This Privacy Policy ("Privacy Policy" or "Policy") describes the manner in which Lexarna, together with its affiliates, subsidiaries, group entities, successors, and permitted assigns, including MAYN AI LLP (collectively referred to as "Lexarna", "Company", "we", "us", or "our"), collects, receives, stores, processes, uses, discloses, transfers, retains, and protects information relating to users of the Services.

This Privacy Policy applies to all users, visitors, customers, subscribers, advocates, law firms, enterprises, legal departments, consultants, signatories, counterparties, and any other individuals interacting with the Services provided through:

(a) the website located at www.lexarna.ai,
(b) web applications,
(c) mobile applications,
(d) APIs,
(e) artificial intelligence systems,
(f) integrations,
(g) software products,
(h) document automation systems,
(i) e-signature and authentication tools, and
(j) all related products and services provided by Lexarna (collectively referred to as the "Platform" or "Services").

This Privacy Policy is issued in accordance with applicable laws including:

(a) the Digital Personal Data Protection Act, 2023 ("DPDP Act").
(b) the Information Technology Act, 2000.
(c) the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
(d) applicable intermediary and digital platform regulations, and
(e) other applicable laws in force in India.

By accessing, browsing, registering on, or using the Services, you acknowledge that you have read, understood, and agreed to this Privacy Policy.

1. Applicability and Scope

1.1 This Privacy Policy applies to all information processed by Lexarna in connection with the use of the Services.

1.2 This Privacy Policy applies irrespective of whether the information is collected:

(a) directly from users,
(b) automatically through use of the Platform,
(c) through integrations,
(d) through customer uploads,
(e) through communications with Lexarna,
(f) through enterprise onboarding,
(g) through AI-assisted interactions, or
(h) through third-party service providers.

1.3 This Privacy Policy shall be read together with:

(a) the Terms of Use,
(b) enterprise agreements,
(c) subscription agreements,
(d) Data Processing Addendums,
(e) service-specific terms, and
(f) any additional contractual arrangements executed with Lexarna.

2. Definitions

2.1 "Applicable Law" means all laws, statutes, ordinances, rules, regulations, notifications, circulars, directions, judgments, and governmental requirements applicable to the processing of information.

2.2 "Customer Data" means all data, records, documents, files, prompts, instructions, communications, pleadings, contracts, evidence, legal content, or other information uploaded, submitted, generated, stored, or processed through the Platform by or on behalf of a user.

2.3 "Personal Data" shall have the meaning assigned under applicable law and includes any data about an individual who is identifiable by or in relation to such data.

2.4 "Sensitive Personal Information" or "Sensitive Data" includes such categories of information as may be classified under applicable law, including passwords, financial information, authentication credentials, and legally confidential records.

2.5 "Processing" means any operation performed on information including collection, recording, organization, storage, adaptation, retrieval, consultation, use, disclosure, transmission, analysis, deletion, anonymization, or destruction.

3. Role of Lexarna: Data Fiduciary and Data Processor

3.1 Data Fiduciary Role

3.1.1 Lexarna acts as a "Data Fiduciary" in relation to information processed for its own operational, commercial, legal, security, analytics, and business purposes.

3.1.2 Such processing includes:

(a) account registration information,
(b) subscription and billing data,
(c) support communications,
(d) marketing preferences,
(e) usage analytics,
(f) platform telemetry,
(g) authentication logs,
(h) audit logs,
(i) security information, and
(j) business administration records.

3.1.3 In such circumstances, Lexarna determines the purpose and means of processing such Personal Data.

3.2 Data Processor Role

3.2.1 Lexarna acts as a "Data Processor", "Service Provider", or equivalent processor role in relation to Customer Data uploaded or processed by enterprise customers, advocates, law firms, legal departments, organizations, or institutional users.

3.2.2 Such Customer Data may include:

(a) litigation records,
(b) pleadings,
(c) contracts,
(d) legal notices,
(e) affidavits,
(f) evidence,
(g) client communications,
(h) discovery documents,
(i) compliance records,
(j) personally identifiable information relating to litigants or third parties, and
(k) confidential legal documentation.

