Legal
Privacy Policy
Effective 2 September 2026
This policy explains what personal information LegalErrand collects when you use our website and study platform, why we use it, and the choices you have. We process data in line with the Nigeria Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Regulation.
- 1. Who we are
- 2. Information we collect
- 3. How we use your information
- 4. Google sign-in
- 5. AI features and your content
- 6. Who we share data with
- 7. Storage and security
- 8. Your rights
- 9. Cookies and local storage
- 10. Age
- 11. Changes and contact
1. Who we are
LegalErrand (“we”, “us”) operates the LegalErrand website and AI-native study platform for law students at legalerrand.com and related subdomains (together, the “Service”).
For privacy questions or NDPA requests, email info@legalerrand.com.
2. Information we collect
Account and profile
When you register, sign in, or complete your profile we may collect:
- Name, email address, and password (stored as a one-way hash)
- If you use Google sign-in: your Google account ID, verified email address, and name, as provided by Google
- Account type (undergraduate or law school student)
- Optional profile details such as school, country, city, phone number, username, and avatar
- Referral codes if you join through another student
Study activity
To run the product we store notes, research sessions, quiz attempts, library uploads, bookmarks, AI chat and tutoring sessions, goals, and similar study records you create.
Technical data
We automatically collect IP address, device and browser type, pages visited, and approximate usage timestamps. We use this to operate, secure, and improve the Service (including rate limiting sign-in attempts).
Payments
If you subscribe to a paid plan, payment details are processed by our payment provider. We do not store full card numbers on our servers.
3. How we use your information
We use personal data to:
- Create and authenticate your account (email and password, or Google)
- Send verification and password-reset codes by email
- Provide study tools, save your work, and personalise progress
- Process AI requests you submit (questions, notes, documents, research queries)
- Prevent abuse, spam, and unauthorised access
- Diagnose errors (including via error monitoring) and understand product usage
- Communicate service updates and respond to support requests
We rely on performance of our contract with you, your consent where required (for example certain cookies or optional profile fields), and our legitimate interests in running a secure educational product, consistent with the NDPA.
4. Google sign-in
If you choose “Sign in with Google”, Google authenticates you. We then receive a limited set of Google user data: your Google account ID, verified email address, and name. We do not receive your Google password, Gmail contents, Drive files, contacts, calendar, or other Google product data.
We use that Google user data only to:
- Create your LegalErrand account, or link it to an existing account with the same email
- Sign you in on later visits
- Show your name and email in the product and in account-related messages
We do not sell Google user data. We do not use it for advertising, retargeting, or credit-worthiness. We do not use it to train general-purpose AI models. We do not transfer Google user data to third parties except our hosting and database providers as needed to operate the Service, or if required by law.
LegalErrand’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Google’s own processing is described in the Google Privacy Policy. You can revoke LegalErrand’s access from your Google account permissions. After you revoke access you may still need a LegalErrand password to sign in. To delete the Google data we hold, email info@legalerrand.com or delete your LegalErrand account.
5. AI features and your content
Features such as AI chat, case explainer, research, note analysis, and Socratic tutoring send the text or documents you provide to our AI providers so we can generate a response. Do not upload material you are not allowed to share (for example confidential client files, if you are not authorised to process them).
AI output can be incomplete or incorrect. It is a study aid, not legal advice and not a substitute for your own reading of primary sources.
7. Storage and security
Account and study data are stored in databases and object storage we control through our hosting providers. Some providers process data outside Nigeria. Where that happens, we take steps appropriate under the NDPA to protect the transfer.
We use encryption in transit, hashed passwords, access controls, and rate limiting. No internet service is perfectly secure; please use a strong unique password and keep your sign-in details private.
We keep account data while your account is active. After deletion or prolonged inactivity we remove or anonymise personal data within a reasonable period, except where we must retain records for security, dispute resolution, or legal obligations.
8. Your rights
Subject to the NDPA, you may request to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your account and associated personal data
- Object to or restrict certain processing
- Withdraw consent where processing is based on consent
Email info@legalerrand.com from the address on your account. You may also lodge a complaint with the Nigeria Data Protection Commission.
9. Cookies and local storage
We use essential storage in your browser (including local storage) to keep you signed in (access tokens) and to remember onboarding details. Analytics tools may set cookies to understand how the site is used. You can block non-essential cookies in your browser; the Service may not function fully without essential storage.
10. Age
LegalErrand is built for university and law-school students. You must be at least 16, or the minimum age required to hold an account in your jurisdiction. We do not knowingly collect personal data from children below that age. If you believe we have, contact us and we will delete it.
11. Changes and contact
We may update this policy as the product or the law changes. The “Effective” date above will change when we do. Continued use after an update means you accept the revised policy.
Questions: info@legalerrand.com. Related document: Terms of Use.