Privacy Policy
Last updated: November 20, 2025
1. Introduction
LegalX ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service, including the Lexi AI assistant.
This Privacy Policy complies with the Protection of Personal Information Act (POPIA) of South Africa and other applicable data protection laws.
2. Information We Collect
2.1 Information You Provide
When you use Lexi, you may provide information including:
- Questions and queries you submit to Lexi
- Any personal information you include in your questions or conversations
- Feedback or communications you send to us
2.2 Automatically Collected Information
We may automatically collect certain information when you use the Service, including:
- Device information (browser type, device type, operating system)
- Usage data (pages visited, time spent, interactions with Lexi)
- IP address and general location information
- Cookies and similar tracking technologies
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service
- Process and respond to your queries through Lexi
- Analyze usage patterns to enhance user experience
- Ensure the security and integrity of the Service
- Comply with legal obligations
- Send you updates or communications about the Service (with your consent)
4. Data Processing and AI Services
Lexi uses AI technology, including services provided by third-party AI providers (such as OpenAI), to process your queries and generate responses. When you interact with Lexi:
- Your queries and conversation history may be processed by AI services
- We do not use your conversations to train AI models without your explicit consent
- Conversation data is handled in accordance with this Privacy Policy and applicable data protection laws
- We implement appropriate security measures to protect your data during processing
5. Information Sharing and Disclosure
We do not sell your personal information. We may share your information only in the following circumstances:
- Service Providers: With third-party service providers who assist in operating the Service (e.g., AI service providers, hosting services)
- Legal Requirements: When required by law, court order, or government regulation
- Protection of Rights: To protect our rights, property, or safety, or that of our users
- With Your Consent: When you have provided explicit consent for such sharing
6. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
7. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Conversation data may be retained for service improvement purposes, but you may request deletion of your data at any time.
8. Your Rights Under POPIA
As a data subject under POPIA, you have the right to:
- Access: Request access to your personal information we hold
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information
- Objection: Object to processing of your personal information
- Restriction: Request restriction of processing
- Data Portability: Request transfer of your data to another service provider
- Withdraw Consent: Withdraw consent where processing is based on consent
To exercise these rights, please contact us through the Service or using the contact information provided in this policy.
9. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to track activity on the Service and store certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of the Service.
10. Children's Privacy
The Service is not intended for children under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete such information.
11. International Data Transfers
Your information may be transferred to and processed in countries other than South Africa, including countries where AI service providers operate. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.
13. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights under POPIA, please contact us through the LegalX platform or using the contact methods available on the Service.