Privacy Policy

Effective June 22, 2026 · Version 2026-06-22. This policy describes the information Lexis Defender processes to provide the service.

Information processed

• Account information, including name, email, authentication status, plan, and usage balances.
• Case information you choose to enter, including conversations, documents, facts, names, dates, locations, and drafting inputs.
• Operational information such as security events, feature usage, support requests, and limited device or request metadata.
• AI usage metadata, including feature name, model, input/output/cached/reasoning token totals, analyzed-page counts, usage units, provider response identifiers, and estimated processing cost. Prompts and document contents are not copied into the usage ledger.
• Versioned records showing acceptance of the Terms of Service and acknowledgment of this Privacy Policy.
• Billing identifiers, subscription status, and receipts supplied by Stripe. Lexis Defender does not receive full payment-card numbers.

Purposes

• Authenticate users and keep matters separated by account and conversation.
• Provide legal-information research, drafting, storage, and document features requested by the user.
• Enforce subscriptions and usage limits, process support requests, prevent abuse, and maintain service security.
• Meet legal, accounting, dispute-resolution, and fraud-prevention obligations.

Service providers

Information is shared only as needed to operate the service, including with hosting/database providers, OpenAI for requested AI processing, Stripe for payments and billing management, authentication providers you select, and email delivery providers. These providers process data under their own contractual and legal obligations.

Retention and your choices

Workspace content remains until you delete it or request account deletion, subject to limited provider backup retention and records that must be kept for security, billing, disputes, or law. You may delete chats and documents in the product and may request access, correction, export, or deletion by contacting support.

Individual AI usage events are assigned a 13-month retention date. Agreement records are retained for up to seven years where needed to establish the service contract or resolve billing and legal disputes, then deleted or de-identified as appropriate.

Do not enter information that is unnecessary for your requested task. Drafting may require names, addresses, dates, and other case facts.

Contact

For privacy requests, email support@lexisdefender.com from the account email so identity can be verified.