Privacy Policy

Effective date: January 1, 2026

This Privacy Policy describes the policy and procedures for collecting, using, and disclosing information when using the Service, and informs you about privacy rights and data protection measures. Personal data is used to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.
This Privacy Policy describes the policy and procedures for collecting, using, and disclosing information when using the Service, and informs you about privacy rights and data protection measures. Personal data is used to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.
This Privacy Policy describes the policy and procedures for collecting, using, and disclosing information when using the Service, and informs you about privacy rights and data protection measures. Personal data is used to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

Interpretations and Definitions

Interpretations

Words with an initial capital letter have the meanings defined under the following conditions. The following definitions have the same meaning regardless of whether they are used in the singular or plural form.

Definitions

For the purposes of this Privacy Policy:
Account means a unique account created to access the Service or any of its parts.
Company (referred to as "Company," "We," "Us," "Our," or "realLaw AI" in this Agreement) refers to Case By Case SOFTWARE DESIGN CO. L.L.C, registered in the UAE, operating under license No. 1319985, with its legal address at 416, Emarat Atrium, Al Wasl, Dubai, UAE.
Cookies are files placed on your device by the website, containing detailed information about browsing history.
Country refers to the United Arab Emirates.
Device means any device that can access the Service, such as a computer, mobile phone, or tablet.
Personal Data refers to any information relating to an identified or identifiable individual.
Sensitive Personal Data means Personal Data that is considered sensitive due to its nature under applicable data protection laws of the United Arab Emirates, including health, biometric, genetic, religious, political, ethnic, and criminal-record information.
Service refers to the websites reallaw.ai and app.reallaw.ai, the realLaw AI platform, its APIs, MCP server, OAuth authorization services, and supported integrations made available through third-party AI Platforms.
Service Provider means any individual or legal entity that processes data on behalf of the Company.
Third-Party Social Media Service refers to any website or social network through which you can log in or create an account to use the Service.
Usage Data refers to data collected automatically or generated during the use of the Service.
Website refers to realLaw AI, available at https://reallaw.ai.
User means an individual who accesses or uses the Service, or a company or other legal entity on behalf of whom such access is provided.

Collection and Use of Personal Data

Types of Data Collected

Personal Data

When using the Service, you may be required to provide certain personal information that can be used to contact or identify you.
This information may include:
  • Email address
  • First name and last name
  • Phone number
  • Address, city, district, postal code
  • Usage data

Usage Data

Usage Data may include information such as:
  • Device's Internet Protocol (IP) address
  • Browser type and version
  • Pages of the Service that are visited
  • Time and date of the visit
  • Time spent on those pages
  • Unique device identifiers
  • Other diagnostic data
When accessing the Service via a mobile device, additional data may be collected, including device type, unique identifier, IP address, OS version, mobile browser type, and other relevant information.
Information from third-party social networks. Registration or login is possible using the following third-party services:
  • Google
  • META
If you provide access to a third-party service account, relevant data may be collected.

Information from Third-Party Social Media Services

Personal data may be used for the following purposes:
  • Account management
  • Communication with the user
  • Providing news, offers, and information about products and services (newsletter)
  • Processing requests
  • Data analysis and improving the Service's performance
Information may be transferred to:
  • Service providers
  • Within business transfers (merger, sale of assets, etc.)
  • Business partners
  • Other users (if information is publicly published)
  • With the user's consent
  • Third-party AI Platforms selected by the User; hosting and infrastructure providers supporting the MCP server and related technical logs in Finland; and service providers supporting realLaw AI systems and document storage in the United Arab Emirates, where necessary to authenticate the User, process a tool request, maintain security, and return the requested result

AI Platform and MCP Integrations

realLaw AI allows Users to access certain features of the Service through supported third-party artificial intelligence platforms and environments, including ChatGPT and other platforms through which realLaw AI integrations are made available (each, an "AI Platform"). These integrations may use the Model Context Protocol ("MCP").

