Privacy Policy

Last updated: October 15, 2026

Who is responsible

Nubri GmbH, Liebenowzeile 22, 12167 Berlin, Germany, runs LegalAI Pro (legalaipro.site) and is the controller for the personal data described here. Contact: info@nubri.co.

What we process

  • Your account: email address, name, business name, type and jurisdiction, and a bcrypt hash of your password; when you confirmed your email address.
  • Your documents: the template you chose, your answers, the document written for you and its plain-English explanation. Exports to PDF, Word or text are made in your browser.
  • AI processing: your answers are sent to Anthropic's Claude on Amazon Bedrock, which writes the document (Claude Sonnet 5.5 on the free plan, Claude Opus 5.5 on Pro, Claude Opus 4.8 when Opus 5.5 is busy). Amazon Bedrock doesn't use your data to train models.
  • Free documents: each one is recorded with a one-way hash of your email inbox, so that deleting and re-creating an account doesn't restart the month's free documents.
  • Billing: your plan and Stripe customer and subscription ids, and what your Pro documents cost us each month (we never see card details).
  • Site analytics: our pages keep a random visitor id and where you first came from (source, campaign, referring site, page) in your browser's local storage, and send page events to our own server. No third-party analytics or advertising tools.
  • Your IP address, used to limit requests against abuse; it isn't stored with your account.
  • Messages you send through the contact form, which reach us by email.

Why, and on what legal basis

To provide the service you signed up for (Art. 6(1)(b) GDPR); to keep it secure and free of abuse, and to know which channels bring visitors (Art. 6(1)(f) GDPR, our legitimate interests); and to keep records the law requires (Art. 6(1)(c) GDPR). We don't sell personal data.

Processors

  • Amazon Web Services: hosting, Claude on Amazon Bedrock, and email delivery (United States).
  • Stripe: payments (United States).

Transfers to the United States rely on the EU Standard Contractual Clauses.

How long we keep it

Your account and documents are kept until you delete them. You can delete a document at any time, and delete your account in Billing: that removes your account and documents at once and cancels a Pro subscription. The inbox hashes of a deleted account's free documents are kept until the end of that month, then deleted. Records we must keep by law (for example invoices) are kept as long as the law requires.

Cookies and local storage

One cookie, lb_token, keeps you signed in for up to 7 days; it is needed for the service to work. Your browser's local storage holds the visitor id and first-visit source described above, and a flag in session storage makes sure a visit is counted once (it is cleared when you close the tab).

Server logs

When you open any page, our web server records your IP address, the time, the address requested, the response and your browser's user agent. We use these logs only to keep the service secure and to find faults (Art. 6(1)(f) GDPR). They are deleted automatically after at most 8 days.

Your rights

You can ask for access to your data, its correction or deletion, restriction of processing, a copy in a portable format, and you can object to processing based on legitimate interests. Email info@nubri.co. You may also complain to a data protection supervisory authority, for example the Berlin Commissioner for Data Protection and Freedom of Information.