Privacy Policy

LexAI, Inc. ("LexAI", "we", "us", or "our") operates the LexAI platform at lexai.app (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

Please read this policy carefully. By accessing or using the Service, you agree to the collection and use of information in accordance with this policy.

We collect the following categories of information:

Account information. When you register, we collect your name, email address, and password hash. Passwords are never stored in plain text.

Contract data. When you upload or paste contracts into LexAI, those documents are stored in your account and processed by our AI. You retain full ownership of your contract data at all times.

Usage data. We automatically collect information about how you interact with the Service, including pages visited, features used, error logs, and timestamps.

Payment information. Payment card details are processed directly by Stripe, Inc. and are never stored on LexAI servers. We store only payment status and plan information.

Communications. If you contact our support team, we retain records of those communications.

We use the information we collect to:

We do not sell your personal data or use your contract content to train our AI models without explicit consent.

We do not sell, rent, or trade your personal information. We may share data in the following limited circumstances:

Service providers. We share data with trusted third-party vendors who help us operate the Service, including Supabase (database and authentication), Groq (AI inference), Stripe (payments), and Vercel (hosting). Each provider is bound by data processing agreements.

Legal requirements. We may disclose information if required to do so by law or in response to valid legal requests (subpoenas, court orders, etc.).

Business transfers. In connection with a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction. We will notify you before this occurs.

With your consent. We may share information in other ways with your explicit consent.

We retain your account data and contract data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required by law to retain it longer.

Anonymized, aggregated analytics data may be retained indefinitely as it cannot be used to identify you.

We implement industry-standard technical and organizational security measures including:

No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Depending on your location, you may have rights under applicable data protection laws including:

To exercise any of these rights, contact us at privacy@lexai.app. We will respond within 30 days.

We use cookies and similar tracking technologies. For detailed information, please see our Cookie Policy.

The Service is not directed at children under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a child under 16, we will delete it promptly.

LexAI is based in the United States. If you access the Service from outside the US, your data may be transferred to and processed in the US. We ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses approved by the European Commission.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and, where appropriate, by email. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices, contact us at:

LexAI, Inc.

privacy@lexai.app

548 Market St, PMB 91776

San Francisco, CA 94104