Privacy Policy

Dalilex is a cloud practice-management application for law firms. Firms use it to manage clients, case files, tasks, time entries, service statements and payments. This policy explains what information we process, why, and how we protect it.

1. Who we are

The service is provided by Dali Technology (“Dalilex”, “we”).
Address: Evliya Çelebi Mah. Sadi Konuralp Cad. İKSV Vakfı No: 5/2,
34430 Beyoğlu / İstanbul, Türkiye
Phone: +90 850 303 97 89
Email: [email protected]

For the client and case data a firm enters, the firm is the data controller and Dalilex acts as a processor on the firm's behalf. For account information and operational records, we are the controller.

2. Information we process

a) Account information

Your name, email address, role, avatar URL if any, and your firm's name. If you connect a Microsoft or Google account, we also store that account's identifier and the organisation it belongs to. We need this so you can sign in and be matched to the right firm.

b) Data your firm enters

Clients, case files, tasks, time entries, service statements and payments. This data belongs to your firm. We do not review its contents; we access it only as needed to run the service or when you ask us for support.

c) Information read from a connected Microsoft 365 / Google Workspace account

This is entirely optional and begins only when you choose to connect your account. All permissions are read-only:

Dalilex never sends mail on your behalf, never creates or changes calendar entries, and never modifies or deletes your cloud documents. Calendar and mailbox content is fetched from your account when you open the relevant screen and is not retained on our servers. Only what you deliberately attach to a case file is stored.

d) Technical records

Session records, IP address and browser information are kept for security and troubleshooting. They are not used for marketing.

3. Limited Use of Google user data

Dalilex's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Google user data only to provide user-facing features of the application.
• We do not use it for advertising and do not share it with advertising platforms.
• We do not sell it.
• We do not use it to develop, improve or train generalised AI or machine-learning models.
• We do not allow humans to read it, except with your explicit consent for support, for security purposes, or where required by law.

We apply the same principles to data read from Microsoft 365 accounts.

4. Retention and deletion

• Connection tokens: deleted as soon as you disconnect the account, which you can do in Dalilex at any time.
• Messages and documents attached to case files: kept until removed from the case or until the firm's account is deleted. Removing them deletes our copy; the original in your mailbox or cloud storage is untouched.
• Firm data: deleted within a reasonable period after the subscription ends, or earlier on request.
• Technical records: kept for a limited period and purged regularly.

You can also revoke access from myapps.microsoft.com or myaccount.google.com/permissions.

5. Use of artificial intelligence

Dalilex uses AI to summarise an email thread that your firm has attached to a case file. The feature exists only in the Kurumsal plan and runs only when a user of the firm explicitly asks for a summary; nothing is processed in the background. A firm administrator can switch the feature off entirely.

• Provider: Anthropic (Claude). Only the text of that one thread is sent. Your client list, case archive and billing data are not sent.
• Model training: content sent is not used to train AI models. The provider's commercial (API) terms commit to this.
• Retention: the summary is stored on the related thread record in Dalilex and is deleted together with it.
• Not legal advice: a summary helps you grasp a long exchange quickly. It can be wrong, and responsibility always stays with the lawyer handling the file.

Content read from a connected Microsoft 365 or Google Workspace account is never sent to the AI provider unless you attach a thread to a case file and ask for a summary.

6. Sharing

We never sell your data or share it for marketing. Others may access it only:

• Other users in your firm, within their role and case permissions.
• Our service providers (for example hosting), under confidentiality agreements.
• Authorities, where we are legally required to comply.

7. Security

• All traffic is encrypted with TLS.
• Microsoft and Google connection tokens are stored encrypted.
• Each firm's data is isolated; queries are scoped to the signed-in user's firm.
• Every request to an external account uses only that signed-in user's own connected account.
• Mail content is rendered in a sandboxed frame where scripts cannot run, and remote images are blocked until you allow them.
• Access within a firm can be restricted by role and per-case permissions.

8. Your rights

Under Turkish Personal Data Protection Law no. 6698 (and, where applicable, the GDPR) you may ask whether we process your personal data, request information and correction, request erasure where the conditions are met, and object to processing. Write to [email protected]; we respond within 30 days. Requests about client data entered by a firm should first be addressed to that firm.

9. Cookies

We use only the cookies required to keep your session signed in and secure. No advertising or tracking cookies.

10. Children

Dalilex is a professional tool and is not directed at people under 18.

11. Changes

We may update this policy. For significant changes we notify you in the application or by email. The date at the top shows the last update.

12. Contact

[email protected] · +90 850 303 97 89
Dali Technology, Evliya Çelebi Mah. Sadi Konuralp Cad. İKSV Vakfı No: 5/2, 34430 Beyoğlu / İstanbul, Türkiye