Information Processed Through AI Integrations

When a User connects a realLaw AI account to an AI Platform using OAuth, or otherwise uses an MCP integration made available by realLaw AI, realLaw AI may process the following categories of Personal Data and technical information:

  • the User's internal account identifier, where applicable

  • authentication and OAuth authorization information necessary to establish and maintain the authorized connection

  • information required to verify account status, access rights, and subscription eligibility

  • tool inputs transmitted to realLaw AI by the AI Platform, such as search keywords or instructions, legal document references, filters, language preferences, date ranges, result limits, and any Personal Data that the User includes in those inputs

  • identifiers of legislation documents retrieved, returned, or viewed through the integration

  • MCP usage and technical diagnostic logs generated in connection with requests submitted through the AI Platform, including the tool used, request status, error information, request duration, timestamps, and technical or session identifiers made available by the AI Platform

realLaw AI receives MCP usage and technical diagnostic logs in connection with requests made through ChatGPT and other supported AI Platforms. realLaw AI does not intentionally request or reconstruct the User's complete conversation history from the AI Platform. realLaw AI processes only the tool arguments and related information transmitted to its MCP server for the requested operation.

Users should not include passwords, authentication secrets, payment card information, government-issued identifiers, Sensitive Personal Data, confidential client information, legally privileged material, or other information that is not necessary for the requested search or retrieval operation in inputs submitted through an AI integration.

Purposes of Processing

realLaw AI processes this information to:

  • authenticate the User and establish or maintain the authorized connection

  • verify access rights and active subscription status

  • perform legislation searches and retrieve requested documents

  • return relevant legislation content and metadata to the AI Platform

  • prevent fraud, abuse, and unauthorized access

  • enforce usage and rate limits

  • diagnose errors and maintain the security, reliability, and performance of the Service

  • comply with applicable legal obligations

Legal Basis for Processing

realLaw AI processes Personal Data with the User's consent where consent is requested, or where processing is otherwise permitted under applicable data protection law, including where processing is necessary to perform the User's agreement with realLaw AI or take steps at the User's request, comply with applicable legal obligations, or establish, exercise, or defend legal claims. Where processing is based on consent, the User may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

Information Returned to AI Platforms

realLaw AI returns only information relevant to the requested tool operation, such as legislation titles, document text, excerpts, references, publication information, legal metadata, applied filters, and search results.

realLaw AI does not intentionally include passwords, OAuth credentials, internal account identifiers, subscription details, diagnostic logs, or other Personal Data that is not necessary for the requested operation in MCP tool responses.

Third-Party AI Platforms

When a User chooses to use the Service through an AI Platform, the tool request is transmitted from that AI Platform to realLaw AI, and the requested result is transmitted back to that AI Platform.

The AI Platform processes the User's conversation, tool invocation, and returned information under its own privacy policy and terms. realLaw AI is responsible for processing carried out within realLaw AI systems but does not control the AI Platform's independent processing after information has been transmitted to that platform.

Before using an AI integration, the User should review the applicable AI Platform's privacy policy and terms. Disconnecting the realLaw AI integration does not automatically delete information retained by the AI Platform.

Data Location and International Transfers (AI Integrations)

The realLaw AI MCP server used to process integration requests, together with the related MCP usage and technical diagnostic logs, is hosted in Finland. realLaw AI's legislation documents and document database are stored in the United Arab Emirates.

Use of an AI integration involves the transmission of tool inputs and requested results between the selected AI Platform and realLaw AI. The AI Platform and its service providers may process that information in other countries or regions in accordance with the AI Platform's own privacy policy and terms.

realLaw AI carries out cross-border transfers of Personal Data in accordance with applicable UAE data protection law and uses an applicable lawful transfer mechanism and appropriate technical and organizational measures. Relevant recipient categories include the AI Platform selected by the User, hosting and infrastructure providers supporting the MCP server in Finland, and service providers supporting realLaw AI systems and document storage in the United Arab Emirates.

Data Retention (AI Integrations)

OAuth authorization records, MCP usage logs, and technical diagnostic information are retained only for as long as reasonably necessary for the purposes described in this section. Retention periods may differ by category and are determined by reference to the nature and sensitivity of the information, the purpose of processing, security and fraud-prevention needs, applicable limitation periods, and legal obligations.

realLaw AI deletes or anonymizes MCP usage and technical diagnostic logs when they are no longer required for the relevant purpose. Authorization information is retained only for as long as necessary to maintain the authorized connection or complete its revocation. After the applicable retention period expires, the information is deleted or anonymized unless a longer period is required by applicable law or is necessary for the establishment, exercise, or defence of legal claims. Information retained for an extended period is subject to appropriate access restrictions.

