Privacy Policy

Summary

• We are CorporateLegal.tech LLC, an independent publisher and directory for corporate legal departments and legal technology.
• We collect what you give us in our forms and emails, plus basic analytics about how our website and newsletter are used.
• We use it to answer you, send the newsletter you asked for, run the directory and sponsorships, and improve the site.
• We may share your name, email address, job title and company with our sponsors and partners unless you opt out (in the EU and UK, only if you tick the box to agree). We have not sold anyone's information yet. Otherwise sponsors receive aggregate audience statistics only, and a message you send about a Company goes only to that Company.
• You can ask to see, correct or delete your information, opt out of sharing, or unsubscribe, at any time by emailing privacy@corporatelegal.tech.

Who we are

CorporateLegal.tech LLC, a Missouri limited liability company ("CorporateLegal.tech", "we", "us"), operates www.corporatelegal.tech (the "Site"), the weekly email newsletter "The CorporateLegal.tech Brief", our webinars, and our social media channels. We are the controller of the personal information described in this policy.

Mailing address: 117 S Lexington St, Ste 100, Harrisonville, MO 64701
Privacy contact: privacy@corporatelegal.tech

What we collect

Information you give us

• Contact and inquiry forms: name, work email, company, job title or role, phone number (optional) and your message. This includes our contact form, sponsor inquiries, requests for information about a listed Product, and webinar registration.
• Newsletter sign-up: your email address and, if you provide them, your name, company and role, plus a record of when and where you subscribed and whether you confirmed.
• Directory submissions: your contact details and the product or company information you submit.
• Contributor submissions: your contact details, article, biography, headshot and social links.
• Email correspondence: messages you send us and our replies.
• Purchases: for sponsorships and paid listings, your billing name, email, company and payment status. Our payment processor handles your card details; we never receive full card numbers.
• AI chat assistant: the questions you type into the assistant on our home page, the answers it gives, the directory listings it shows you, and any feedback you leave on an answer. Please do not enter confidential, privileged or sensitive personal information. We remove email addresses and phone numbers from questions before recording them in our analytics, but we cannot guarantee that every piece of personal information is removed.

Information collected automatically

• Website analytics: pages viewed, links clicked, approximate location derived from your IP address, browser and device type, referring site, and on-site search queries. We also record which directory listings are shown and clicked, and, when a form is submitted, the requester's company and role (never their name, email or message). See our Cookie Policy.
• Advertising measurement: if you accept marketing cookies (or are in the US and have not declined them), the LinkedIn Insight Tag records visits so we can measure our LinkedIn campaigns.
• Newsletter engagement: whether an email was opened (using a small image, or "pixel") and which links were clicked. Links to our Site carry UTM tags so we can see which issues drive visits.
• Business email engagement: for emails we send to companies in our directory, whether each email was delivered or bounced, opened (using a pixel), which links were clicked, and whether you replied.

Information from other sources

• Social media: aggregate engagement statistics from our posts on the platforms listed below.
• Public business information: when we research Companies for the directory, we use public information about businesses and their products. Directory listings describe companies, not private individuals.
• Business contact details: work email addresses that companies in our directory publish for partnerships, marketing or press inquiries, and the details of people who submitted or manage a listing. We use them to email those companies about their listing and about sponsorship (see "Email tracking").

How we use it, and our legal bases

For visitors in the EU and UK, the list below also shows the legal basis we rely on under the GDPR and UK GDPR.

• Sending "The CorporateLegal.tech Brief" and other emails you subscribed to — Consent
• Replying to messages and inquiries, and managing business relationships with readers, vendors, sponsors and contributors — Legitimate interests (running our business and responding to people who contact us)
• Emailing companies in our directory about their listing and about sponsorship, and measuring those emails — Legitimate interests (keeping the directory accurate and offering relevant services to businesses). Every such email says why you received it and lets you opt out; consent for open tracking where local law requires it
• Forwarding a request for information to the Company you chose (see "Introductions to Companies") — Consent, given when you submit the request
• Sharing your contact details with sponsors and partners — Consent (EU/UK); opt-out elsewhere
• Sharing your sign-up with the sponsor of a sponsored webinar — A condition of the free sponsored session, disclosed on the form before you sign up
• Selling and delivering sponsorships and paid listings, invoicing and collecting payment — Performance of a contract
• Keeping financial and tax records — Legal obligation
• Website and newsletter analytics, and aggregate audience statistics — Legitimate interests (understanding and improving our content); consent where our cookie banner or local law requires it
• LinkedIn advertising measurement — Consent (EU/UK); opt-out elsewhere
• Classifying contacts by role and organization type to produce aggregate audience statistics — Legitimate interests
• Reviewing and publishing contributor articles and directory submissions — Legitimate interests; contract for contributors
• Running the AI chat assistant and improving its answers — Legitimate interests (answering your questions and improving the directory)
• Protecting the Site, preventing abuse and enforcing our terms — Legitimate interests

