Privacy Policy
Last updated: April 18, 2026
Overview
Goordian ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, protect, and share your information when you use our legal practice management platform, including our website and services.
By using Goordian, you agree to this Privacy Policy. If you do not agree, please do not use our services.
What Information We Collect
Information You Provide
When you create an account and use Goordian, you may provide:
- Account Information: Name, email address, phone number, password, profile picture, and professional title
- Location Information: Address, city, state, postal code, and country
- Professional Information: Legal licenses, certifications, bar association details, hourly rates, and practice areas
- Preferences: Language, timezone, notification settings, and account preferences
- Case and Client Data: Any information you upload or enter about your cases, clients, documents, time entries, and invoices
Information We Collect Automatically
- Usage Data: IP address, browser type, pages visited, time spent on pages, and device information
- Activity Logs: Records of actions you take within Goordian (case updates, document access, user activities)
- Device Information: Device type, operating system, device fingerprint, and last login times
- Cookies: We use session cookies for authentication and functionality
How We Use Your Information
We use your information to:
- Provide and maintain the Goordian service
- Create and manage your account
- Send operational emails (account verification, password reset, billing updates)
- Provide customer support
- Monitor and improve our service performance and security
- Comply with legal obligations
- Prevent fraud and unauthorized access
We do NOT use your email address or personal information for commercial marketing purposes, and we do NOT sell your data to third parties.
Data Security and Encryption
Your data security is our priority:
- All passwords are encrypted using industry-standard encryption
- Data is encrypted in transit and at rest
- We use secure authentication protocols and device approval for sensitive operations
- All user activities are logged for security and compliance purposes
- We implement role-based access controls to protect your information
Your Choices and Rights
- Email Preferences: You can disable email notifications in your account settings. We will only send essential operational emails (security alerts, password resets, billing information) even if notifications are disabled
- Data Access: You can access, update, or correct your personal information through your account settings
- Account Deletion: You can request deletion of your account and associated data by contacting us
- Data Portability: You can request an export of your data in a standard format
Data Retention
- Account Data: Retained for as long as your account is active. Upon deletion, data is removed immediately.
- Activity Logs: Retained indefinitely for security and compliance purposes
- Usage Analytics: Retained for 12 months
Sharing Your Information
We do NOT sell your information. We only share data in these limited circumstances:
- Service Providers: Companies that help us operate Goordian (hosting, security, analytics) who are contractually bound to protect your data
- Legal Compliance: When required by law, court order, or government request
- Safety: When necessary to prevent fraud, protect security, or protect user safety
- Business Transfers: In case of acquisition or merger, data may be transferred (you will be notified)
Third-Party Links
Goordian may contain links to external websites and services. We are not responsible for their privacy practices. Please review their privacy policies before sharing information.
Children's Privacy
Goordian is not intended for anyone under 13 years old. We do not knowingly collect information from children under 13. If we become aware of such collection, we will delete it immediately. If you believe we have collected information from a child, please contact us.
International Data Transfers
Your information may be processed and stored in different countries with varying privacy laws. By using Goordian, you consent to the transfer and processing of your information internationally. We implement safeguards to protect your data during transfer.
Security
While we implement industry-standard security measures, no method is 100% secure. We cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice on our website. The "Last updated" date above will reflect the most recent changes. Your continued use of Goordian constitutes acceptance of updated terms.
Contact Us
If you have questions about this Privacy Policy or our privacy practices:
Email: hi@goordian.com
Address: Barcelona, Spain
We will respond to privacy inquiries within 30 days.
Summary: What We Promise
✓ Your data is encrypted and secured
✓ We never sell your information
✓ Emails are only used for service operations
✓ You can disable non-essential communications
✓ Your privacy choices are respected
✓ Transparent about data collection and use