Disconnecting an Integration and Exercising Privacy Rights

Users may request that realLaw AI disconnect an AI Platform or MCP integration by contacting support@reallaw.ai. Once the request has been processed, realLaw AI will prevent future access through the relevant authorization. The User may also need to remove or disable the integration within the AI Platform, where that option is made available by the AI Platform.

Disconnecting the integration does not automatically delete information previously transmitted to or retained by the AI Platform. realLaw AI may retain limited technical logs or records where necessary for security, fraud prevention, legal compliance, or the establishment, exercise, or defence of legal claims, subject to the retention principles described above.

Subject to applicable law, Users may request information about the processing of their Personal Data and may exercise rights of access, correction, erasure, data transfer, restriction of processing, objection to or cessation of processing, and withdrawal of consent, where applicable. Users may also submit a complaint to the UAE Data Office. Requests may be submitted to support@reallaw.ai. realLaw AI may request information necessary to verify the identity of the requester and may refuse or limit a request where permitted by applicable law.

Storage and Transfer of Personal Data

Data is stored only for the period necessary to fulfill the purposes for which it was collected.

Data may be transferred outside of the country, ensuring that appropriate measures are in place to protect the data in accordance with applicable laws and regulations.

Disclosure of Personal Data

Data may be disclosed:

  • As part of business transactions (mergers, sales, etc.)

  • Upon request by law enforcement authorities

  • To comply with legal obligations

  • To protect the rights, property, and safety of the company, users, or others

Data Security

Measures are taken to protect the data, but complete security cannot be guaranteed.

Children's Policy

The site is not intended for individuals under the age of 13. Data from minors is not collected without parental consent.

Links to Third-Party Websites

The company is not responsible for the privacy policy of third-party websites.

Changes to the Privacy Policy

The Privacy Policy may be updated. The updated version will be published on this page with a new effective date.

Contact Information

For privacy policy inquiries, please contact via email: sales@reallaw.ai

Interpretations

Words with an initial capital letter have the meanings defined under the following conditions. The following definitions have the same meaning regardless of whether they are used in the singular or plural form.

Definitions

For the purposes of this Privacy Policy:
Account means a unique account created to access the Service or any of its parts.
Company (referred to as "Company," "We," "Us," "Our," or "realLaw AI" in this Agreement) refers to Case By Case SOFTWARE DESIGN CO. L.L.C, registered in the UAE, operating under license No. 1319985, with its legal address at 416, Emarat Atrium, Al Wasl, Dubai, UAE.
Cookies are files placed on your device by the website, containing detailed information about browsing history.
Country refers to the United Arab Emirates.
Device means any device that can access the Service, such as a computer, mobile phone, or tablet.
Personal Data refers to any information relating to an identified or identifiable individual.
Sensitive Personal Data means Personal Data that is considered sensitive due to its nature under applicable data protection laws of the United Arab Emirates, including health, biometric, genetic, religious, political, ethnic, and criminal-record information.
Service refers to the websites reallaw.ai and app.reallaw.ai, the realLaw AI platform, its APIs, MCP server, OAuth authorization services, and supported integrations made available through third-party AI Platforms.
Service Provider means any individual or legal entity that processes data on behalf of the Company.
Third-Party Social Media Service refers to any website or social network through which you can log in or create an account to use the Service.
Usage Data refers to data collected automatically or generated during the use of the Service.
Website refers to realLaw AI, available at https://reallaw.ai.
User means an individual who accesses or uses the Service, or a company or other legal entity on behalf of whom such access is provided.

Collection and Use of Personal Data

Types of Data Collected

Personal Data

When using the Service, you may be required to provide certain personal information that can be used to contact or identify you.
This information may include:
  • Email address
  • First name and last name
  • Phone number
  • Address, city, district, postal code
  • Usage data

Usage Data

Usage Data may include information such as:
  • Device's Internet Protocol (IP) address
  • Browser type and version
  • Pages of the Service that are visited
  • Time and date of the visit
  • Time spent on those pages
  • Unique device identifiers
  • Other diagnostic data
When accessing the Service via a mobile device, additional data may be collected, including device type, unique identifier, IP address, OS version, mobile browser type, and other relevant information.
Information from third-party social networks. Registration or login is possible using the following third-party services:
  • Google
  • META
If you provide access to a third-party service account, relevant data may be collected.

