Privacy Policy

Lexilio ("We" "Us" "Our") is operated by Lexilio Inc., a company registered in Delaware, United States. Our registered address is Delaware, United States.

Lexilio provides AI-powered contract intelligence software for construction and procurement teams to review contracts for compliance and risk.

This privacy policy explains the personal data we collect, how we use that personal data, and the reasons we may need to disclose personal data to others. We will update this policy from time to time, so please check our website for any updates.

The Role We Have in Relation to Your Personal Data

Depending on the circumstances, Lexilio may be a data controller of your personal data or a data processor.

• If you are a customer or prospective customer/employee, we are the data controller.
• If your data is processed on behalf of a customer through our service, they are the controller, and we are the processor.

How We Use Your Personal Data

Information We Collect Automatically

We collect the following data automatically during site visits:

• Technical data (e.g., IP address, browser type, operating system, device type)
• Usage data (e.g., pages viewed, navigation paths, errors encountered, feature interactions)

Cookies

We use cookies to improve your experience and analyze traffic. Non-essential cookies are used only with your consent.

For a full list of cookies we use, please see our Cookie Policy.

Disclosures of Your Information

We may share data with:

• Service providers and contractors (e.g., hosting providers, payment processors)
• Buyers in a business sale or restructuring
• Legal and fraud-prevention authorities when required by law
• Third-party analytics providers (Google Analytics, etc.)

We do not sell your personal data to third parties.

Where and How We Store Your Data

Your data may be stored and processed in the European Union and other jurisdictions where our service providers operate. We ensure GDPR-compliant safeguards for international transfers. All data is encrypted in transit and at rest.

AI Service Providers

Lexilio uses trusted third-party AI providers to analyze contracts and generate compliance reports. These providers do not train AI models on your data. Request and response data may be temporarily retained by AI providers for up to 30 days for security, abuse prevention, and service reliability purposes, after which it is deleted in accordance with provider policies.

Lexilio does not enable data-sharing programs that would allow AI providers to retain or train on customer data beyond this temporary security window.

How Long We Keep Your Data

We retain your data only as long as necessary to provide services and comply with legal obligations:

• Account data: Retained while account is active + 30 days after deletion
• Contract data: Retained while account is active + 30 days after deletion
• Billing data: Retained for 7 years for tax compliance
• Marketing data: Until you unsubscribe or opt out

For more detail on retention periods, contact hello@lexilio.co

Your Data Rights

You have the right to:

• Access your data (Subject Access Request)
• Request correction, deletion, or restriction
• Object to processing
• Request data portability
• Withdraw consent
• Lodge a complaint with your local data protection authority

To exercise these rights, contact hello@lexilio.co

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children.

Changes to This Policy

We may update this policy from time to time. The "Last Updated" date at the top indicates when changes were last made. Continued use of our services after changes constitutes acceptance.

Contact

Questions about this policy? Email hello@lexilio.co