Privacy

LawKona is a product of Crown Softech Ltd, a company registered in Nigeria with the Corporate Affairs Commission. In this notice, “we” and “us” mean Crown Softech Ltd. You can reach us about anything in this notice at support@lawkona.com.

Chamber data. When a law firm uses LawKona, the information it puts in — its clients, tenants, other parties, properties, matters, documents, notes, recordings, and money records — belongs to that firm. The firm is the data controller. We process that information on the firm’s behalf and only to provide LawKona to it.

Our own data. We are the data controller for lawyer accounts, billing records, Student / Clinic applications, and visits to this website.

If you are a client or tenant of a firm that uses LawKona, please contact that firm first about your information. We will help the firm respond.

• Account details: your name, email address, phone number, role, and your chamber’s name and state. Your password is stored only as a one-way hash, never in readable form.
• Chamber data your firm enters: clients, tenants, other parties, properties and units, matters, deadlines, documents, notes, court jottings and audio recordings, signatures and stamps, time records, invoices, and trust and fee records.
• Tenant applications sent through a firm’s private intake link, together with the applicant’s consent record.
• Student / Clinic applications: your school, matric number, year of admission, and a picture of your student ID.
• Payments: your plan, amount, billing period, and the payment reference from our payment processor. We never receive or store your card details.
• Online invoice payments: when a firm’s client pays an invoice online, Paystack handles the client’s card. LawKona keeps only the amount, the payment reference, and which invoice it paid.
• Two-factor login, if you switch it on: your authenticator key is stored encrypted, and we keep only one-way hashes of your recovery codes, never the codes themselves.
• Messages: a record of each email LawKona sends — recipient, time, and whether it was delivered. When WhatsApp is enabled for a chamber, the same record for each WhatsApp message (including whether it was read), the tenant’s WhatsApp consent, and any STOP reply.
• An audit log of important actions in each chamber: who did what, and when.
• A bot check when you register or sign in. Cloudflare Turnstile receives your IP address and browser details to tell people from bots.
• On your own device: a secure sign-in cookie, and — for the court companion and chamber editor — a copy of your matter list and drafts so they keep working when your connection drops.

• We do not put advertising or analytics trackers on this website.
• We do not sell personal data, or share it for anyone else’s marketing.
• We do not use chamber data to train artificial intelligence.
• We do not read a chamber’s files for our own purposes. We access them only to run and support the service at the firm’s request, or when the law requires it.
• We do not store card numbers.

We use a small number of providers to run LawKona:

• A cloud server provider, which hosts the application and its database.
• File storage for documents and recordings, either on that cloud server or with a cloud storage provider.
• Resend, to send email.
• Paystack, to take payments in Naira — both our subscription payments and clients paying a firm’s invoices online.
• Cloudflare Turnstile, for the bot check at sign-up and sign-in.
• Our messaging provider, to send WhatsApp messages to tenants who agreed to receive them — used only when this is enabled for a chamber on a paid plan.

Each receives only what it needs to do its job.

Some of these providers — for example, email delivery, WhatsApp messaging, and the bot check — process data outside Nigeria. Where that happens, we rely on the safeguards the Nigeria Data Protection Act 2023 allows, such as the provider’s contractual commitments to protect the data.

• Each chamber’s data is walled off at the database, so one firm cannot see another’s.
• Every person signs in with their own account, and their role decides what they can see and change.
• Lawyers can switch on two-factor login with an authenticator app, with recovery codes in case the phone is lost.
• Case strategy notes and witness identities are encrypted before they are stored.
• Important actions go into an audit log that cannot be edited.
• Connections to LawKona are encrypted.

No system is perfectly secure. If a breach affects personal data, we will tell the affected firms and report it to the Nigeria Data Protection Commission as the law requires.

We keep chamber data for as long as the chamber’s account is open. We do not currently delete it automatically on a timetable. A firm can ask us at support@lawkona.com for a copy of its data and to delete its chamber; we may keep payment records for as long as tax and accounting law requires.

Under the Nigeria Data Protection Act 2023 you can ask us to:

• tell you what personal data we hold about you and give you a copy;
• correct data that is wrong or incomplete;
• delete your data, or restrict how we use it;
• give you your data in a format you can take elsewhere;
• stop processing you have objected to, or that relied on consent you have withdrawn.

Email support@lawkona.com. If the request is about chamber data, we will pass it to the firm and help it respond. If you are unhappy with how we handle your data, you can complain to the Nigeria Data Protection Commission (NDPC).

We will update this page when our practices change and tell chamber principals about important changes by email.