Privacy Policy
Last updated: April 2026
1. Data Controller
The data controller responsible for the processing of your personal data is nu:legal GmbH, Musterstraße 1, 10115 Berlin, Germany. You can reach our data protection team at hello@nulegal.de. We are committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable German data protection laws.
2. Data We Collect
We collect personal data that you provide directly, such as your name, email address, company information, and payment details when you register for an account. We also automatically collect technical data including your IP address, browser type, device information, and usage patterns through cookies and similar technologies. Additionally, any documents or content you create or upload to our platform are processed to provide our services.
3. How We Use Your Data
We use your personal data to provide, maintain, and improve our platform and services, including AI-powered document generation and legal review tools. Your data is also used for account management, billing, customer support, and to send you service-related communications. We may use aggregated, anonymised data for analytics and product development purposes.
4. Legal Basis
We process your personal data on the basis of contractual necessity (Art. 6(1)(b) GDPR) to fulfil our obligations under the terms of service. Where required, we rely on your explicit consent (Art. 6(1)(a) GDPR), which you may withdraw at any time. Certain processing activities are carried out on the basis of our legitimate interests (Art. 6(1)(f) GDPR), such as improving our services and ensuring platform security.
5. Data Sharing
We do not sell your personal data to third parties. We share data with service providers who help us operate the website and marketing funnel, including form processors (such as Formspree or Notion for waitlist and contact submissions), PostHog for consent-gated website analytics, and Google Ads for consent-gated conversion measurement. All third-party processors are contractually bound to handle your data in accordance with GDPR requirements and our instructions.
6. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Account data is retained for the duration of your active account and for a reasonable period thereafter to comply with legal obligations. You may request deletion of your data at any time, subject to our legal retention requirements.
7. Your Rights
Under the GDPR, you have the right to access, rectify, erase, restrict processing of, and port your personal data. You also have the right to object to the processing of your data and to withdraw consent at any time. To exercise any of these rights, please contact us at hello@nulegal.de. You also have the right to lodge a complaint with a supervisory authority.
8. Cookies and analytics
Our website uses cookies and similar technologies to measure page engagement, section visibility, navigation paths, and conversion events. Essential cookies are required for basic site operation. Analytics cookies (PostHog) and advertising cookies (Google Ads conversion tags) are only activated after you consent. We do not send names, emails, or message content to analytics tools. You can reopen at any time.
9. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by posting the updated policy on our website and, where appropriate, by email. We encourage you to review this policy periodically to stay informed about how we protect your data.
10. Contact
If you have any questions or concerns about this Privacy Policy or our data processing practices, please contact us at hello@nulegal.de or write to nu:legal GmbH, Musterstraße 1, 10115 Berlin, Germany. We will respond to your enquiry as promptly as possible.