Privacy
Privacy Policy
Legal Guide at directory.com.au/legal. Effective 13 Nov 2026.
1. Who we are
Legal Guide is operated by WWW.DIRECTORY.COM.AU PTY LTD (ABN 68 090 816 461), 1 Katherine St, Chatswood NSW 2067 ("we", "us"), which also operates Directory.com.au. This policy explains how we handle personal information in Legal Guide. We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. The Directory.com.au Privacy Policy covers the rest of the website.
2. What we collect
- Account details: your email address, the first name you give us (optional) and your password (stored only as a one-way hash).
- What you send us: your questions, the AI's answers and any document or photo you upload or paste.
- Usage records: how many tokens each question used, when, your plan and whether the answer succeeded. These records contain no question or document text.
- Billing details: if you take a paid plan, Stripe processes your payment. We receive your Stripe customer and subscription identifiers and the plan status. We never see or store your card number.
- Technical and security information: our web server records your IP address, the time, the page requested and your browser type. We also keep short-lived records of sign-in attempts and request counts to stop abuse.
Questions and documents can contain sensitive information, such as health, criminal record or family details, about you or other people. You choose what to send. We use it only to answer your questions. Please leave out details that are not needed, and only upload documents you are allowed to share.
3. How we use it
- to create and secure your account and send service emails (sign-up links, password resets and security notices);
- to answer your questions and show your conversation history;
- to count usage against your plan and to bill paid plans;
- to prevent misuse, fraud and attacks, and to keep the service running; and
- to meet our legal obligations.
We do not sell your information, we do not use it for advertising, and we do not send marketing email from Legal Guide. People at our company do not read your questions or documents, except where you ask us to help with a problem, or where we must to investigate misuse or comply with the law.
4. AI processing and overseas disclosure
To produce an answer, your question, the conversation so far and any document you attached are sent to our AI provider, Anthropic, which processes them in the United States. Under Anthropic's commercial terms it does not use this content to train its models, and its published policy is to delete API inputs and outputs within 30 days, unless it must keep them longer (for example to meet legal obligations or to deal with breaches of its usage policies).
If you take a paid plan, Stripe handles your payment and billing details, and may store and process them in the United States and other countries.
Our own servers, including our database and email servers, are in Australia. By using Legal Guide you consent to the disclosures above. We take reasonable steps to make sure these providers protect your information.
5. How long we keep it
| Information | How long |
|---|---|
| Uploaded or pasted documents and photos | Deleted automatically 7 days after upload, or sooner if you delete the conversation or your account |
| Conversations (your questions and the AI's answers) | Deleted automatically 30 days after your last message in that conversation, or sooner if you delete them |
| Account details | Until you delete your account |
| Usage records (token counts only, no content) | 12 months |
| Account security events (for example password changes and plan changes, no content) | 12 months |
| Sign-in attempts and request counts | Up to 2 days |
| Sign-up and password reset links | Deleted within 7 days of being used or expiring |
| Web server logs (IP address, time, page, browser) | About 8 weeks |
| Billing and tax records | As long as tax law requires (generally 5 years) |
Server backups can hold deleted information for a short time after deletion, until they are replaced. Questions, answers and documents stay encrypted in those backups.
6. How we protect it
Connections use HTTPS. Questions, answers, conversation titles and documents are encrypted in our database (AES-256-GCM), and the encryption key is stored separately from the database. Passwords are hashed. Our AI provider's and payment provider's keys stay on our servers and are never sent to your browser. Access to our servers is restricted to authorised people.
7. Cookies and offline storage
Legal Guide uses one essential cookie (dlg_sid) to keep you signed in. It is limited to directory.com.au/legal, cannot be read by scripts, and is only sent over HTTPS. We do not use advertising or analytics cookies in Legal Guide. When you install Legal Guide as an app, your browser stores the app's design files so it can show an offline screen; it does not store your conversations offline.
8. Your choices and rights
- Access and correction: see and change your details on your account page, and download a copy of your conversations and usage (Account, Download my data).
- Deletion: delete any conversation, all your conversations, or your whole account at any time. Deleting your account removes it straight away and cancels any subscription.
- Other requests: contact us through our contact form. We may need to confirm your identity first.
9. Complaints
If you think we have mishandled your information, please contact us through our contact form or write to us at WWW.DIRECTORY.COM.AU PTY LTD, 1 Katherine St, Chatswood NSW 2067. We will respond within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).
10. Changes
We may update this policy. We will show the new effective date here and, for significant changes, tell signed-in users in the app.