Privacy Policy

Account Information:

• Name, email address, professional credentials
• Law firm or organization details
• Billing and payment information
• Professional licensing information

Usage Data:

• Documents uploaded and processed
• AI interactions and queries
• Feature usage and preferences
• System logs and performance data

Public-Law Research Improvement:

• Ailex automatically records minimized, pseudonymous signals about public authorities displayed, opened, copied, removed, pinned or exported, and optional answer comparisons.
• Client documents, uploaded matter content, matter records and client-confidential facts are excluded from shared learning.
• The current Rwanda research observatory does not retain the question, answer or source text in these events.
• If you explicitly report a public-law issue, the exact answer and system-version identifiers, your structured issue choice and any optional correction you provide are placed in a protected 90-day feedback quarantine. Optional correction text is screened for sensitive content and is not returned in the submission receipt.
• Quarantined feedback is limited to product-quality review. It cannot update a live model or enter training automatically, and you should not include client or matter information.

Technical Data:

• IP address and location data
• Device and browser information
• Session data and cookies
• Security and authentication logs

Service Provision:

• Providing AI-powered legal assistance
• Document processing and analysis
• Account management and billing
• Customer support and communication

Service Improvement:

• Analyzing usage patterns to improve features
• Evaluating AI quality with minimized, pseudonymous public-law research signals
• Security monitoring and fraud prevention
• Performance optimization

Raw research events are quarantined for offline review and do not update a live model automatically. Any future use for training requires a separate, versioned approval process.

Legal Basis: Contractual necessity and legitimate business interests

We do not sell your personal information.

Limited Sharing:

• Service Providers: Trusted third parties who assist in service delivery (cloud hosting, payment processing)
• Legal Requirements: When required by law, court order, or regulatory authority
• Business Transfers: In connection with mergers, acquisitions, or asset sales
• Consent: When you explicitly authorize sharing

Data Residency: Your data is processed and stored in compliance with regional requirements. US users' data remains within US regions.

Security Measures:

• End-to-end encryption for data in transit and at rest
• Multi-factor authentication for account access
• Regular security audits and penetration testing
• SOC 2 Type II compliance
• Employee security training and background checks

Incident Response: We maintain an incident response plan and will notify you of any data breaches as required by applicable law.

Data Retention: We retain your data only as long as necessary for service provision and legal compliance. You can request deletion at any time.

Under California Consumer Privacy Act (CCPA) and applicable state laws, you have the following rights:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale of personal information
• Right to non-discrimination for exercising privacy rights
• Right to correct inaccurate personal information

Exercising Your Rights:

• Contact us at [email protected]
• Use the privacy controls in your account settings
• Submit requests through our privacy portal

Response Time: We will respond to your requests within 45 days as required by CCPA.

Cookie Types:

• Essential: Required for service functionality
• Analytics: Help us understand usage patterns
• Preferences: Remember your settings and preferences
• Marketing: Deliver relevant content (with consent)

Cookie Management: You can control cookies through your browser settings or our cookie preference center. Note that disabling essential cookies may affect service functionality.

For detailed information, see our Cookie Policy.

We implement appropriate safeguards for international data transfers, including:

• Standard Contractual Clauses (SCCs) for EU data
• Adequacy decisions where applicable
• Data Processing Agreements with all vendors
• Regular compliance assessments

Data Controller: AiLex Inc., USA

Supervisory Authority: California Attorney General's Office