Privacy

Bodane monitors public Luxembourg legislative data published by Légilux under CC BY 4.0 — bills, their documents and their procedural timeline. That material is public by definition.

One class of it is deliberately not ingested: the register's person-appointment records. They are public, and they are personal data we have no use for, so the ingest excludes them rather than collecting them and deciding later.

Accounts exist, so personal data is held. Specifically:

• Your account — email address, a password hash (never the password), and two-factor settings if you enable them.
• Which firm you belong to, and your role in it.
• What you decided — when you judge a match relevant or not, or confirm a practice area, that decision is recorded. Those records are append-only: they are the evidence that the watch was running, so they cannot be edited or deleted after the fact.
• But they do not carry your name or your account. Each such record holds a random identifier that stands for you inside your firm and nowhere else — two firms' records cannot be compared to show that the same person works at both. The one place that identifier is connected to you is a separate table, and deleting that connection is something we can do on request. After it, the evidence still shows that one person made those decisions, and no longer which person. Your account can be deleted outright, which does the same thing.
• What was sent to you — the period, subject line and recipient count of each digest. The addresses themselves are not copied into that record; they are already on your account, and duplicating them into a table nothing can correct would serve no one.

Sign-in and anti-forgery cookies are set because the application needs them to work. There is no analytics, no advertising and no third-party script: every font and every script is served from this site, so opening a page tells nobody else that you did.

Anthropic is the only subprocessor that receives content from this product. It receives two things, and nothing else:

• The description you write when you set up your topics — exactly as you write it, with nothing else about your firm added — so it can be classified against a fixed list of practice areas. The consent for that is shown on the page itself, immediately above the box, and is recorded with the result. If you would rather not, you can build your topics by hand and never open that page.
• Public bill text from Légilux, so it can be summarised. That is public legislative material, not your data.

Nothing else leaves. Your account details, your firm's name, your decisions and your digests are not sent to any third party.

Bodane is pre-launch. A data-processing agreement naming Anthropic as a subprocessor, together with the legal basis, the retention periods and the procedure for exercising your rights over the data above, is not yet in place. It is being prepared. Erasure works today — the paragraph above describes what it does — but the route by which you ask for it is that missing procedure, so for now it is a message to Averholm rather than a form.

Until it is, this notice describes what the software does rather than what you are contractually owed, and no firm should put client-identifying material through the set-up description on that basis.

Questions about any of this go to Averholm.