Information from Third-Party Social Media Services

Personal data may be used for the following purposes:
  • Account management
  • Communication with the user
  • Providing news, offers, and information about products and services (newsletter)
  • Processing requests
  • Data analysis and improving the Service's performance
Information may be transferred to:
  • Service providers
  • Within business transfers (merger, sale of assets, etc.)
  • Business partners
  • Other users (if information is publicly published)
  • With the user's consent
  • Third-party AI Platforms selected by the User; hosting and infrastructure providers supporting the MCP server and related technical logs in Finland; and service providers supporting realLaw AI systems and document storage in the United Arab Emirates, where necessary to authenticate the User, process a tool request, maintain security, and return the requested result

AI Platform and MCP Integrations

realLaw AI allows Users to access certain features of the Service through supported third-party artificial intelligence platforms and environments, including ChatGPT and other platforms through which realLaw AI integrations are made available (each, an "AI Platform"). These integrations may use the Model Context Protocol ("MCP").

Information Processed Through AI Integrations

When a User connects a realLaw AI account to an AI Platform using OAuth, or otherwise uses an MCP integration made available by realLaw AI, realLaw AI may process the following categories of Personal Data and technical information:

  • the User's internal account identifier, where applicable

  • authentication and OAuth authorization information necessary to establish and maintain the authorized connection

  • information required to verify account status, access rights, and subscription eligibility

  • tool inputs transmitted to realLaw AI by the AI Platform, such as search keywords or instructions, legal document references, filters, language preferences, date ranges, result limits, and any Personal Data that the User includes in those inputs

  • identifiers of legislation documents retrieved, returned, or viewed through the integration

  • MCP usage and technical diagnostic logs generated in connection with requests submitted through the AI Platform, including the tool used, request status, error information, request duration, timestamps, and technical or session identifiers made available by the AI Platform

realLaw AI receives MCP usage and technical diagnostic logs in connection with requests made through ChatGPT and other supported AI Platforms. realLaw AI does not intentionally request or reconstruct the User's complete conversation history from the AI Platform. realLaw AI processes only the tool arguments and related information transmitted to its MCP server for the requested operation.

Users should not include passwords, authentication secrets, payment card information, government-issued identifiers, Sensitive Personal Data, confidential client information, legally privileged material, or other information that is not necessary for the requested search or retrieval operation in inputs submitted through an AI integration.

Purposes of Processing

realLaw AI processes this information to:

  • authenticate the User and establish or maintain the authorized connection

  • verify access rights and active subscription status

  • perform legislation searches and retrieve requested documents

  • return relevant legislation content and metadata to the AI Platform

  • prevent fraud, abuse, and unauthorized access

  • enforce usage and rate limits

  • diagnose errors and maintain the security, reliability, and performance of the Service

  • comply with applicable legal obligations

Legal Basis for Processing

realLaw AI processes Personal Data with the User's consent where consent is requested, or where processing is otherwise permitted under applicable data protection law, including where processing is necessary to perform the User's agreement with realLaw AI or take steps at the User's request, comply with applicable legal obligations, or establish, exercise, or defend legal claims. Where processing is based on consent, the User may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

Information Returned to AI Platforms

realLaw AI returns only information relevant to the requested tool operation, such as legislation titles, document text, excerpts, references, publication information, legal metadata, applied filters, and search results.

realLaw AI does not intentionally include passwords, OAuth credentials, internal account identifiers, subscription details, diagnostic logs, or other Personal Data that is not necessary for the requested operation in MCP tool responses.

Third-Party AI Platforms

When a User chooses to use the Service through an AI Platform, the tool request is transmitted from that AI Platform to realLaw AI, and the requested result is transmitted back to that AI Platform.

The AI Platform processes the User's conversation, tool invocation, and returned information under its own privacy policy and terms. realLaw AI is responsible for processing carried out within realLaw AI systems but does not control the AI Platform's independent processing after information has been transmitted to that platform.

Before using an AI integration, the User should review the applicable AI Platform's privacy policy and terms. Disconnecting the realLaw AI integration does not automatically delete information retained by the AI Platform.

Data Location and International Transfers (AI Integrations)

The realLaw AI MCP server used to process integration requests, together with the related MCP usage and technical diagnostic logs, is hosted in Finland. realLaw AI's legislation documents and document database are stored in the United Arab Emirates.

