Privacy Policy
Last updated: April 2026
1. Information We Collect
When you use Lexarna, we collect the following types of information:
- Account information: Name, email address, and organisation details provided during registration via Clerk.
- Usage data: Research queries, drafts generated, documents uploaded, and feature usage for billing and product improvement.
- Uploaded documents: Legal documents you upload for indexing and search. These are stored in your private workspace.
- Technical data: Browser type, IP address, and device information for security and analytics.
2. How We Use Your Information
- Provide and improve our legal research and drafting services
- Process your queries using AI models (OpenAI GPT-4o, o3)
- Bill your account based on credit usage
- Communicate with you about your account and service updates
- Ensure security and prevent abuse
3. Third-Party Services
We use the following third-party services to operate Lexarna:
- OpenAI: Processes your research queries and generates drafts. Your queries are sent to OpenAI's API but are not used to train their models (we use their API, not the consumer product).
- Clerk: Handles authentication and user management.
- AWS (Amazon Web Services): Stores uploaded documents and database infrastructure in the Mumbai (ap-south-1) region.
- Vercel: Hosts the frontend application.
- Sentry: Error monitoring and performance tracking (no personal data is sent).
4. Your Documents
Documents you upload to Lexarna are:
- Stored in your private, organisation-scoped workspace
- Never shared with other users or organisations
- Never used to train any AI model
- Encrypted at rest and in transit
- Deletable at your request — we will permanently remove all copies
5. Data Retention
We retain your data for as long as your account is active. If you delete your account, we will remove your personal data and uploaded documents within 30 days. Anonymised usage statistics may be retained for analytics.
6. Cookies
We use essential cookies for authentication (via Clerk) and session management. We do not use advertising or tracking cookies.
7. Your Rights
Under applicable Indian and international data protection laws, you have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your account and data
- Export your data
- Withdraw consent for data processing
8. Security
We implement industry-standard security measures including encryption at rest and in transit, secure authentication, and regular security audits. See our Security page for details.
9. Changes to This Policy
We may update this policy from time to time. We will notify you of material changes via email or in-app notification.
10. Contact
For privacy-related questions, contact us at privacy@lexarna.com.