Privacy Policy

1. Information We Collect

We collect information you provide directly to us when you create an account, including your name, email address, firm name, and billing information. We also collect information about your use of the service, including matters, clients, time entries, and documents you create within Lexo365.

2. How We Use Your Information

We use the information we collect to provide, maintain, and improve the Lexo365 service, process transactions, send you technical notices and support messages, and respond to your requests. We do not sell your personal information to third parties.

3. Data Storage and Security

Your data is stored on secure servers hosted by Supabase (PostgreSQL). All data is encrypted in transit using TLS 1.2 or higher. Client and matter information you enter is associated only with your firm and is not accessible to other firms or to Lexo365 staff except as necessary to provide support.

4. AI Features and Data Anonymization

When you use LexoAssist or other AI-powered features, client names and identifying information are anonymized using a token-substitution process before being transmitted to AI providers (including Anthropic and Google). Your firm's BYOK (Bring Your Own Key) encryption key is used to protect sensitive data at rest. AI providers receive only anonymized tokens, not real names.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide you services. You may request deletion of your account and associated data by contacting us at info@lexo365.com. Backups may retain data for up to 30 days after deletion.

6. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, or delete your personal data. To exercise these rights, contact us at info@lexo365.com. Residents of Quebec are also protected by the Act respecting the protection of personal information in the private sector (Law 25).

Questions about this policy? Contact us at info@lexo365.com.