All controls monitoredLast updated October 2026Hosted in the United StatesAppend-only audit on every action
Legal by Rose
Data & privacy rights

Your privacy rights (CCPA / CPRA & GDPR)

Rights available to individuals whose personal information we handle. Where we process a firm’s client and matter data on its behalf, we act as a service provider and direct requests to that firm.

Know & access

Request confirmation of whether we process your personal information and a copy of it.

Delete

Request deletion of your personal information, subject to legal and security exceptions.

Correct

Request correction of inaccurate personal information we hold about you.

Opt out of sale or sharing

There is nothing to opt out of — see below — but the right is honored regardless.

Non-discrimination

We will not deny service, change pricing, or reduce quality for exercising your rights.

Authorized agents

You may use an authorized agent to submit a request, with verification of authority.

We do not sell or share your personal information

We do not sell personal information and do not share it for cross-context behavioral advertising. We do not use customer data to train generative AI models for other customers. To exercise a right, contact privacy@legalbyrose.com; we acknowledge requests promptly and respond within the timelines required by applicable law (generally 45 days under CCPA/CPRA, extendable once where permitted).

Questions from your security team?

We share our SOC 2 report, subprocessor registry, BAA and DPA under NDA, and will walk your team through the controls.

Start a security review