Privacy Policy
Last updated: 20 September 2026
1. Introduction and data controller
This Privacy Policy explains how we collect, use, disclose and safeguard personal information across everything Dikigoros AI offers: this website and its demonstration request form, the Dikigoros AI practice management software, and the public demonstration environment.
The data controller is Tortera Holdings Ltd, registered in Cyprus under registration number HE 496600, registered office Makrasykas 8a, Lakatamia, Cyprus ("we", "our", "us"). For anything in this policy you can reach us at privacy@dikigorosai.com.
Where a law firm uses our software to manage its own clients and matters, that firm is the controller of the data it enters and we act as its processor, handling that data on the firm's documented instructions under a data processing agreement.
2. Information we collect
2.1 Personal information
We collect personal information that you provide to us when you:
- Request a demonstration — your name, firm name, number of fee earners, email address, telephone number and any message you write
- Hold an account in the practice management software — your name, work email address, telephone number, role and job title
- Contact us for support
Records that a law firm enters into the software about its own clients and matters are dealt with separately: the firm is the controller of that data and we process it only on the firm's instructions, as set out in section 1.
2.2 Usage data
We automatically collect certain information when you visit and use our service, including your IP address, browser type, device information, and interaction with our platform.
2.3 The demonstration environment
The live demonstration opens without an account and contains invented sample data only — every client, company, matter and figure in it is fictitious. A cookie identifies your own private copy of it, so that no other visitor can see your session and yours does not show you theirs.
Anything you type into the demonstration is held for your session alone and is discarded when you leave it idle, or immediately if you use "Start again". It is not added to any record we keep and it is not used to identify you. Even so, please do not enter real client information into it.
3. How we use your information
We use the information we collect to:
- Provide and maintain the practice management software
- Arrange and run the demonstration you asked for, and correspond with you about it
- Provide the demonstration environment
- Support the firms that use the software, and administer accounts
- Keep the service secure and guard against unauthorised use
- Comply with our legal obligations
We do not sell personal information, and we do not use the contents of a firm's client records to market anything to anyone.
3a. Lawful basis for processing
Under Article 6 GDPR we rely on the following bases:
- Legitimate interests — responding to a demo request you sent us, and keeping the service secure. You may object to this processing at any time.
- Performance of a contract — providing the software to firms that have signed up for it, and administering their accounts.
- Consent — optional marketing email, where you have opted in. You may withdraw consent at any time without affecting prior processing.
- Legal obligation — retaining records we are required by law to keep, including tax and accounting records.
4. Data security
Traffic between your browser and our service is encrypted in transit, and data held in the hosted version is encrypted at rest by the infrastructure it runs on. Access to the practice management software is controlled by account and by role, so staff at a firm see only what their role permits. No method of transmission over the internet is completely secure, and we do not claim otherwise.
5. Data retention
We retain personal information only for as long as necessary for the purposes set out above. In practice:
- Demo requests — 24 months from your last contact with us, then deleted.
- Account data — for as long as the account is active, then 90 days after closure, unless a longer period is required by law.
- Firm client and matter data — retained under the instructions of the firm that entered it, and returned or deleted at the end of the engagement.
- Invoicing and accounting records — six years, as required by Cyprus tax law.
6. Information sharing and disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- With your explicit consent
- To comply with legal obligations or respond to lawful requests
- To protect the rights, property, or safety of Dikigoros AI, our users, or others
- With the processors listed below, each bound by a written data processing agreement
6.1 Processors we use
| Provider | Purpose | Processing location |
|---|---|---|
| Supabase | Database, authentication and serverless functions | London, United Kingdom (eu-west-2) |
| Lovable | Application hosting and deployment | European Union (Google Cloud) |
| Resend | Transactional email delivery | United States (transfers covered by the European Commission's adequacy decision for the EU-US Data Privacy Framework and standard contractual clauses) |
7. Your rights
Under applicable data protection laws, including GDPR, you have the right to:
- Access your personal information
- Correct inaccurate or incomplete data
- Request deletion of your personal information
- Object to or restrict certain processing activities
- Data portability
- Withdraw consent at any time
To exercise these rights, please contact us using the information provided below.
8. Cookies and tracking
We use cookies and similar tracking technologies to enhance your experience on our platform. You can control cookie preferences through your browser settings.
9. Third-party services
Our service may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites and encourage you to review their privacy policies.
10. Children's privacy
Our service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children.
11. International data transfers
Client and matter data held in the practice management software is stored in the European Union. One exception is worth stating plainly: transactional email is delivered through Resend. That transfer is made under the European Commission's Standard Contractual Clauses.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
13. Contact us
If you have any questions about this Privacy Policy or our privacy practices, please contact us at:
Tortera Holdings Ltd
Registration number: HE 496600
Makrasykas 8a, Lakatamia, Cyprus
Email: privacy@dikigorosai.com
You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus, or with the supervisory authority of the EU member state where you live or work.
Important Notice: Dikigoros AI is practice management software for law firms. It does not provide legal advice, and using it does not create a lawyer-client relationship. For specific legal matters, always consult a legal professional licensed to practise in Cyprus.