3.2.3 Where Lexarna acts as a processor:

(a) the customer remains responsible for ensuring lawful collection and disclosure,
(b) the customer remains responsible for obtaining necessary consents and authorizations,
(c) the customer remains responsible for compliance with legal and professional obligations,
(d) Lexarna processes such data only pursuant to customer instructions, platform functionality, contractual obligations, or applicable law.

4. Information We Collect

4.1 Registration and Account Information

4.1.1 We may collect:

(a) full name,
(b) email address,
(c) mobile number,
(d) designation,
(e) organization details,
(f) professional information,
(g) registration credentials,
(h) billing details,
(i) profile information, and
(j) authentication credentials.

4.2 Device and Technical Information

4.2.1 We automatically collect:

(a) IP addresses,
(b) browser type,
(c) operating system,
(d) device identifiers,
(e) session information,
(f) timestamps,
(g) access logs,
(h) crash reports,
(i) clickstream information, and
(j) diagnostic data.

4.3 Usage Information

4.3.1 We may collect information relating to:

(a) features used,
(b) interactions with the Platform,
(c) document activity,
(d) AI prompts and responses,
(e) collaboration activity,
(f) user preferences,
(g) usage duration,
(h) workflow patterns, and
(i) engagement metrics.

4.4 Customer Data

4.4.1 Users may upload or process:

(a) contracts,
(b) legal opinions,
(c) notices,
(d) pleadings,
(e) petitions,
(f) evidence,
(g) agreements,
(h) confidential communications,
(i) client records,
(j) compliance documentation, and
(k) legally privileged material.

4.5 AI Interaction Data

4.5.1 Where users utilize AI-enabled features, Lexarna may process:

(a) prompts,
(b) queries,
(c) contextual instructions,
(d) generated outputs,
(e) interaction metadata,
(f) correction feedback, and
(g) performance review information.

4.6 Cookies and Tracking Technologies

4.6.1 Lexarna uses cookies, web beacons, analytics technologies, and similar tracking mechanisms for:

(a) authentication,
(b) session management,
(c) fraud prevention,
(d) analytics,
(e) performance optimization,
(f) security monitoring,
(g) user experience enhancement, and
(h) service functionality.

5. Purposes of Processing

5.1 Lexarna processes information for purposes including:

(a) providing the Services,
(b) enabling AI-assisted legal workflows,
(c) document generation and review,
(d) user authentication,
(e) account management,
(f) subscription administration,
(g) customer support,
(h) troubleshooting,
(i) analytics and product improvement,
(j) security monitoring,
(k) fraud detection,
(l) audit and compliance purposes,
(m) enforcing contractual rights,
(n) responding to legal requests,
(o) business administration, and
(p) lawful operational purposes.

6. AI Systems and Machine Learning

6.1 AI-Assisted Features

6.1.1 The Platform may utilize artificial intelligence, natural language processing, machine learning systems, and large language model technologies.

6.1.2 AI-generated outputs may be incomplete, inaccurate, outdated, or unsuitable for specific legal purposes.

6.1.3 Users are solely responsible for independently verifying all outputs prior to reliance, filing, execution, submission, publication, or professional use.

6.2 Restrictions on AI Model Training

6.2.1 Unless expressly agreed in writing:

(a) Customer Data is not used for training generalized public AI models.
(b) Confidential legal documents are segregated from generalized training datasets.
(c) Google Workspace APIs are not used to develop or improve generalized AI/ML models.

6.3 Human Review

6.3.1 Authorized personnel may access limited information where reasonably necessary for:

(a) security investigations,
(b) abuse prevention,
(c) debugging,
(d) customer support,
(e) legal compliance,
(f) infrastructure maintenance, or
(g) system improvement.

7. Special Categories of Data and Legal Restrictions

7.1 Users shall ensure compliance with all applicable confidentiality and disclosure restrictions before uploading information to the Platform.

7.2 Mandatory Redaction Obligations

7.2.1 Users shall not upload unredacted information prohibited from disclosure under applicable law including:

(a) identities protected under the Protection of Children from Sexual Offences Act, 2012,
(b) identities protected under the Juvenile Justice (Care and Protection of Children) Act, 2015,
(c) identities of victims of sexual offences protected under applicable criminal law,
(d) sealed judicial records,
(e) in-camera proceedings,
(f) records prohibited from publication by court order, and
(g) legally restricted confidential records.

