Who we are
1Legal Compass is run by One Legal Net LLC ("1Legal", "we"), UIC 202431617, 47A Cherni Vrah Blvd., floor 6 (Puzl Coworking), 1407 Sofia, Bulgaria, EU. We are the controller for the personal data described in this policy. You can reach us at office@1legal.net or +359 888 233 024.
Legal review, answers from experts and signed opinions are given by the Law Office of Jenny Gancheva (Attorney Evgenia (Jenny) Gancheva, Sofia Bar Association, personal no. 1100170610), the attorney practice behind 1Legal, which owns One Legal Net LLC. The law office receives workspace content for that work and is bound by attorneys' professional secrecy.
What we collect and why
| Data | Why we use it | Legal basis (GDPR) |
|---|---|---|
| Your answers to the free AI Act check | To show your result in your browser. They are only sent to us if you ask us to email the result | Art. 6(1)(b) steps at your request |
| Your email and company, if you ask us to email your check result | To send the result and contact you about it | Art. 6(1)(a) your consent, which you can withdraw at any time |
| Account data: name, email, the workspaces you belong to and your role | To sign you in and run your workspace | Art. 6(1)(b) contract |
| Workspace content: intake answers, AI systems, tasks, comments, evidence files, questions to experts, trust packs and share links | To provide Compass and the legal review you ask for | Art. 6(1)(b) contract |
| Expert time, plan and billing records | To bill the service and keep accounts | Art. 6(1)(b) contract; Art. 6(1)(c) accounting law |
| An activity log of who changed what in a workspace | Security, and a record your team and our lawyers can rely on | Art. 6(1)(f) our and your interest in a reliable record |
| How often a shared trust pack link was opened, and when it was last opened (no names or IP addresses) | So the company that shared it can see whether its buyer opened it | Art. 6(1)(f) the sharing company's interest |
Workspace content can include personal data about other people, such as your staff or your customers. For that data your company is the controller and we process it on its behalf, under the data processing terms in our terms of service.
Who else processes data
We use these service providers. Each processes data only on our instructions, under a data processing agreement.
| Provider | What for | Where |
|---|---|---|
| SuperHosting.BG | Hosting of the application, the database and uploaded files, and sending emails such as sign-in links and notifications from compass@1legal.net | Sofia, Bulgaria, EU |
| Stripe | Taking card payments, when you pay online | European Union and United States, under the EU-US Data Privacy Framework and standard contractual clauses |
| Google or Microsoft | Only if you choose to sign in with them | As set out in their own policies |
| Google Analytics | Visit statistics on the public pages, only if you accept analytics cookies | European Union and United States, under the EU-US Data Privacy Framework |
We do not sell personal data and we do not use it for advertising. We do not use your workspace content to train AI models.
How long we keep it
- Free check answers and emails: up to 24 months after your last contact with us, unless you become a customer.
- Account and workspace data: for as long as the workspace exists. When a workspace is closed we delete its content within 90 days, apart from signed trust packs and the records below.
- Signed trust packs and their verification records: for as long as they can be relied on, and at least for the limitation period for claims about the opinion.
- Billing records: for as long as Bulgarian accounting and tax law requires.
Cookies and local storage
We use one essential cookie that keeps you signed in. The free check keeps your answers in your browser's local storage so you can carry them into a workspace; you can clear them at any time.
On the public pages of this site (the home page, the free check and these legal pages) we use Google Analytics, but only if you accept analytics cookies in the banner. It sets cookies starting with _ga, kept for up to 13 months, so we can count visits, see which pages and channels bring people here, and see how many people start and finish the free check. Google Ireland Limited processes this data for us as a processor; some of it may be transferred to Google in the United States under the EU-US Data Privacy Framework. We do not use Google Analytics inside the portal, so nothing from your workspace reaches Google. We use no advertising cookies.
Declining has no effect on what you can do on the site. You can change your choice at any time with the Cookie settings link at the bottom of the public pages.
Your rights
You can ask us for access to your personal data, and to correct, delete, restrict or port it, and you can object to processing based on our legitimate interests. Write to office@1legal.net. If your data sits in a company's workspace, we pass your request to that company, as it decides about that data.
You can also complain to the Bulgarian Commission for Personal Data Protection (cpdp.bg) or to the data protection authority where you live or work.
Changes
We will post any change here and update the date at the top. If a change matters to customers, we will also tell workspace owners by email.