Senior Legal Counsel

About the role

Codeway, a bootstrapped Barcelona-based company building consumer AI apps, is looking for a Senior Legal Counsel to act as a hands-on senior voice across privacy, AI, regulatory, corporate and commercial work for a fast-moving portfolio of apps. You will report to the Head of Legal and work directly with product, growth, engineering, finance and the founders, owning matters end to end and helping shape how Legal works as the company scales across multiple jurisdictions.

Key responsibilities

• Advise product teams on privacy by design: data mapping, DPIAs, privacy notices, consent and SDK/third-party data flows
• Lead AI governance and readiness, including feature reviews, transparency obligations, model and vendor terms and internal AI-use policies
• Track regulations such as GDPR, US state privacy laws, the EU AI Act and DSA, and turn them into practical playbooks
• Handle data subject requests, regulator and platform inquiries and incident response with engineering and security
• Support entity management and governance, corporate transactions, restructurings and new entity set-ups
• Draft and negotiate SaaS and AI vendor, data processing, advertising, influencer, publishing and acquisition agreements, and build templates and self-serve processes
• Advise on subscriptions, auto-renewal, free trials, pricing, consumer protection and marketing claims, and review app store, web checkout and advertising compliance

Required profile

• Qualified lawyer with 6+ years' post-qualification experience, combining a top law firm and in-house roles at a tech, internet or digital company
• Solid corporate experience: governance, entity management and supporting transactions
• Broad commercial contracting experience, negotiating directly with counterparties
• Consumer tech experience: subscriptions, consumer protection, digital marketing and platform rules
• Exposure to multiple jurisdictions and comfort coordinating external counsel
• Experience reporting to a Head of Legal or Legal & Compliance lead in a lean team
• Fluent in English and Spanish, written and spoken

Required skills

• Strong, hands-on privacy experience (GDPR and at least one other major regime, ideally US state laws)
• Working knowledge of AI regulation
• Pragmatic, commercial judgement and ability to give clear, risk-weighted answers quickly
• Nice to have: mobile app experience, hands-on AI Act readiness, privacy certification (CIPP/E, CIPP/US or similar)

What we offer

• Competitive compensation
• Full private health insurance with unlimited coverage
• Free breakfast and lunch at the in-office coffee shop
• Meal and transport support
• Top office in Barcelona, flexible schedule and top tech setup
• Gym membership, language course support, wellbeing and growth activities, and pet adoption support covering vet costs in the first year