Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

When you use LexWeave, you may provide us with information such as:

• Account Information: Name, email address, company name, job title, phone number
• Payment Information: Billing address, payment method details (processed securely by third-party processors)
• Legal Documents and Content: Case files, deposition transcripts, legal research, and other materials you upload or input into our platform
• Communications: Support inquiries, feedback, and messages you send to our team
• Profile Data: Information you choose to include in your user profile

1.2 Information Collected Automatically

When you access LexWeave, we automatically collect:

• Usage Data: Pages visited, time spent, features used, searches performed
• Device Information: Browser type, device type, operating system, IP address
• Cookies and Tracking Technologies: Session identifiers and analytics data
• Performance Data: Application performance, error logs, API usage

1.3 Information from Third Parties

We may receive information about you from:

• Third-party authentication providers (OAuth/SSO)
• Law firm administrators adding team members
• Analytics and service providers

2. How We Use Your Information

LexWeave uses collected information for the following purposes:

1. Service Delivery: Providing, maintaining, and improving the LexWeave platform
2. User Support: Responding to inquiries, providing customer service and technical support
3. Account Management: Managing user accounts, authentication, and authorization
4. Legal Compliance: Complying with legal obligations, enforcing agreements, and preventing fraud
5. Analytics and Improvement: Understanding usage patterns and optimizing platform features
6. Communication: Sending service-related announcements, security updates, and billing notifications
7. Marketing Communications: Sending promotional materials (with your consent where required by law)
8. Security: Detecting, preventing, and addressing fraud, abuse, and security incidents
9. Aggregated Insights: Creating de-identified, aggregated analytics about platform usage

3. Data Storage and Security

3.1 Data Storage

LexWeave infrastructure is hosted on Cloudflare Pages and related Cloudflare services. Your data is stored securely in distributed data centers with redundancy and backup systems to ensure availability and integrity.

3.2 Encryption

• In Transit: All data transmitted to and from LexWeave is encrypted using TLS 1.2+ (HTTPS)
• At Rest: Sensitive data including legal documents and authentication credentials are encrypted at rest using AES-256 encryption

3.3 Access Controls

• Access to customer data is restricted to authorized LexWeave personnel only
• All access is logged and monitored for security purposes
• Employees sign confidentiality agreements
• Multi-factor authentication is enforced for administrative access

3.4 Data Retention

We retain personal data for as long as necessary to provide services, comply with legal obligations, and resolve disputes. You may request data deletion as outlined in Section 8.

4. Data Sharing and Disclosure

4.1 Third-Party Service Providers

We may share information with trusted third parties who help us operate our platform:

• Cloudflare: Hosting and infrastructure provider
• Payment Processors: Secure payment processing (stripe, PayPal, etc.)
• Analytics Providers: Understanding usage patterns and platform optimization
• Email Service Providers: Transactional and marketing communications
• Security and Fraud Prevention: Third-party security tools

4.2 Legal Requirements and Protection

We may disclose your information if required by law or if we believe in good faith that disclosure is necessary to:

• Comply with legal process, court order, or government request
• Protect our rights, privacy, safety, or property
• Prevent illegal activity or fraud
• Enforce our Terms of Service and other agreements

4.3 No Sale of Personal Data

LexWeave does not sell, trade, or rent personal information to third parties for their independent marketing purposes. We share data only as described in this policy and with your consent.

4.4 Business Transfers

If LexWeave is acquired, merged, or substantially all assets are transferred, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your data.

5. Cookies and Tracking Technologies

5.1 Cookies

LexWeave uses cookies and similar tracking technologies to:

• Maintain user sessions and authentication
• Store user preferences and settings
• Analyze platform usage and performance
• Deliver targeted content and advertisements

5.2 Cookie Types

• Essential Cookies: Required for platform functionality
• Performance Cookies: Analytics and usage data
• Functional Cookies: User preferences and customization
• Marketing Cookies: Retargeting and promotional content (with consent)

5.3 Cookie Control

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. Note that blocking essential cookies may impair platform functionality.

