Privacy Policy
1. Who We Are
Abalmon Inc. (the "Company", "we", "us", or "our") is a Delaware C Corporation incorporated on May 19, 2025, with its registered office at:
Abalmon Inc.
1606 Headway Circle
Austin, TX 78754
United States
This Privacy Policy applies to the website located at https://lawty.ai and related Lawty services provided by Abalmon Inc. Lawty is a product operated by Abalmon Inc.
For privacy matters you can contact us at:
EU Representative
For users located in the European Union, Abalmon Inc. has appointed the following representative in accordance with Article 27 of the General Data Protection Regulation:
BIESE SCHOOL SL
Spain
You may contact our EU representative regarding matters related to the processing of personal data within the European Union.
2. Information We Collect
2.1 Non Personal Information
We collect information that does not directly identify you. This may include:
- anonymous usage data
- referring and exit pages and URLs
- browser and device type
- operating system
- usage metrics such as click counts, session duration, and feature usage
This information helps us understand how the service is used and improve its performance.
2.2 Personal Information
We collect personal information that you provide directly to us, such as:
- name
- email address
- account credentials
- information submitted when contacting support or using the service
You may also provide additional information voluntarily when using certain features of the service.
2.3 Information Collected via Technology
We automatically collect certain technical data when you access or use the service, including:
- IP address
- browser type
- device type
- operating system
- referring URL
- access times
We use cookies and similar technologies to:
- authenticate users
- remember preferences
- maintain session state
- analyze site usage
Where required by law, we obtain your consent before placing non essential cookies.
2.4 Children's Privacy
The service is not intended for children under the age of 16. We do not knowingly collect personal data from children. If we become aware that personal data from a child has been collected, we will take reasonable steps to delete such information.
3. How We Use Information
We use the information we collect to:
- provide and operate the service
- create and manage user accounts
- process user requests and support inquiries
- improve functionality and performance
- analyze usage trends
- ensure security and prevent abuse
- comply with legal obligations
4. Legal Basis for Processing (EU Users)
For users located in the European Economic Area, we process personal data based on one or more of the following legal bases under the General Data Protection Regulation:
- Performance of a contract when you create an account and use the service
- Consent when you opt into optional features such as analytics cookies
- Legitimate interests, such as improving our service, maintaining security, and preventing fraud
- Legal obligations where processing is required by law
5. Sharing of Information
We do not sell or rent personal data.
We may share personal information with:
Service Providers
Trusted vendors and service providers who perform services on our behalf, such as:
- hosting providers
- analytics providers
- infrastructure services
- customer support tools
These providers are required to process personal data only according to our instructions and under appropriate confidentiality obligations.
We maintain an up-to-date subprocessor list ("encargados de tratamiento") and a Record of Processing Activities ("RAT", Registro de Actividades de Tratamiento) in our Data Processing Agreement. See https://lawty.ai/legal/dpa.
Legal Requirements
We may disclose personal data if required to:
- comply with applicable laws
- respond to lawful requests from authorities
- enforce our terms and policies
- protect our rights, property, or safety
Business Transfers
If the Company undergoes a merger, acquisition, restructuring, or sale of assets, personal data may be transferred as part of that transaction.
6. Processing of Customer Data
If users upload or process personal data belonging to third parties through the service, those users act as data controllers, and Abalmon acts as a data processor processing such data on their behalf.
In these cases, processing occurs solely to provide the requested service and according to the user's instructions.
7. Third Party Integrations
When users connect third party platforms or services, any raw or derived data obtained through such integrations must be handled in accordance with the applicable third party user data policies.
For example, data obtained from Google Workspace APIs is processed in accordance with the Google User Data Policy and its Limited Use requirements.
8. Data Processing Location
Lawty is designed to use EEA-hosted infrastructure for core platform workloads and to prefer providers that offer European data residency or regional controls where available.
Actual processing locations may vary depending on customer-enabled integrations, provider configuration, service routing, and legal requirements. Where personal data is transferred outside the EEA, Abalmon will rely on an appropriate transfer mechanism and reflect material changes in its documentation or customer terms.
9. Data Retention
We retain personal data only for as long as necessary to:
- provide the service
- fulfill the purposes described in this policy
- comply with legal obligations
- resolve disputes and enforce agreements
When an account is deleted, we will delete or anonymize associated personal data within a reasonable period unless retention is required for legal or security reasons.
10. Security
We implement reasonable administrative, technical, and physical safeguards designed to protect personal data from unauthorized access, disclosure, alteration, or destruction.
Your account is protected by a password, and you are responsible for maintaining the confidentiality of your login credentials.
While we strive to protect your information, no system can guarantee absolute security.
11. Your Rights
Depending on your location, you may have the right to:
- access your personal data
- correct inaccurate data
- request deletion of your data
- restrict processing
- object to certain types of processing
- request data portability
You may also withdraw consent where processing is based on consent.
To exercise these rights, please contact us at:
Users located in the European Union also have the right to lodge a complaint with their local data protection authority.
12. Links to Other Websites
The service may contain links to third party websites not operated by us. This Privacy Policy applies only to information collected by Abalmon through the service.
We encourage users to review the privacy policies of any external sites they visit.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
If material changes are made, we will notify users by posting the updated policy on the website with a revised "Last revised" date.
Continued use of the service after such updates constitutes acceptance of the updated policy.
14. GDPR Governance and Documentation
We maintain GDPR documentation that includes:
- an internal Record of Processing Activities under Article 30 GDPR
- a documented list of subprocessors (encargados/subencargados de tratamiento)
- documented review of provider regional controls, data handling terms, and transfer mechanisms
- a customer-facing Data Processing Agreement aligned with Article 28 GDPR
For transparency, our public DPA includes the current list of providers and a summary RAT table.
15. Contact Us
If you have questions about this Privacy Policy or our data practices, you can contact us at:
Abalmon Inc.
1606 Headway Circle
Austin, TX 78754
United States
EU Representative:
BIESE SCHOOL SL
Spain