Firmly (“we”, “us”, “our”) operates a web-based legal practice management platform designed for lawyers, law firms, and clients in Nigeria. This Privacy Policy explains how we collect, use, store, share, and protect personal data when you use our website, web application, and related services (collectively, the “Services”).

By using Firmly, you agree to the practices described in this Privacy Policy.

1. Scope

This Privacy Policy applies to:

• Visitors to the Firmly website

• Lawyers and law firms using Firmly

• Clients who interact with lawyers through Firmly

• Any person whose personal data is processed through the platform

It does not apply to third-party websites or services linked from Firmly.

2. Legal Basis for Processing

We process personal data in line with the Nigeria Data Protection Act (NDPA) on the following legal bases:

• Performance of a contract

• Compliance with legal obligations

• Legitimate business interests

• User consent, where required

3. Personal Data We Collect

3.1 Data You Provide Directly

When you create an account or use the Services, we may collect:

• Full name

• Email address

• Phone number

• Law firm name and role

• Professional details (area of practice, profile information)

• Client information entered by lawyers

• Billing and invoicing details

• Documents uploaded to the platform

• Messages and communications within the platform

3.2 Client Data

Lawyers may upload or manage client data, including:

• Names and contact details

• Case information

• Legal documents

• Court dates and filings

This data is processed on the instructions of the lawyer or law firm acting as the data controller.

3.3 Automatically Collected Data

When you use Firmly, we collect:

• IP address

• Device type and browser

• Operating system

• Log data and usage activity

• Dates and times of access

3.4 Offline Data

If you use offline features, we store selected data locally on your device and sync it when you reconnect to the internet.

4. How We Use Personal Data

We use personal data to:

• Create and manage user accounts

• Provide legal practice management features

• Enable client-lawyer communication

• Generate documents, invoices, and reports

• Power AI-assisted legal research and document automation

• Process payments and subscriptions

• Improve platform performance and security

• Comply with legal and regulatory obligations

We do not sell personal data.

5. AI and Automated Processing

Firmly uses AI tools to support:

• Legal research

• Document drafting and automation

• Workflow prioritization

AI outputs are advisory only. Lawyers remain responsible for all professional decisions and outputs.

We do not use AI to make legally binding decisions about users or clients without human review.

6. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain login sessions

• Improve site functionality

• Analyze usage patterns

You can manage cookie preferences through your browser settings.

7. Data Sharing and Disclosure

We may share data with:

• Cloud hosting providers

• Payment processors (e.g., Paystack, Stripe)

• Email and notification service providers

• Analytics and monitoring tools

All third parties are bound by confidentiality and data protection obligations.

We may disclose data if required by Nigerian law, court order, or regulatory authority.

8. Data Storage and Security

We apply technical and organizational measures to protect data, including:

• Encryption in transit and at rest

• Role-based access control

• Secure authentication

• Audit logs and monitoring

Data may be hosted on secure cloud infrastructure located inside or outside Nigeria. Where data is transferred outside Nigeria, we apply safeguards required by Nigerian data protection law.

9. Data Retention

We retain personal data only as long as necessary to:

• Provide the Services

• Meet legal, accounting, or regulatory requirements

When data is no longer required, it is securely deleted or anonymized.

10. User Rights

Under Nigerian data protection law, you have the right to:

• Access your personal data

• Correct inaccurate data

• Request deletion of data

• Object to certain processing

• Withdraw consent where processing is based on consent

• Request data portability

Requests can be sent to the contact details below.

11. Lawyers as Data Controllers

Where lawyers or law firms process client data using Firmly:

• The lawyer or firm is the data controller

• Firmly acts as a data processor

• Lawyers are responsible for client consent and lawful processing

12. Children’s Data

Firmly is not intended for use by children under 18. We do not knowingly collect data from minors.

13. Third-Party Integrations

Firmly integrates with third-party services such as calendars and payment providers. Their privacy practices are governed by their own policies.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised date.

Continued use of Firmly after updates means you accept the revised policy.

15. Contact Information

For privacy or data protection enquiries, contact:

Firmly

Email: princess@nerdbug.io