Where we rely on consent, you can withdraw it at any time. Where we rely on legitimate interests, you can object (see "Your rights").

Introductions to Companies

When you use a "Request Info" form on a Product page, a CorporateLegal.tech moderator reviews your request and, if appropriate, forwards your name, contact details, company, role and message to that Company. We do this only because you asked us to. After we forward it, the Company's own privacy policy governs how it uses your information.

How we use AI

We use Anthropic's Claude API to help us draft content, summarize and triage incoming messages, draft replies, and classify contacts by role or seniority and organization type (for example, "in-house, GC/CLO") so we can report aggregate audience statistics. A person always reviews AI output before anything is sent or published. We never make decisions with legal or similarly significant effects about you by automated means alone. Under Anthropic's commercial terms, Anthropic does not use our API inputs or outputs to train its models by default. See our AI Use Statement.

The AI chat assistant on our home page is provided through Algolia and uses models from Anthropic (Claude) and Google (Gemini) to answer your questions from our directory. Its answers can be incomplete or wrong, so please confirm important details with the Company before relying on them.

What sponsors receive

Sponsors receive aggregated statistics, such as subscriber counts, open and click rates, audience composition percentages, page views, and impressions and clicks on their listings. Your opens and clicks stay with us. Sponsors receive individual details only as described in "Sharing with sponsors and partners" and "Webinars" below, or when you ask us about their product or for an introduction.

Sharing with sponsors and partners

Unless you opt out, we may share your name, email address, job title and company with our sponsors, consulting partners and companies in our directory whose products or services may be relevant to in-house legal teams. They may contact you about their products and services and handle your details under their own privacy policies. Our agreements require them to use your details only for that purpose, to honour opt-outs and not to resell them. We never include the messages you send us: a message about a Company goes only to that Company.

If you are in the EU, UK, EEA or Switzerland, we share your details only if you tick the optional box on our form to agree. Where we don't know where you are, we treat an email address on an EU or UK country domain (such as .de, .fr or .co.uk) as being there.

You can opt out at any time on our Do Not Sell or Share My Personal Information page (/do-not-sell), by emailing privacy@corporatelegal.tech, or by turning on Global Privacy Control in your browser. We stop sharing your details from then on. We can't recall details we have already shared, but we keep a record of who received them and will tell you if you ask.

Webinars

What we collect when you sign up. Your name, work email address and, if you give them, your job title, company and a question for the speakers. We also record whether you attended and for how long, and which emails we sent you about the webinar. We register you for the webinar in Microsoft Teams, which sends your personal join link and reminders.

Recording. Our webinars are recorded, including video, audio, the chat and questions asked in Q&A, and a transcript is produced. We tell you this when you sign up and Teams asks you to agree when you join. If you don't want to appear in the recording, keep your camera and microphone off and don't post in the chat or Q&A; you can still watch and ask us questions by email afterwards.

How we use the recording and transcript. We publish the recording on YouTube as an unlisted video and send the link to people who registered or asked for it. We use the transcript to write the recording's description, chapters, summary and key takeaways, drafted with an AI service (Anthropic's Claude) and reviewed by a person before publishing. We credit the speakers by name; we never name attendees in this copy. Attendees' questions may be heard or seen in the recording.

Emails and spam protection. We email you about the webinar you signed up for: a confirmation with a calendar invite, and afterwards a thank-you or sorry-we-missed-you message with the recording. Signing up for a webinar does not subscribe you to our newsletter. Sign-ups are checked automatically for spam and abuse; personal email addresses are accepted.

Sponsored webinars. Some webinars have a sponsor, named on the webinar's page. For a sponsored webinar, sharing your details with the sponsor is part of signing up, and the form says so before you submit it: when you register, or ask for the recording, we share your name, job title, company and email with the sponsor, together with whether you joined the live session or asked for the recording. The sponsor may contact you about its products and services and handles your details under its own privacy policy. If you don't want your details shared, please don't sign up for that webinar. For webinars without a sponsor, sponsors receive only totals, never anything that identifies you.