Use of an AI integration involves the transmission of tool inputs and requested results between the selected AI Platform and realLaw AI. The AI Platform and its service providers may process that information in other countries or regions in accordance with the AI Platform's own privacy policy and terms.

realLaw AI carries out cross-border transfers of Personal Data in accordance with applicable UAE data protection law and uses an applicable lawful transfer mechanism and appropriate technical and organizational measures. Relevant recipient categories include the AI Platform selected by the User, hosting and infrastructure providers supporting the MCP server in Finland, and service providers supporting realLaw AI systems and document storage in the United Arab Emirates.

Data Retention (AI Integrations)

OAuth authorization records, MCP usage logs, and technical diagnostic information are retained only for as long as reasonably necessary for the purposes described in this section. Retention periods may differ by category and are determined by reference to the nature and sensitivity of the information, the purpose of processing, security and fraud-prevention needs, applicable limitation periods, and legal obligations.

realLaw AI deletes or anonymizes MCP usage and technical diagnostic logs when they are no longer required for the relevant purpose. Authorization information is retained only for as long as necessary to maintain the authorized connection or complete its revocation. After the applicable retention period expires, the information is deleted or anonymized unless a longer period is required by applicable law or is necessary for the establishment, exercise, or defence of legal claims. Information retained for an extended period is subject to appropriate access restrictions.

Disconnecting an Integration and Exercising Privacy Rights

Users may request that realLaw AI disconnect an AI Platform or MCP integration by contacting support@reallaw.ai. Once the request has been processed, realLaw AI will prevent future access through the relevant authorization. The User may also need to remove or disable the integration within the AI Platform, where that option is made available by the AI Platform.

Disconnecting the integration does not automatically delete information previously transmitted to or retained by the AI Platform. realLaw AI may retain limited technical logs or records where necessary for security, fraud prevention, legal compliance, or the establishment, exercise, or defence of legal claims, subject to the retention principles described above.

Subject to applicable law, Users may request information about the processing of their Personal Data and may exercise rights of access, correction, erasure, data transfer, restriction of processing, objection to or cessation of processing, and withdrawal of consent, where applicable. Users may also submit a complaint to the UAE Data Office. Requests may be submitted to support@reallaw.ai. realLaw AI may request information necessary to verify the identity of the requester and may refuse or limit a request where permitted by applicable law.

Storage and Transfer of Personal Data

Data is stored only for the period necessary to fulfill the purposes for which it was collected.

Data may be transferred outside of the country, ensuring that appropriate measures are in place to protect the data in accordance with applicable laws and regulations.

Disclosure of Personal Data

Data may be disclosed:

  • As part of business transactions (mergers, sales, etc.)

  • Upon request by law enforcement authorities

  • To comply with legal obligations

  • To protect the rights, property, and safety of the company, users, or others

Data Security

Measures are taken to protect the data, but complete security cannot be guaranteed.

Children's Policy

The site is not intended for individuals under the age of 13. Data from minors is not collected without parental consent.

Links to Third-Party Websites

The company is not responsible for the privacy policy of third-party websites.

Changes to the Privacy Policy

The Privacy Policy may be updated. The updated version will be published on this page with a new effective date.

Contact Information

For privacy policy inquiries, please contact via email: sales@reallaw.ai

Interpretations

Words with an initial capital letter have the meanings defined under the following conditions. The following definitions have the same meaning regardless of whether they are used in the singular or plural form.

Definitions

For the purposes of this Privacy Policy:
Account means a unique account created to access the Service or any of its parts.
Company (referred to as "Company," "We," "Us," "Our," or "realLaw AI" in this Agreement) refers to Case By Case SOFTWARE DESIGN CO. L.L.C, registered in the UAE, operating under license No. 1319985, with its legal address at 416, Emarat Atrium, Al Wasl, Dubai, UAE.
Cookies are files placed on your device by the website, containing detailed information about browsing history.
Country refers to the United Arab Emirates.
Device means any device that can access the Service, such as a computer, mobile phone, or tablet.
Personal Data refers to any information relating to an identified or identifiable individual.
Sensitive Personal Data means Personal Data that is considered sensitive due to its nature under applicable data protection laws of the United Arab Emirates, including health, biometric, genetic, religious, political, ethnic, and criminal-record information.
Service refers to the websites reallaw.ai and app.reallaw.ai, the realLaw AI platform, its APIs, MCP server, OAuth authorization services, and supported integrations made available through third-party AI Platforms.
Service Provider means any individual or legal entity that processes data on behalf of the Company.
Third-Party Social Media Service refers to any website or social network through which you can log in or create an account to use the Service.
Usage Data refers to data collected automatically or generated during the use of the Service.
Website refers to realLaw AI, available at https://reallaw.ai.
User means an individual who accesses or uses the Service, or a company or other legal entity on behalf of whom such access is provided.

