Privacy Policy

1. Who we are

LexNeethi AI Technologies Pvt. Ltd., a company incorporated under the Companies Act, 2013 in India, is the Data Fiduciary for the purposes of the DPDP Act. All references to “LexNeethi”, “we”, “us” or “our” in this Policy are to this entity.

2. Personal data we collect

• Account data: full name, email, password (hashed), phone number (optional), professional role, Bar Council enrolment number (optional).
• Content data: the prompts, queries, documents and files you submit to the Service and the AI-generated outputs.
• Usage data: logs, IP address, device information, browser type, pages visited, feature interactions and timestamps.
• Billing data: collected only when paid plans are enabled (not applicable during the free beta).
• Communications: messages you send to us via support, contact forms, email or in-app chat.

3. Purposes for which we process your data

We process your personal data for the following specified, lawful purposes:

• To create and maintain your LexNeethi account and authenticate you.
• To provide and improve the Service, including AI drafting, research and workflow features.
• To comply with legal, regulatory and audit obligations.
• To secure the Service, prevent fraud, abuse and unauthorised access.
• To communicate with you about updates, security notices and (with consent) marketing.

4. Lawful basis (DPDP Act)

We process your personal data primarily on the basis of your consent (Section 6, DPDP Act) obtained at sign-up, and for the specified purposes under Section 7 such as complying with a legal obligation or preventing fraud.

5. AI training and model improvement

We do not use your prompts, documents or AI outputs to train third-party public foundation models. We may use aggregated, anonymised, non-identifiable usage data to improve the Service. You may opt-out of usage-analytics processing from your account settings at any time.

6. Sharing your data

We share personal data only in the following circumstances:

• Data Processors: vetted infrastructure and AI providers who process data on our instructions under written data-processing agreements. Model providers used in the Service (e.g., large-language-model APIs) are contractually prohibited from using your data for their own model training.
• Legal obligations: when required by law, court order, or a competent authority.
• Corporate transactions: in connection with a merger, acquisition or asset sale, with appropriate safeguards.

We do not sell or rent your personal data to third parties.

7. Data storage and cross-border transfer

We store primary account, billing and content data on servers located within India. Certain sub-processors (e.g., AI model APIs, email delivery) may be located outside India. Where cross-border transfer is necessary, we ensure adequate safeguards in line with the DPDP Act and applicable notifications by the Government of India.

8. Data retention

We retain personal data only for as long as necessary for the purposes described in this Policy or as required by law. When you delete your account, we will delete or irreversibly anonymise your account and content data within 90 days, subject to legal-hold obligations.

9. Your rights as a Data Principal

Subject to the DPDP Act you have the right to:

• access a summary of the personal data we process about you;
• correct or update inaccurate personal data;
• erase personal data that is no longer necessary;
• withdraw consent at any time (though this will not affect the lawfulness of prior processing);
• nominate another individual to exercise these rights in the event of your incapacity or death;
• lodge a grievance with our Grievance Officer.

Exercise your rights by writing to privacy@lexneethi.com. We will respond within the statutory timelines.

10. Security

We implement industry-standard organisational and technical safeguards: HTTPS/TLS 1.3 encryption in transit, AES-256 encryption at rest, role-based access controls, security logging, and periodic security audits. However, no system is fully secure and we cannot guarantee absolute security.

11. Cookies

We use essential and analytics cookies. Please see our Cookie Policy for full details and controls.

12. Children

The Service is not intended for children under 18. We do not knowingly collect data from minors. If we learn we have collected such data, we will delete it promptly.

13. Grievance Officer

In accordance with the Information Technology Rules and the DPDP Act, the Grievance Officer for LexNeethi AI can be reached at grievance@lexneethi.com. We will acknowledge grievances within 24 hours and resolve them within 15 days.

14. Changes to this Policy

We may update this Policy from time to time. Material changes will be notified via email or an in-app banner. The “Effective” date above reflects the latest revision.