Sponsored booking privacy
The exact data each role can see, how consent is recorded, and how beneficiaries stay in control.
Last updated: March 29, 2026
Privacy in sponsored bookings
Sponsored bookings are designed so sponsors can confirm their money was used well, but they can never see confidential client information. The beneficiary controls what the sponsor sees; the platform enforces the limits.
LeyApp never shares chat content, uploaded documents, or private case details with sponsors — regardless of budget size, sponsorship type, or permission setting.
What sponsors see
Sponsors see metadata about each booking:
Sponsor can see
- Booking status (requested, approved, completed, cancelled).
- Lawyer name and practice area (if the beneficiary allowed lawyer visibility).
- Short progress notes (if the beneficiary allowed status + notes).
Sponsor never sees
- Chat messages between client and lawyer.
- Uploaded documents.
- Detailed case content or legal analysis.
- The client's other bookings outside this sponsorship.
- Other sponsors who also sponsor the same beneficiary.
Every piece of information shared with a sponsor passes two gates: the beneficiary's per-sponsor permission setting, and the sponsor's pre-authorized scope. If either gate blocks, nothing is shared.
Permission levels
Beneficiaries choose one of three levels per sponsor:
- No updates — the sponsor sees the booking was created and the budget consumed; no status, no notes.
- Status only — the sponsor also sees each status change.
- Status and notes — the sponsor also sees the lawyer's short progress note for each status change.
GDPR rights
Beneficiaries and sponsors both have GDPR rights regarding their data on LeyApp.
Beneficiaries specifically can:
- Withdraw consent at any time, revoking a sponsorship immediately.
- Access a copy of their data (Settings → Privacy → Export).
- Request deletion of their data, subject to legal retention rules.
Data retention
Booking records and invoices are retained for the legally-required period (typically 5-6 years in Spain for professional services). After that, personal data is deleted or irreversibly anonymized.
Questions about privacy or data handling? Write to privacy@leyapp.es — we reply within 48h.