1 · Who we are
LawMCP (operated by wedomagic srl, registered in Italy at Vicolo Gumer 9, 39100 Bolzano, VAT IT03261830214) provides the "LawMCP" legal-data infrastructure available at lawmcp.ai. This policy explains how we collect, use, and protect personal data in connection with the LawMCP website and the LawMCP service (together, the "Service").
For the purposes of the EU General Data Protection Regulation (GDPR), we are the data controller for personal data collected through the website. Contact us at hello@lawmcp.ai.
2 · What we collect
We collect the minimum personal data needed to operate the Service. Two categories:
A. Information you provide via the early-access wait list
When you submit the wait-list form on lawmcp.ai, we collect:
- Full name
- Work email address
- Company name
- A short free-text description of your use case
- Which jurisdictions you need (Italy, EU, Germany, Spain, France, Austria, Switzerland, or other)
- Whether you want an introductory call
B. Information collected automatically
When you visit the website, our analytics provider (Amplitude) collects technical and behavioural data on our behalf:
- An anonymous device identifier (not linked to your real identity)
- Pages and sections viewed
- Clicks on key interface elements (e.g. "Request early access")
- Scroll depth and approximate session duration
- Browser language, platform, and approximate region (derived from anonymous signals — we have disabled IP-address collection)
We do not collect IP addresses, set advertising cookies, or use any third-party tracking pixels.
3 · Why we collect it (lawful basis)
| Data | Purpose | Lawful basis (GDPR Art. 6) |
|---|---|---|
| Wait-list form data | Contact you about early-access onboarding | Consent (Art. 6(1)(a)) |
| Analytics (anonymous behaviour) | Improve the website and understand demand | Legitimate interest (Art. 6(1)(f)) |
| Service-related correspondence | Respond to your inquiries | Legitimate interest / contract performance (Art. 6(1)(b) and (f)) |
4 · How long we keep it
- Wait-list submissions: up to 24 months from the date of submission, or until you ask us to delete them (whichever comes first).
- Analytics events: 12 months in Amplitude, then aggregated or deleted.
- Email correspondence: retained for as long as needed to provide the Service, plus the period required by applicable Italian tax / accounting law (currently up to 10 years for invoices and tax records).
5 · Who has access (sub-processors)
We use a small number of trusted providers to operate the Service. We have contractual safeguards (Data Processing Agreements and, where relevant, Standard Contractual Clauses) in place with each.
| Sub-processor | Purpose | Location |
|---|---|---|
| Cloudflare | Website hosting + CDN | EU regions |
| Tally | Wait-list form processing | EU |
| Amplitude Analytics | Anonymous product analytics | EU server zone |
| Cloudflare | Receiving and responding to inquiries | EU regions |
| Hetzner | Production MCP endpoint (mcp.lawmcp.ai) | EU regions |
We will publish an up-to-date sub-processor list at lawmcp.ai/sub-processors before launch.
6 · International transfers
Our infrastructure is hosted in the European Union. Where a sub-processor is established outside the EU/EEA, we rely on Standard Contractual Clauses approved by the European Commission and, where applicable, additional supplementary measures.
7 · Your rights under GDPR
If you are in the EU/EEA, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Restrict or object to certain processing
- Withdraw consent for processing based on consent (this does not affect prior lawful processing)
- Data portability — receive your data in a structured, commonly used format
- Lodge a complaint with a supervisory authority — the lead authority for LawMCP is the Italian Garante per la protezione dei dati personali (garanteprivacy.it)
To exercise any of these rights, write to privacy@lawmcp.ai. We will respond within 30 days.
8 · Cookies and similar technologies
We do not set advertising or tracking cookies. Amplitude uses an anonymous device identifier stored in local storage to deduplicate sessions — this is not a cookie in the regulatory sense and does not require consent under the ePrivacy Directive. If you prefer not to be counted at all, you can disable JavaScript or use a privacy-focused browser.
9 · No training on your data
We do not use any information you provide — wait-list data, queries to the Service, or content returned to you — to train artificial intelligence models, ours or anyone else's. This is a binding product commitment, reflected in our Terms.
10 · Children's privacy
The Service is not directed to anyone under 16. We do not knowingly collect personal data from minors. If you believe we have, contact privacy@lawmcp.ai and we will delete it.
11 · Changes to this policy
We may update this policy from time to time. When we do, we update the "Last updated" date at the top. For material changes, we will notify you by email if you are on the wait list.
12 · Contact
Questions, requests, or complaints: privacy@lawmcp.ai