Collection and Use of Personal Data

Types of Data Collected

Personal Data

When using the Service, you may be required to provide certain personal information that can be used to contact or identify you.
This information may include:
  • Email address
  • First name and last name
  • Phone number
  • Address, city, district, postal code
  • Usage data

Usage Data

Usage Data may include information such as:
  • Device's Internet Protocol (IP) address
  • Browser type and version
  • Pages of the Service that are visited
  • Time and date of the visit
  • Time spent on those pages
  • Unique device identifiers
  • Other diagnostic data
When accessing the Service via a mobile device, additional data may be collected, including device type, unique identifier, IP address, OS version, mobile browser type, and other relevant information.
Information from third-party social networks. Registration or login is possible using the following third-party services:
  • Google
  • META
If you provide access to a third-party service account, relevant data may be collected.

Information from Third-Party Social Media Services

Personal data may be used for the following purposes:
  • Account management
  • Communication with the user
  • Providing news, offers, and information about products and services (newsletter)
  • Processing requests
  • Data analysis and improving the Service's performance
Information may be transferred to:
  • Service providers
  • Within business transfers (merger, sale of assets, etc.)
  • Business partners
  • Other users (if information is publicly published)
  • With the user's consent
  • Third-party AI Platforms selected by the User; hosting and infrastructure providers supporting the MCP server and related technical logs in Finland; and service providers supporting realLaw AI systems and document storage in the United Arab Emirates, where necessary to authenticate the User, process a tool request, maintain security, and return the requested result

AI Platform and MCP Integrations

realLaw AI allows Users to access certain features of the Service through supported third-party artificial intelligence platforms and environments, including ChatGPT and other platforms through which realLaw AI integrations are made available (each, an "AI Platform"). These integrations may use the Model Context Protocol ("MCP").

Information Processed Through AI Integrations

When a User connects a realLaw AI account to an AI Platform using OAuth, or otherwise uses an MCP integration made available by realLaw AI, realLaw AI may process the following categories of Personal Data and technical information:

  • the User's internal account identifier, where applicable

  • authentication and OAuth authorization information necessary to establish and maintain the authorized connection

  • information required to verify account status, access rights, and subscription eligibility

  • tool inputs transmitted to realLaw AI by the AI Platform, such as search keywords or instructions, legal document references, filters, language preferences, date ranges, result limits, and any Personal Data that the User includes in those inputs

  • identifiers of legislation documents retrieved, returned, or viewed through the integration

  • MCP usage and technical diagnostic logs generated in connection with requests submitted through the AI Platform, including the tool used, request status, error information, request duration, timestamps, and technical or session identifiers made available by the AI Platform

realLaw AI receives MCP usage and technical diagnostic logs in connection with requests made through ChatGPT and other supported AI Platforms. realLaw AI does not intentionally request or reconstruct the User's complete conversation history from the AI Platform. realLaw AI processes only the tool arguments and related information transmitted to its MCP server for the requested operation.

Users should not include passwords, authentication secrets, payment card information, government-issued identifiers, Sensitive Personal Data, confidential client information, legally privileged material, or other information that is not necessary for the requested search or retrieval operation in inputs submitted through an AI integration.

Purposes of Processing

realLaw AI processes this information to:

  • authenticate the User and establish or maintain the authorized connection

  • verify access rights and active subscription status

  • perform legislation searches and retrieve requested documents

  • return relevant legislation content and metadata to the AI Platform

  • prevent fraud, abuse, and unauthorized access

  • enforce usage and rate limits

  • diagnose errors and maintain the security, reliability, and performance of the Service

  • comply with applicable legal obligations

Legal Basis for Processing

realLaw AI processes Personal Data with the User's consent where consent is requested, or where processing is otherwise permitted under applicable data protection law, including where processing is necessary to perform the User's agreement with realLaw AI or take steps at the User's request, comply with applicable legal obligations, or establish, exercise, or defend legal claims. Where processing is based on consent, the User may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

Information Returned to AI Platforms

realLaw AI returns only information relevant to the requested tool operation, such as legislation titles, document text, excerpts, references, publication information, legal metadata, applied filters, and search results.

realLaw AI does not intentionally include passwords, OAuth credentials, internal account identifiers, subscription details, diagnostic logs, or other Personal Data that is not necessary for the requested operation in MCP tool responses.

