Lawna
Request Demo
Back to Home

Privacy Policy

Last updated: July 7, 2026

1. Introduction

Lawna ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our legal case management platform and related services (the "Services").

We comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws in the Nordic region and European Union.

2. Information We Collect

2.1 Information You Provide

We collect information that you provide directly to us, including:

  • Account information (name, email address, password, organization details)
  • Client and case data entered into the platform
  • Communication data (emails, voice recordings for transcription, notes)
  • Payment and billing information
  • Support and correspondence data

2.2 Automatically Collected Information

When you use our Services, we automatically collect:

  • Usage data (features accessed, actions taken, time spent)
  • Device information (IP address, browser type, operating system)
  • Log data (access times, pages viewed, errors)
  • Cookies and similar tracking technologies

3. How We Use Your Information

We use the collected information for the following purposes:

  • Service Delivery: To provide, maintain, and improve our Services
  • AI Processing: To generate case summaries, voice transcriptions, and intelligent suggestions
  • Account Management: To manage your account and provide customer support
  • Security: To detect, prevent, and address fraud and security issues
  • Communication: To send administrative information, updates, and marketing (with consent)
  • Analytics: To analyze usage patterns and improve our Services
  • Legal Compliance: To comply with legal obligations and enforce our Terms of Service

4. Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data based on:

  • Contract Performance: Processing necessary to provide our Services to you
  • Legitimate Interest: For analytics, security, and service improvement
  • Consent: For marketing communications and optional features (withdrawable anytime)
  • Legal Obligation: To comply with applicable laws and regulations

5. How We Share Your Information

We do not sell your personal data. We may share your information with:

  • Service Providers: Third-party vendors who assist in delivering our Services (cloud hosting, payment processing, email delivery)
  • AI Service Providers: For processing voice transcriptions and generating AI insights (under strict data processing agreements)
  • Legal Requirements: When required by law or to protect our rights and safety
  • Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to you)

All third parties are contractually obligated to maintain confidentiality and comply with GDPR.

6. Data Security

We implement industry-standard security measures to protect your data, including:

  • Encryption in transit (TLS/SSL) and at rest (AES-256)
  • Access controls and authentication mechanisms
  • Regular security audits and penetration testing
  • Data backup and disaster recovery procedures
  • Employee training on data protection

While we strive to protect your data, no method of transmission over the internet or electronic storage is 100% secure.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. When you close your account, we will delete or anonymize your data within 90 days, except where retention is legally required.

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Correct inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data ("right to be forgotten")
  • Right to Restriction: Limit how we use your data
  • Right to Data Portability: Receive your data in a structured, machine-readable format
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent for processing at any time
  • Right to Lodge a Complaint: File a complaint with your local data protection authority

To exercise these rights, contact us at privacy@lawna.se.

9. International Data Transfers

Your data is primarily stored and processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.

10. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we will provide prominent notice or seek your consent where required by law.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Data Protection Officer

Email: privacy@lawna.se