Scottish Legal Connect

Privacy information

Draft for this development preview, dated 16 October 2026. This is not a completed public-launch privacy notice. Use synthetic information while the platform is being evaluated.

Information the platform uses

Account details, conversations, case packs, sharing decisions, safe-contact preferences and messages are stored by the application. Private document uploads, extracted text, source references, analysis results, reviewed corrections and document-sharing decisions are also stored. Attachments are accessible through authenticated conversation access. Administrative access and security events can be logged.

When live AI is enabled, your intake messages are sent to the configured AI provider to generate a response. Selecting document analysis can send extracted document text to that provider; asking a document question can send your question and matching source passages. Uploading or viewing a document alone does not make a live AI call. Local text extraction and text recognition may run on the application server. A deterministic demonstration mode is available for local testing. Do not assume an AI response or a case pack is confidential legal advice from a solicitor.

Your sharing choices

A solicitor receives only the case-pack version you approve and explicitly share with them. Your raw AI transcript and account contact details are excluded from that referral. Anything personal you write inside the pack is part of what you share.

Documents require a separate sharing choice through an accepted conversation. A document recipient receives the original file, extracted text, summary and the findings you reviewed. Uploading a document does not share it or add it to the common legal library. Withdrawing sharing prevents future platform access to that pack or document. It cannot recall downloaded copies. Separate secure inbox messages remain part of the conversation record.

Device privacy

The browser stores a sign-in token and account display information to maintain your session. Quick exit clears the local sign-in state and opens BBC Weather; it does not clear browser history, server records, downloaded files or an already copied token. Use a trusted device if someone may monitor your activity.

Before public launch

The operating organisation must publish its controller identity and contact, lawful bases, AI processors, retention and deletion periods, international processing arrangements, rights-request route and complaint information. Those operational details are not established by this draft.