How long we keep it, and your choices. We keep webinar sign-up and attendance records for 24 months after the webinar, and the recording for as long as it is published. You can ask us for a copy of your information, to correct or delete it, or to stop webinar emails, by emailing privacy@corporatelegal.tech. Removing yourself from a published recording may not be possible, but we will consider any request, for example to cut a question you asked.

Legal basis (EU/UK). We process your sign-up to provide the webinar you asked for, and recordings on the basis of our legitimate interest in sharing our sessions (and your agreement when you join). For sponsored webinars, sharing your details with the sponsor is a condition of the free sponsored session, disclosed before you sign up.

Who we share information with

We share personal information only with:

• Service providers that process it for us under contract (listed below).
• Companies you ask about or ask to be introduced to. A message you send us about a Company goes only to that Company.
• Sponsors, consulting partners and companies in our directory: your name, email address, job title and company, unless you opted out (in the EU and UK, only if you agreed). See "Sharing with sponsors and partners".
• Sponsors of webinars you sign up for, as described under "Webinars".
• Professional advisers, such as lawyers and accountants, under confidentiality duties.
• Authorities, when required by law or to protect our rights, users or the public.
• A successor business, if CorporateLegal.tech is sold or merged; we would notify you first.

Service providers and platforms

• Webflow — Website hosting, content management, forms and ecommerce checkout (United States)
• Microsoft 365 — Business email and calendar, including meetings and webinars (United States / global)
• Microsoft Azure Communication Services — Sending the newsletter and transactional emails (United States / global)
• Anthropic (Claude API) — AI assistance with drafting, summarizing, triage and classification, and generating answers in the AI chat assistant on our home page, through Algolia (United States)
• Algolia — Site search and the AI chat assistant on our home page (United States)
• Google (Gemini) — Generating answers in the AI chat assistant on our home page, and, under the same cookie choices as PostHog, recording which of its results are shown and clicked and whether you then request an introduction or visit the Company's website, to measure and improve its search. These events use PostHog's anonymous browser identifier, never your name or email (United States)
• PostHog — Website analytics (United States)
• Google Analytics — Website analytics, under the same cookie choices as PostHog, with advertising features turned off (United States)
• LinkedIn — Advertising measurement (Insight Tag) and our LinkedIn page (United States / Ireland)
• Stripe — Payment processing and invoices (United States / global)
• Reddit and other social platforms (LinkedIn, Bluesky, Threads, X, Mastodon, Instagram, Facebook, TikTok, YouTube, Pinterest) — Hosting our community, r/CorporateLegal_tech, and our social channels, and providing engagement statistics (various)

Social platforms are independent companies. When you interact with us on them, their own privacy policies apply.

Our customer records (the "CRM") are not held by a cloud CRM provider. They are stored on our own computer, which also reads our Microsoft 365 mailbox to log conversations and process unsubscribe requests.

International transfers

We are based in the United States, and our service providers may process information in the US and other countries. When we transfer personal information from the EU, UK or Switzerland, we rely on the provider's certification under the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions) where available, or on the European Commission's Standard Contractual Clauses and the UK Addendum.

How long we keep it

• Contacts, inquiries and correspondence: two years after our last interaction with you, unless you ask us to delete them sooner. Continued correspondence restarts the two-year period.
• Newsletter subscribers: while you are subscribed. After you unsubscribe, we keep your email address and consent record on a suppression list so we do not email you again.
• Records of who we shared your details with: kept so we can tell you who received them if you ask, and so we honour your opt-out.
• Webinar sign-ups and attendance: 24 months after the webinar. Recordings stay up for as long as they are published.
• Business email opt-outs and bounces: if you opt out of our business emails, or an address bounces, we keep the email address on a do-not-contact list so we do not email it again.
• Invoices, receipts and payment records: seven years, for accounting and tax purposes.
• Published content: contributor articles and profiles stay published unless removed under our Creator Agreement.
• AI chat assistant conversations: up to 12 months.
• Analytics data: as set in our analytics tools, and only as long as it is useful for aggregate reporting.