6. GDPR Compliance (EU Users)

6.1 Legal Basis for Processing

For users in the European Union, we process personal data based on:

• Contractual Necessity: Providing services you've requested
• Legal Obligation: Compliance with applicable laws
• Legitimate Interest: Operating and improving our services
• Consent: Where you have explicitly agreed

6.2 Your GDPR Rights

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a portable format
• Objection: Opt out of certain processing activities
• Withdraw Consent: Withdraw previously granted consent at any time

6.3 Data Processing Agreement

For business customers, we offer a Data Processing Agreement (DPA) that outlines our obligations as a data processor. Contact our privacy team for details.

6.4 Data Protection Officer

For GDPR-related inquiries, you may contact our data protection team at legal@lexweave.ai.

7. CCPA Compliance (California Users)

7.1 Your CCPA Rights

Under the California Consumer Privacy Act (CCPA), California residents have the right to:

• Know: What personal information is collected, used, and shared
• Delete: Request deletion of personal information (with exceptions)
• Opt-Out: Opt out of the "sale" or "sharing" of personal information
• Non-Discrimination: Freedom from discrimination for exercising CCPA rights

7.2 How to Exercise Your Rights

To exercise your CCPA rights, submit a request through our privacy portal or contact us at legal@lexweave.ai. We will verify your identity before responding to your request.

7.3 Opt-Out of Targeted Advertising

We do not "sell" personal information, but we do use cookies for targeted advertising. You can opt out through the "Do Not Track" signals in your browser or by contacting us directly.

8. Your Privacy Rights and Choices

8.1 Account Access and Control

You may access and update your account information at any time through your LexWeave account settings.

8.2 Communication Preferences

You can opt out of promotional emails by clicking the unsubscribe link in any marketing message or adjusting your notification preferences in your account.

8.3 Data Deletion

You may request deletion of your account and associated data. Please note that some data may be retained for legal compliance, fraud prevention, or legitimate business purposes.

8.4 Data Portability

You can request your personal data in a portable format (e.g., CSV) for transfer to another service.

8.5 Submitting Rights Requests

To exercise any of the rights outlined above, please submit a request to:

Email: legal@lexweave.ai
Mailing Address: LexWeave, Inc., Attention: Privacy Team, San Francisco, CA

We will respond to verified requests within 30 days (or as required by applicable law).

9. Children's Privacy

LexWeave is not directed to individuals under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will promptly delete it and comply with applicable children's privacy laws.

10. Third-Party Links and Services

The LexWeave website may contain links to third-party websites and services. This Privacy Policy applies only to LexWeave. We are not responsible for the privacy practices of linked third-party sites, and you should review their privacy policies before providing any information.

11. International Data Transfers

Your information may be transferred to, stored in, and processed in countries other than your country of residence. These countries may not have the same data protection laws as your country. By using LexWeave, you consent to the transfer of your information to countries outside your country of residence, including the United States.

12. Do Not Track Signals

Some browsers include a "Do Not Track" feature. Currently, there is no industry standard for recognizing Do Not Track signals. LexWeave respects user privacy settings to the extent permitted by applicable law.

13. Changes to This Privacy Policy

LexWeave may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on this page and updating the "Last Updated" date. Your continued use of LexWeave constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions about this Privacy Policy, your privacy rights, or how LexWeave handles your data, please contact us:

Email: legal@lexweave.ai
Website: https://lexweave.ai
Mailing Address: LexWeave, Inc., Attention: Privacy Team, San Francisco, CA

15. Additional Information for Specific Jurisdictions

15.1 Virginia (VCDPA)

Virginia residents have similar rights under the Virginia Consumer Data Protection Act. Exercise your rights by contacting us at legal@lexweave.ai.

15.2 Colorado (CPA)

Colorado residents have rights under the Colorado Privacy Act. Contact us to exercise these rights.

15.3 Utah (UCPA)

Utah residents have rights under the Utah Consumer Privacy Act. Submit requests to legal@lexweave.ai.