Privacy Policy

Last updated: 2026-03-01

At Oidria, we take your privacy seriously. This Privacy Policy describes how we collect, use, and protect your personal information when you use our platform.

Data We Collect

Identity Data

Name, date of birth, bar association number (for lawyers), government ID (for KYC verification).

Contact Data

Email address, phone number, office address.

Case Data

Case descriptions, uploaded documents, messages between parties.

Usage Data

Login times, pages visited, features used, device information.

1. How We Use Your Data
We use your data to provide and improve our services, verify professional credentials, facilitate communication between lawyers and clients, process payments, and comply with legal obligations.
2. Legal Basis for Processing
We process your data based on: contractual necessity (to provide our services), legitimate interest (to improve the platform), legal obligation (tax and regulatory compliance), and consent (for optional analytics and marketing).
3. Data Sharing
We never sell your personal data. We share data only with: the other party in a case engagement (limited to case-relevant information), payment processors (Stripe), identity verification providers (Veriff), and cloud infrastructure providers (under strict data processing agreements).
4. Data Retention
We retain your data for as long as your account is active or as needed to provide services. Case data is retained for the legally required period after case closure. You can request deletion of your account and data at any time.
5. International Transfers
All primary data storage is within the European Union. When third-party services process data outside the EU, we ensure appropriate safeguards are in place (Standard Contractual Clauses or adequacy decisions).
6. Security Measures
We implement industry-standard security measures including encryption (TLS 1.3 in transit, AES-256 at rest), multi-factor authentication, role-based access controls, regular security audits, and automated malware scanning.
7. Children's Privacy
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children.

Data Protection Officer

For privacy-related inquiries or to exercise your GDPR rights, contact our DPO.

dpo@odinlegal.com