7.3 Responsibility of Users

7.3.1 Users are solely responsible for:

(a) obtaining lawful authority to upload information,
(b) complying with professional confidentiality obligations,
(c) obtaining necessary consents,
(d) implementing anonymization and redaction,
(e) ensuring lawful disclosure, and
(f) compliance with court directions and statutory obligations.

8. Disclosure and Sharing of Information

8.1 Service Providers

8.1.1 Lexarna may disclose information to third-party vendors and sub processors engaged for:

(a) cloud hosting,
(b) infrastructure services,
(c) payment processing,
(d) analytics,
(e) communications,
(f) AI infrastructure,
(g) cybersecurity, and
(h) customer support.

8.1.2 Such disclosures are subject to contractual confidentiality and data protection obligations.

8.2 Legal and Regulatory Compliance

8.2.1 Lexarna may disclose information:

(a) pursuant to court orders,
(b) governmental requests,
(c) legal process,
(d) regulatory obligations,
(e) law enforcement requests, or
(f) protection of legal rights and security interests.

8.3 Business Transfers

8.3.1 Information may be disclosed or transferred in connection with:

(a) mergers,
(b) acquisitions,
(c) restructuring,
(d) financing transactions,
(e) insolvency proceedings, or
(f) sale of assets.

9. International Transfers

9.1 Information may be processed or stored in jurisdictions outside India.

9.2 Lexarna implements reasonable contractual, technical, and organizational safeguards in connection with such transfers.

10. Data Retention

10.1 Lexarna retains information only for as long as reasonably necessary for:

(a) service delivery,
(b) contractual purposes,
(c) dispute resolution,
(d) audit requirements,
(e) legal compliance,
(f) security purposes, and
(g) legitimate business needs.

10.2 Retention periods may vary depending on:

(a) applicable law,
(b) enterprise agreements,
(c) litigation hold requirements,
(d) operational needs, and
(e) legal obligations.

11. Security Measures

11.1 Lexarna implements reasonable security measures including:

(a) encryption,
(b) access controls,
(c) audit logging,
(d) authentication systems,
(e) monitoring systems,
(f) role-based access controls,
(g) infrastructure safeguards, and
(h) security testing mechanisms.

11.2 No electronic transmission or storage system can guarantee absolute security.

12. User Rights

12.1 Subject to applicable law, users may request:

(a) access to personal data,
(b) correction of inaccurate information,
(c) withdrawal of consent,
(d) deletion of information,
(e) grievance redressal,
(f) information regarding processing activities, and
(g) nomination rights where applicable.

12.2 Lexarna may deny requests where:

(a) retention is legally required,
(b) legal privilege applies,
(c) requests are technically infeasible,
(d) compliance obligations require retention, or
(e) rights of third parties may be affected.

13. Children's Privacy

13.1 The Services are intended only for individuals competent to contract under applicable law.

13.2 Lexarna does not knowingly collect personal data from minors except where such information is uploaded by authorized users for legitimate legal purposes.

14. Third-Party Services

14.1 The Platform may integrate with third-party products, applications, or services.

14.2 Lexarna is not responsible for:

(a) third-party privacy practices,
(b) security standards,
(c) independent processing activities, or
(d) content hosted by third parties.

15. Marketing Communications

15.1 Lexarna may send:

(a) transactional notifications,
(b) operational communications,
(c) security alerts,
(d) newsletters,
(e) promotional materials, and
(f) service updates.

15.2 Users may opt out of non-essential marketing communications subject to operational requirements.

16. Grievance Officer / Data Protection Officer

16.1 For grievances, privacy concerns, or requests under applicable law, users may contact:

Grievance Officer / Data Protection Officer
Anshuman Singh
+91 98185 71429
Email: advocateanshuman1458@gmail.com

If you have any questions about this Privacy Notice or Lexarna's data handling practices, you may email us at legal@lexarna.com.

17. Amendments

17.1 Lexarna reserves the right to amend, modify, or update this Privacy Policy at any time.

17.2 Updated versions shall be published on the Platform with a revised "Last Updated" date.

18. Governing Law and Jurisdiction

18.1 This Privacy Policy shall be governed by the laws of India.

18.2 Courts at New Delhi shall have exclusive jurisdiction over disputes arising in connection with this Privacy Policy.

Privacy Policy