Privacy Notice

1. Who we are

BonaFide is operated by Relocate Legal PLLC("we", "us"). When you use BonaFide, we are the data controllerfor your personal data — we decide what data is collected and how it is used. You can reach us at info@relocatelegal.com.

2. What data we collect

We collect the following categories of personal data:

• Account data: name (or display name), email address, hashed password, and (if used) Google account identifier.
• Case content: the evidence you upload (photos, documents, PDFs, screenshots), captions, labels, exhibit numbers, and case names.
• Attorney–client links: when you accept an attorney's invitation, we record the attorney–client relationship and which cases are shared.
• Support and feedback: messages you send us, including screenshots you attach.
• Usage and device data: IP address, browser type, pages visited, and basic timing information collected through standard server logs and our analytics.
• Payment data: handled directly by Paddle (see below). We receive a record that a payment occurred, the plan purchased, and a Paddle customer / subscription identifier — but not your full card number.

3. Why we use it (purposes and legal bases)

• To provide the Service (host your evidence, generate binders, share cases with your attorney) — legal basis: performance of our contract with you.
• To process payments and manage subscriptions through Paddle — legal basis: performance of our contract with you.
• To keep the Service secure (fraud prevention, abuse detection, audit logs) — legal basis: our legitimate interests in protecting users and the Service.
• To support you when you contact us — legal basis: performance of our contract / our legitimate interests.
• To improve the Service (analytics on aggregated usage, bug investigation) — legal basis: our legitimate interests.
• To meet legal obligations (tax, accounting, responding to lawful requests) — legal basis: legal obligation.

4. Who we share data with

• Paddle.com Market Limited — our Merchant of Record and payment provider. Paddle independently processes your payment information, sells the subscription / one-time access to you, manages billing, calculates and remits sales tax, and issues invoices. See Paddle's Privacy Notice.
• Hosting and infrastructure providers (cloud hosting, database, file storage) acting as our processors under written agreements.
• Authentication and email providers for sign-in and transactional email delivery.
• Your attorney (or your client, if you are the attorney), but only for cases you have explicitly linked.
• Professional advisers (legal, accounting) when needed to run our business.
• Authorities when we are required by law (court order, subpoena, regulatory request).

We do not sell your personal data and we do not use it to train AI models.

5. International transfers

Our service providers may be located outside your country. Where data is transferred internationally, we rely on appropriate safeguards (such as Standard Contractual Clauses or an adequacy decision) to protect it.

6. How long we keep data

We keep your account and case content for as long as your account is active. If you delete your account or ask us to, we will delete or anonymize personal data within a reasonable period, except where we must retain it to meet legal, tax, or accounting obligations (typically up to 7 years for billing records). Server logs are kept for a short rolling window (typically 30–90 days) for security purposes.

7. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), encryption at rest for stored files, role-based access controls, and database row-level-security policies that restrict each user's visibility to their own data and to cases their attorney–client relationship covers. No system is perfectly secure; please use a strong, unique password and contact us at info@relocatelegal.com if you suspect unauthorized access.

8. Your rights

Depending on where you live, you have rights over your personal data. These typically include the right to access a copy of your data, to correct inaccurate data, to delete your data, to restrict or object to certain processing, to receive your data in a portable format, and to withdraw consent where we rely on it. EU/UK users also have the right to lodge a complaint with their supervisory authority. To exercise any of these rights, email info@relocatelegal.com. We respond within one month.

9. Cookies

We use a minimal set of cookies and similar technologies:

• Essential: keep you signed in, remember your session, and protect against abuse. These are required for the Service to work.
• Analytics: aggregated usage analytics to understand which features are used. You can block these in your browser settings.
• Payment: Paddle uses cookies during checkout to process your payment.

10. Children

BonaFide is not directed to children under 16. Do not create an account if you are under 16. If you believe a child has provided us data, contact us and we will delete it.

11. Changes

We may update this Privacy Notice from time to time. If a change is material, we will notify you in the app or by email before it takes effect.

12. Contact

For privacy questions or to exercise your rights, email info@relocatelegal.com. See also our Terms & Conditions and Refund Policy.