How we protect it

Access to personal information is limited to people who need it. Our CRM runs on our own computer, its administration dashboard can be reached only from that computer, and passwords and keys are stored locally with restricted file permissions. No system is perfectly secure; if a breach affects you, we will notify you and the relevant authorities as the law requires.

Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Delete your information. We can erase a contact from our systems in one step.
• Withdraw consent or unsubscribe at any time.
• Object to processing based on legitimate interests, and to direct marketing.
• Restrict processing, or receive your information in a portable format (EU/UK).
• Complain to your data protection authority. In the UK this is the Information Commissioner's Office; in the EU it is the authority where you live or work.

To use any of these rights, email privacy@corporatelegal.tech. We may need to confirm your identity. We will respond within one month (EU/UK) or 45 days (US state laws), and we will not treat you differently for exercising your rights.

US state privacy rights, including California

Residents of California and other US states with consumer privacy laws may have the rights described above: to know, access, correct and delete personal information, and to opt out of its sale, "sharing" for cross-context behavioral advertising, and targeted advertising.

• Sale and sharing: we may sell or share identifiers (name and email address) and professional information (job title and company) with sponsors, consulting partners and companies in our directory, as described in "Sharing with sponsors and partners". In the past 12 months we have not sold or shared personal information this way. You can opt out at any time on our Do Not Sell or Share My Personal Information page (/do-not-sell), by emailing privacy@corporatelegal.tech, or by turning on Global Privacy Control in your browser.
• LinkedIn Insight Tag: some state laws may treat the LinkedIn Insight Tag as "sharing" or targeted advertising. You can opt out by clicking Decline on our cookie banner (or through the "Cookie settings" link in our footer). We also honor Global Privacy Control (GPC) signals as a request to opt out.
• Sensitive information: we do not collect or use sensitive personal information for purposes that would require an opt-out.
• Authorized agents: you may use an authorized agent to make a request. We may ask for proof of authorization.
• Appeals: if we decline your request, you may appeal by replying to our decision. If we deny the appeal, you may contact your state attorney general.

In the last 12 months, we collected the categories of information described in "What we collect": identifiers and contact details, professional information, commercial information (purchases), internet activity, and inferences (role and organization-type classification). We collected them for the purposes and disclosed them to the recipients described above.

Email tracking

Our newsletter and marketing emails include a pixel that records when an email is opened, and links that record when they are clicked. We use this to measure which topics are useful and to report aggregate statistics to sponsors. If you prefer not to be tracked, turn off automatic image loading in your email client, or unsubscribe. See our Newsletter & Email Policy.

Linking newsletter clicks to website visits. Links to our website in the newsletter carry a pseudonymous reader code that we generate. It is not your email address or name. If you click through and our cookie banner allows analytics (you accepted, or in the United States you did not decline), our website analytics provider, PostHog, links that visit and later visits from the same browser to the code. We then attach the audience details we hold for you: the type of organization you work in (for example in-house legal or law firm), your seniority, and your subscription status. We use this to understand which pages, topics and questions matter to different kinds of readers. Your name, email address and employer are never sent to PostHog, and this analytics data is never shared with sponsors. To stop this while staying subscribed, decline analytics cookies or email privacy@corporatelegal.tech and we will stop linking and remove those details from our analytics. Unsubscribing does the same.

Business emails to companies in our directory. We occasionally email the companies listed in our directory, using the business contact details they publish or gave us, to ask them to check their listing and to tell them about sponsorship. These emails are sent one at a time, with at most a couple of follow-ups, and stop as soon as you reply. They use the same open pixel and link tracking described above, and we record delivery, bounces and replies so we know who to follow up with. Every email says why you received it and includes an opt-out link; you can also reply "unsubscribe" or email hello@corporatelegal.tech. Opting out puts your address on our do-not-contact list, and we will not email you again except to answer you. Opting out does not affect your directory listing.

Cookies

We use cookies and similar technologies for analytics and advertising measurement. Visitors outside the US are asked to accept before these load; US visitors can decline at any time. See our Cookie Policy.

Children

Our Site and services are for business professionals. They are not directed at children under 16, and we do not knowingly collect information from them. If you believe a child has given us personal information, contact us and we will delete it.

Changes to this policy

We will post any changes on this page and update the "Last updated" date. If a change materially affects how we use your information, we will tell subscribers by email before it takes effect.

Contact us

CorporateLegal.tech LLC
117 S Lexington St, Ste 100, Harrisonville, MO 64701
privacy@corporatelegal.tech