Cleo
Cleo Legal Data Atlas
← Back to atlas

Privacy policy

Last updated: April 30, 2026

1. Who we are

legaldata-public.cleolabs.co is operated by Cleo Labs, commercially run by Cleo Academy (contact@cleo.academy), France. The site showcases our open catalog of legal data sources and offers paid programmatic access through the Cleo Insight API.

2. Data we process

The site is static and requires no information to browse. No signup is required. We process the following:

  • Server technical logs (Vercel): IP address, user-agent, requested URL, HTTP code, timestamp. Retained ≤ 30 days for security and debugging. No marketing use.
  • E-mail if you contact us via the “Book a call” button (which redirects to cleolabs.co/en/meet): e-mail address, company, use case you provide. Used solely to handle your API access request and kept while the commercial relationship is active.

No tracking cookies, no third-party analytics (Google Analytics, Mixpanel, etc.), no re-identification. No advertising pixels.

3. Data exposed by the API

The catalog exposed by /api/v1/catalog/* contains public metadata about official legal portals only (portal name, public URL, jurisdiction, document type, technical status). No personal data, no customer document, no sensitive information.

4. Hosting and processing

  • Public site: Vercel (EU region, Frankfurt fra1).
  • API: Vercel + Supabase (EU region, eu-west-1).
  • Inbound e-mails: Google Workspace (contact@cleo.academy).
  • No transfers outside the EU/EEA for routine operations. Sub-processors (Vercel, Supabase, Google) rely on EU Standard Contractual Clauses for their own flows.

5. Your rights (GDPR)

Under Regulation (EU) 2016/679 you have the rights of access, rectification, erasure, restriction, objection and portability over your data. To exercise them: contact@cleo.academy. You may also lodge a complaint with the French DPA (CNIL) (cnil.fr/en).

6. API customers: DPA available

If you integrate our API into your product, a Data Processing Agreement (DPA) is available on request before contract signature. We act as processor within the meaning of the GDPR for requests your application sends us.

7. Updates

This policy may evolve. Any material change will be reflected by updating the date above and, for active API customers, by e-mail.

Contact

Any question about this policy: contact@cleo.academy

← Back to atlas