Roles and scope

Lawie acts as controller for website, account, sales, billing, security, and support contact data that it determines how to use. For personal data submitted to a customer workspace, Lawie generally acts as processor under the customer’s instructions and executed DPA.

Data we process

• Account and business-contact data, authentication events, organization and role settings.
• Product usage, device, diagnostic, audit, security, and support data needed to operate and protect the service.
• Customer-provided documents, prompts, sources, workflow records, integration content, and generated output when the customer enables those functions.
• Billing and transaction references; full payment-card processing may be handled by the provider identified in the applicable checkout or subprocessor record.

Purposes and legal bases

• Provide and administer the service, perform contracts, authenticate users, and respond to requests.
• Protect users and the platform, prevent abuse, investigate incidents, and maintain auditability based on legitimate interests and legal obligations.
• Meet accounting, tax, regulatory, and dispute-preservation obligations.
• Send optional product communications or use non-essential analytics only where consent or another valid basis applies.

Sharing, transfers, and retention

Data is shared only with authorized personnel, customer administrators, verified service providers, professional advisers, authorities when legally required, or parties to a corporate transaction subject to appropriate safeguards. Current verified processors and regions belong in the Subprocessor Register.

Retention depends on data type, tenant configuration, contract, legal hold, security need, and backup expiry. The Retention and Deletion Policy explains the operating model.

Rights and contact

Depending on applicable law, individuals may request access, correction, deletion, restriction, portability, or objection, and may complain to a competent supervisory authority. Workspace data requests should normally be directed to the customer that controls the workspace.

Send privacy questions without sensitive workspace content to privacy@lawielabs.com.