Legal

Privacy Policy

Effective date: 1 April 2025 · Last updated: 13 May 2026

Locus is built for lawyers. We understand that the documents you handle are confidential, often privileged, and carry serious professional obligations. This Policy explains clearly what data we collect, why we collect it, and how we protect it.

1. Who We Are

Locus is operated by Techyjaw Solutions, a technology company registered in Nigeria. We are the data controller for personal data collected through the Locus platform. For data protection enquiries, contact us at privacy@locus.ng.

2. Data We Collect

We collect the following categories of data:

Account Data

Your email address and encrypted password when you register. We do not collect your name unless you choose to provide it.

Document Data

PDF documents and scanned images you upload to Locus, along with any titles and descriptions you assign to them.

Usage Data

Questions you ask, redrafts you generate, and collections you create. This data is associated with your account to provide the service.

Billing Data

Your subscription plan and billing status. Payment card details are processed exclusively by Paystack and are never transmitted to or stored by Locus.

Technical Data

IP address, browser type, device type, and session data collected automatically when you use the platform. This is used for security, debugging, and platform improvement.

3. How We Use Your Data

We process your data to:

  • Provide the Locus platform, including document analysis, Q&A, and AI redrafting;
  • Manage your account, subscription, and billing;
  • Communicate with you about your account, updates, and support requests;
  • Monitor platform performance, detect abuse, and improve our services;
  • Comply with applicable Nigerian law, including data protection obligations under the Nigeria Data Protection Act 2023 (NDPA).

4. Your Documents & AI Processing

When you upload a document, Locus processes its text content to generate embeddings (mathematical representations of meaning) and to answer your questions using AI. This processing occurs on secure infrastructure.

We do not use your document content to train AI models. Document text is processed to serve your requests and is not shared with AI providers in a way that allows them to learn from or retain your content beyond the immediate processing of your query.

We use Groq (an AI inference provider) to process queries. Groq's data handling is governed by their zero-data-retention enterprise agreement. Document content sent to Groq is not retained or used for model training.

5. Data Sharing

We do not sell your data. We do not share your data with third parties for marketing purposes. We share data only with:

  • AWS (Amazon Web Services) — for secure cloud storage and server infrastructure;
  • Groq — for AI inference processing of your queries, under strict data handling obligations;
  • Paystack — for payment processing (they receive your payment details, not us);
  • Law enforcement or regulatory bodies — only where we are legally required to disclose.

6. Data Retention

We retain your data for as long as your account is active. Specifically:

  • Documents you delete are removed from active storage within 30 days;
  • If you close your account, all your data is deleted within 60 days, except where we are required by law to retain it;
  • Anonymised usage statistics may be retained indefinitely for platform analytics.

7. Security

We implement the following security measures to protect your data:

  • All data is transmitted over encrypted HTTPS connections;
  • Documents are stored in Amazon S3 with server-side encryption at rest;
  • Passwords are hashed using industry-standard bcrypt;
  • Access to production systems is restricted to authorised personnel only;
  • We conduct regular security reviews of our infrastructure.

8. Your Rights Under the NDPA

Under the Nigeria Data Protection Act 2023, you have the following rights:

Right of Access

Request a copy of the personal data we hold about you.

Right to Rectification

Ask us to correct inaccurate data.

Right to Erasure

Request deletion of your personal data.

Right to Portability

Receive your data in a structured, machine-readable format.

Right to Object

Object to processing where we rely on legitimate interest.

Right to Complain

Lodge a complaint with the Nigeria Data Protection Commission (NDPC).

To exercise any of these rights, contact us at privacy@locus.ng. We will respond within 30 days.

9. Cookies

Locus uses only essential session cookies necessary for authentication and platform functionality. We do not use advertising cookies, tracking pixels, or third-party analytics beyond what is necessary to operate the service securely.

10. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to you by email at least 14 days before they take effect. Continued use of Locus after that date constitutes acceptance of the updated Policy.

11. Contact Us

For any privacy-related queries or to exercise your data rights:

Techyjaw Solutions — Data Privacy
Email: privacy@locus.ng
Website: locus.ng

← Back
Terms of Service About Locus