Privacy & data

Brehon Legal is operated by Brehon Legal Tech (“we”, “us”), the data controller for the personal data described here. For any privacy question or to exercise your rights, contact us at privacy@brehonlegal.ie.

You can fill in the modules, run the legal checks and draft documents without an account. In that mode the cases you save are stored in your own browser’s local storage, on the device you are using — not on our servers. Clear your browser data and they are gone, and they will not appear on another device.

When you sign up, we hold the details you provide — your email address and name — to authenticate you and run your account. Authentication and our database are provided by Supabase, hosted in the EU.

With an account, the cases you save are also stored in our database and linked to you, so you can reach them from any device you sign in to. You can delete a case at any time, which removes it from our database.

If you join or run a firm, we also hold the firm details you provide (firm name, your role, and — for a directory listing — a Law Society registration number) and, for a subscription, the billing status of the firm.

Subscriptions and one-off document purchases are processed by Stripe. Card details are entered with Stripe and handled by Stripe — we do not receive or store your card number. We keep a record of what was purchased and the subscription status, not your payment card.

If you choose to send your case to a solicitor, we share the details you submit — your name, contact details, county and any summary you write — with the solicitor firm(s) whose listed areas and counties match your matter, so they can contact you. This happens only because you choose to submit the form: the lawful basis is your consent.

The contact details of an enquiry are revealed to a firm only when it takes the enquiry on. Once a firm receives your details it is an independent controller of them and handles them under its own privacy terms. To withdraw an enquiry, contact us at the address above.

The case assistant, the document hand-off and the optional wording polish call a large language model to generate text. For those features only, the relevant content — your messages, and any document you attach or paste — is transmitted over an encrypted (HTTPS) connection to our AI provider, Anthropic, solely to produce the response, and then returned. Anthropic does not use business/API traffic to train its models.

The deterministic parts of the tool — the legal checks, deadlines, thresholds and the template drafts — run without any AI and send nothing externally. If you would rather send nothing to a third party, use the structured modules without the assistant; they are fully functional on their own.

We use a small number of processors, each under their own terms:

• Supabase — account authentication and our database (EU-hosted);
• Stripe — payment processing;
• Anthropic — the AI features, when you use them;
• Netlify — hosting of the website.

Secrets that authorise these services are held server-side only and are never exposed in the browser. Personal data is never placed in a web address; hand-offs between screens pass through in-memory browser storage, not the URL.

Account and case data is kept while your account is active; delete a case to remove it, or contact us to close your account and erase it. Directory enquiries are kept while they are relevant to the firms handling them. Local browser data lasts until you clear it.

We do not run advertising trackers or sell any data. If analytics are added in future, this page will say so and what is collected.

Under the GDPR and the Data Protection Act 2018 you have rights of access, rectification and erasure over personal data we hold about you, and — where processing is based on consent — the right to withdraw that consent. For case data on your device you can erase it directly by deleting the case or clearing your browser. For anything held in your account or submitted through the directory, contact us at privacy@brehonlegal.ie and we will action it. You may also complain to the Data Protection Commission (dataprotection.ie).