Privacy Policy

1. Introduction

Symbiont Legal ("we," "us," or "our") operates the website at symbiont.legal (the "Service"). This Privacy Policy explains what personal information we collect, how we use it, and your rights regarding that information.

By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information you provide directly

• Template purchases: When you purchase a template, Stripe collects your payment information (card number, billing address). We receive your email, purchase details, and Stripe session metadata — we do not store your card number.
• Attorney request form: Name, email, zip code, template interest, and a description of your legal needs.
• Attorney registration: Name, email, firm name, bar number, jurisdiction, specialties, bio, photo, and Stripe Connect account details.

2.2 Information we do NOT collect

• Formulation Wizard data: All information you enter in the Contract Formulation Wizard (party names, deal terms, compensation details) stays entirely in your browser. It is never transmitted to our servers.
• We do not use cookies for tracking or advertising. We do not use analytics platforms (Google Analytics, etc.) at this time.

3. How We Use Your Information

• To process purchases and deliver digital products
• To match you with attorneys in our network (when you submit a request)
• To facilitate attorney onboarding and Stripe Connect payment splits
• To communicate about your purchases or requests
• To comply with legal obligations

We do not sell, rent, or trade your personal information to third parties.

4. Third-Party Services

We use the following third-party services that may process your data:

Each provider operates under their own privacy policy. We encourage you to review them.

5. Data Retention

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes outlined in this policy. Attorney registration data is retained for the duration of the attorney's active membership. Purchase records are retained as required for tax and legal compliance.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your personal data (subject to legal retention requirements)
• Port your data to another service
• Object to processing of your data

To exercise any of these rights, contact us at legal@symbiont.legal. We will respond within 30 days.

7. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information is collected, used, shared, or sold
• The right to delete personal information held by us
• The right to opt out of the sale of personal information
• The right to non-discrimination for exercising your CCPA rights

We do not sell personal information. To submit a CCPA request, email legal@symbiont.legal.

8. European Residents (GDPR)

If you are located in the European Economic Area (EEA), we process your data under the following legal bases:

• Contract performance: Processing purchases and delivering templates
• Legitimate interest: Operating and improving the Service
• Consent: Where you have given explicit consent (e.g., attorney request form submissions)

You may contact us at legal@symbiont.legal to exercise your rights under GDPR, including the right to lodge a complaint with your local data protection authority.

9. Cookies

We do not use cookies for analytics, advertising, or tracking. Third-party services (such as Stripe during checkout) may set their own cookies as necessary to process payments. These are governed by the respective provider's cookie policies.

10. Security

We use industry-standard security measures to protect your data, including encryption in transit (TLS/HTTPS) and secure database hosting. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

11. Children's Privacy

The Service is not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us at legal@symbiont.legal and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the Service after changes constitutes acceptance of the revised policy.

13. Contact Us

For privacy-related questions or to exercise your data rights: