universal scanning, that verdicts are always present, or that quarantine guarantees a file is safe. Where configured, storage routing policy metadata, residency policy markers, and related configuration inputs may apply to uploads. Storage-location or residency markers do not by themselves prove physical location or legal compliance. Uploads may be blocked when required configuration metadata is incomplete. Provider-side encryption may apply where configured; admin-proof or end-to-end encrypted file storage is not a default product claim. 10. Automated decisions and AI FyiLegal does not claim a default system of solely automated legal or similarly significant decisions. AI-assisted or automated features may support workflows but do not represent legal advice or automatic legal approval. 11. Rights and complaints Your rights depend on the applicable law and processing context. Contact us using the published privacy contact for your deployment, or write to FairCapital LTD at the registered office above, marking correspondence for the attention of Privacy. You may also complain to the competent supervisory authority. 12. Changes We may update this notice. Material changes may be communicated through the service or by email where appropriate.

Privacy and processing information

The following is a high-level, informational summary for this deployment. It is not legal advice, does not claim regulatory approval in any jurisdiction, and does not describe every transfer or provider relationship. Areas listed below may not apply to your account or how you use the service.

Processing areas that may apply

Depending on configuration and which optional capabilities are enabled for this deployment, the activities below may involve additional processing or providers beyond a minimal account.

Case workspaces and collaboration
File storage and document handling
Billing and payments
Identity verification, where enabled
Email and service communications
Analytics and consent management, where enabled
AI-assisted features, where enabled

Types of data we may process

Active categories from this deployment's data-classification registry (this may not list every type of data processed in practice).

Analytics & tracking — Product analytics, event telemetry
Audit & security logs — Immutable or security-relevant logs
Authentication identity — Credentials, session identifiers, auth provider subject data
Billing & finance — Invoices, payment references, subscription state
Communications — Email or in-product messages content/metadata
Cookie consent evidence — Consent decision records and append-only consent events used for audit/evidence.
Files (general) — User or system files not classified as sensitive
Files (sensitive) — Documents or uploads warranting elevated handling
Profile & account — User profile, preferences, non-billing account attributes
Support — Support tickets, operator notes about users
Verification / KYC — Identity verification artifacts and vendor results

Default data location label

EEA primary + approved transfers

This label reflects the deployment's default residency setting. It is not a promise that all data always remains in a specific geography or legal regime.

Requests and rights

Depending on how this deployment is operated, you may be able to submit privacy-related requests (such as access or erasure) through the contact channel on this page. Fulfilment depends on operator processes, configuration, and applicable law. This software does not by itself guarantee a particular response timeline, a downloadable data export package, or automated erasure across every subsystem.

Cookie and data disclosures

Loading cookie disclosures…

Cookie choices

Change which optional cookies this browser may use.

A direct email address is not listed here. If you already use this service, sign in and use the in-product help or account options where available. For billing matters, use the information provided with your payment or invoice.