Privacy policy
Last updated: 7 July 2026
LegalAI Studio is operated by The AGI Studio, based in Toronto, Ontario, Canada. This policy explains what we collect, why, and what you can do about it. It is written to be read, not to be survived.
What we collect
Account information
When you create an account we store your email address, your name, and a cryptographic hash of your password. We never store your password itself and cannot recover it.
Content you submit
- Questions you ask the Legal Q&A module, and the jurisdiction you select.
- Contracts and documents you upload for review, and the extracted text and analysis derived from them.
- Values you enter into calculators and checklists (for example, age, education level, and language scores for CRS scoring).
- Documents you generate and the variables you supply to generate them.
Email addresses for updates
If you submit your email to follow development, we store that address and the page you submitted it from. We use it only to send product updates and you can ask us to delete it at any time.
What we do not collect
We do not run advertising trackers, we do not sell or rent personal information, and we do not use third-party marketing or social media pixels on this site.
How your information is used
- To authenticate you and operate the features you use.
- To generate the outputs you request: scores, analyses, documents, and answers.
- To diagnose errors and keep the service secure and available.
- To send product updates if you asked for them (each email includes an unsubscribe path).
We do not use your submitted content to train AI models, and we do not share it with other users.
AI processing and cross-border transfer
Please read this section before submitting sensitive information. When you use the Legal Q&A module, the text of your question and your selected jurisdiction are transmitted to Anthropic's Claude API for processing. That processing happens on infrastructure located outside Canada, primarily in the United States. Information processed in another country may be accessible to that country's authorities under its laws.
Deterministic modules (the CRS calculator, PNP matching, employment-standards lookups, contract clause extraction, and document generation) run on our own servers and do not send your data to any AI provider.
Do not include information you would not want processed outside Canada in a Q&A question. Describe your situation generally rather than including names, file or client numbers, dates of birth, or identifiers.
Answer caching
To control cost and latency, generated answers are cached for up to seven days, keyed by a one-way hash of the normalized question text and jurisdiction. Two users asking the same general question may receive the same cached answer. Cached entries are not linked to your account and are never presented to another user as their history.
Storage, retention, and security
- Data is stored in a PostgreSQL database. Passwords are hashed with bcrypt. Sessions use short-lived signed tokens.
- All traffic to the platform is encrypted in transit (HTTPS).
- Account data is retained while your account is active. Cached AI answers expire after seven days.
- No security measure is perfect. During early access, please do not upload documents whose disclosure would cause you serious harm.
Your rights
Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), and under Quebec's Law 25 if you are in Quebec, you have the right to access the personal information we hold about you, to ask for corrections, to withdraw consent, and to ask for deletion. Quebec residents additionally have rights regarding automated decision-making and data portability.
Our calculators do not make automated decisions about you; they compute published government scoring rules against values you enter, and a human (you) decides what to do with the result. No eligibility determination is made or transmitted to any government body.
To exercise any right, contact us at the address below. We will respond within 30 days.
Cookies and local storage
We use browser local storage to hold your session token so you stay signed in, and to remember whether you dismissed the disclaimer banner. We do not use advertising or analytics cookies. Clearing your browser storage signs you out.
Children
This service is not directed at children under 16 and we do not knowingly collect their personal information.
Changes
If we change this policy materially we will update the date at the top and, where the change affects how your existing data is handled, notify account holders by email.
Contact
Privacy questions and requests: privacy@theagistudio.com. If you are not satisfied with our response you may contact the Office of the Privacy Commissioner of Canada, or the Commission d'accès à l'information du Québec if you are in Quebec.
See also our Terms of Service and Legal Disclaimer.