Third-Party AI Platforms

When a User chooses to use the Service through an AI Platform, the tool request is transmitted from that AI Platform to realLaw AI, and the requested result is transmitted back to that AI Platform.

The AI Platform processes the User's conversation, tool invocation, and returned information under its own privacy policy and terms. realLaw AI is responsible for processing carried out within realLaw AI systems but does not control the AI Platform's independent processing after information has been transmitted to that platform.

Before using an AI integration, the User should review the applicable AI Platform's privacy policy and terms. Disconnecting the realLaw AI integration does not automatically delete information retained by the AI Platform.

Data Location and International Transfers (AI Integrations)

The realLaw AI MCP server used to process integration requests, together with the related MCP usage and technical diagnostic logs, is hosted in Finland. realLaw AI's legislation documents and document database are stored in the United Arab Emirates.

Use of an AI integration involves the transmission of tool inputs and requested results between the selected AI Platform and realLaw AI. The AI Platform and its service providers may process that information in other countries or regions in accordance with the AI Platform's own privacy policy and terms.

realLaw AI carries out cross-border transfers of Personal Data in accordance with applicable UAE data protection law and uses an applicable lawful transfer mechanism and appropriate technical and organizational measures. Relevant recipient categories include the AI Platform selected by the User, hosting and infrastructure providers supporting the MCP server in Finland, and service providers supporting realLaw AI systems and document storage in the United Arab Emirates.

Data Retention (AI Integrations)

OAuth authorization records, MCP usage logs, and technical diagnostic information are retained only for as long as reasonably necessary for the purposes described in this section. Retention periods may differ by category and are determined by reference to the nature and sensitivity of the information, the purpose of processing, security and fraud-prevention needs, applicable limitation periods, and legal obligations.

realLaw AI deletes or anonymizes MCP usage and technical diagnostic logs when they are no longer required for the relevant purpose. Authorization information is retained only for as long as necessary to maintain the authorized connection or complete its revocation. After the applicable retention period expires, the information is deleted or anonymized unless a longer period is required by applicable law or is necessary for the establishment, exercise, or defence of legal claims. Information retained for an extended period is subject to appropriate access restrictions.

Disconnecting an Integration and Exercising Privacy Rights

Users may request that realLaw AI disconnect an AI Platform or MCP integration by contacting support@reallaw.ai. Once the request has been processed, realLaw AI will prevent future access through the relevant authorization. The User may also need to remove or disable the integration within the AI Platform, where that option is made available by the AI Platform.

Disconnecting the integration does not automatically delete information previously transmitted to or retained by the AI Platform. realLaw AI may retain limited technical logs or records where necessary for security, fraud prevention, legal compliance, or the establishment, exercise, or defence of legal claims, subject to the retention principles described above.

Subject to applicable law, Users may request information about the processing of their Personal Data and may exercise rights of access, correction, erasure, data transfer, restriction of processing, objection to or cessation of processing, and withdrawal of consent, where applicable. Users may also submit a complaint to the UAE Data Office. Requests may be submitted to support@reallaw.ai. realLaw AI may request information necessary to verify the identity of the requester and may refuse or limit a request where permitted by applicable law.

Storage and Transfer of Personal Data

Data is stored only for the period necessary to fulfill the purposes for which it was collected.

Data may be transferred outside of the country, ensuring that appropriate measures are in place to protect the data in accordance with applicable laws and regulations.

Disclosure of Personal Data

Data may be disclosed:

  • As part of business transactions (mergers, sales, etc.)

  • Upon request by law enforcement authorities

  • To comply with legal obligations

  • To protect the rights, property, and safety of the company, users, or others

Data Security

Measures are taken to protect the data, but complete security cannot be guaranteed.

Children's Policy

The site is not intended for individuals under the age of 13. Data from minors is not collected without parental consent.

Links to Third-Party Websites

The company is not responsible for the privacy policy of third-party websites.

Changes to the Privacy Policy

The Privacy Policy may be updated. The updated version will be published on this page with a new effective date.

Contact Information

For privacy policy inquiries, please contact via email: sales@reallaw.ai

Ready to subscribe?

Contact Sales

Feel free to mail us for any enquiries: sales@reallaw.ai

Ready to subscribe?

Contact Sales