Privacy Policy

1. Information We Collect

• Account InformationName, email address, phone number, and bar council registration details provided during account creation.
• Query DataLegal questions, case descriptions, and search parameters submitted through Research, Opposition Brief Buster, and other features.
• DocumentsFiles uploaded for analysis including petitions, contracts, legal briefs, and other documents.
• Client DataClient names, case details, hearing dates, and notes stored in the Client Manager.
• Usage DataFeature usage patterns, session duration, query frequency, and diagnostic logs.
• Payment InformationBilling details processed through our payment provider. We do not store full card numbers on our servers.

2. How We Process Your Data

• Google Gemini APIQueries and documents are processed securely through Google’s Gemini API. Your data is not used for model training.
• Indian Kanoon APICase citations and legal references are fetched from the Indian Kanoon public legal database.
• SupabaseUser accounts, client data, and application state are stored in PostgreSQL with row-level security.
• Google Cloud RunBackend services run in isolated, auto-scaling containers on Google Cloud infrastructure.

3. Data Storage & Retention

• Uploaded DocumentsAutomatically deleted after 7 days of processing.
• Query CachePurged after 24 hours.
• Account DataRetained during active subscription plus 90 days after cancellation.
• Client Manager DataRetained while account is active. Available for export or deletion upon account closure.
• Usage LogsAnonymized analytics retained for 30 days.

4. Your Rights

• AccessRequest a copy of all personal data we hold about you.
• DeletionRequest permanent deletion of your account and all associated data.
• PortabilityExport your client data, query history, and documents in standard formats.
• CorrectionUpdate or correct inaccurate personal information at any time.
• Withdraw ConsentRevoke consent for data processing. This may limit access to certain features.

5. Cookies & Tracking

LexEra uses essential cookies only to maintain your session, remember authentication state, and store user preferences. We do not use third-party tracking cookies, advertising pixels, or analytics platforms that track individual users across websites.

6. Third-Party Services

• Google Cloud PlatformInfrastructure, Gemini API, and Cloud Run hosting.
• SupabaseDatabase, authentication, and real-time synchronization.
• VercelFrontend hosting, edge functions, and content delivery network.
• Indian KanoonLegal database API for case law and statute retrieval.

7. Data Security

• TLS EncryptionAll data in transit is encrypted with TLS 1.2 or higher.
• Encryption at RestAll stored data is encrypted with AES-256 encryption.
• Role-Based Access ControlInternal access follows the principle of least privilege.
• Regular AuditsPeriodic security audits and vulnerability assessments.

8. Legal Compliance

• Information Technology Act, 2000Full compliance including Reasonable Security Practices and Procedures Rules, 2011.
• Digital Personal Data Protection Act, 2023Adherence to principles of lawful processing, purpose limitation, and data minimization.

9. Children’s Privacy

LexEra is a professional legal technology platform designed for licensed legal practitioners. Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a user is under 18, we will promptly delete their account and associated data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated at least 30 days in advance via email or in-app notification. Continued use of LexEra after changes take effect constitutes acceptance of the updated policy.