Privacy Policy

Effective 10 July 2026

OpenLegalData (“we”, “us”) is operated by Altien. This policy explains what personal data we collect when you use openlegaldata.net and its dataset APIs, and why. The legal materials we publish are public records — this policy concerns data about you.

What we collect

• When you sign in with LinkedIn — your name, email address, and LinkedIn member ID, received via LinkedIn’s “Sign In with LinkedIn using OpenID Connect.” We never receive your password and cannot post on your behalf.
• API keys & access logs — if you generate an API key, we store it and link it to your account. We log requests to our APIs (endpoint, timestamp, the key/account used, and may include IP address) to run the service, understand usage, and prevent abuse.
• Commercial-terms acceptance — before issuing an API key we store the Hosted Terms and Commercial Software Licence versions and document hashes, the Customer legal business name, acceptance time, confirmation of business authority, and may store IP address and browser user-agent as evidence of acceptance.
• A session cookie — one signed cookie scoped to .openlegaldata.net keeps you signed in across our sites. It is strictly necessary for authentication; it is not used for advertising or cross-site tracking.

We do not use third-party advertising or analytics trackers, and we do not sell your personal data.

Why we collect it

• To give you access and manage your API keys (to provide the service you request).
• To record and demonstrate the commercial agreement governing your access.
• To understand who finds the commons useful and to keep it secure against abuse (our legitimate interests).
• LinkedIn sign-in happens with your consent each time you authorize it.

Who we share it with

We use service providers solely to operate the service:

• Cloudflare — hosting, edge compute, and storage (Workers, D1, KV, R2).
• LinkedIn — authentication; your use of LinkedIn sign-in is also governed by LinkedIn’s own Privacy Policy.

We may disclose data where required by law.

Retention

We keep your account details and API keys while your account is active. Access logs are retained for a limited period for security and operations, then deleted or aggregated. You can ask us to delete your account and keys at any time.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or object to the processing of your personal data. To exercise these — or to revoke an API key — contact us below. You can disconnect LinkedIn at any time from your LinkedIn settings.

The legal data itself

The case law, statutes, and other legal materials we serve are public-domain or openly licensed public records. They are not personal data about you, and nothing on this service is legal advice.

Children

The service is not directed to children under 16, and we do not knowingly collect their data.

Changes

We may update this policy; the effective date above will change, and material changes will be noted on this page.

Contact

Questions or requests: privacy@openlegaldata.net.