Privacy Policy

Lexorii (“Lexorii”, “we”, “us”) provides a practice-management platform for law firms, operated from Dubai, United Arab Emirates. This policy explains what information we collect, where it is stored, who else touches it, and the choices you have. It applies to the Lexorii web application and the services at lexorii.com.

For firm and client records inside the platform, your firm is the controller and Lexorii is the processor: we hold and process that data on your firm’s instructions, not for our own purposes.

Information we collect

• Account information - your name, email address, role, and firm, provided when an account is created or invited.
• Firm and matter data - content you enter into the platform such as matters, court cases, documents, calendar events, tasks, time entries, contacts and financial records. This can include personal data about your clients and counterparties that you choose to enter, including identity-document details where your firm uses the Emirates ID feature.
• Connected Google data - if you choose to connect Google Calendar, we access your calendar events through the https://www.googleapis.com/auth/calendar.events scope and your basic profile email, solely to synchronize events between Google Calendar and your Lexorii calendar.
• Support assistant conversations - what you type into the in-app assistant, so it can answer and draft items for you to confirm.
• Usage and security data - limited technical information (log, audit-trail and security data, such as who viewed or changed a document and when) needed to operate and secure the service.

On the public marketing pages, we ask before loading optional Google Analytics or Google Ads measurement. If you allow it, Google may set cookies that help us understand page visits, demo requests and which campaign brought you to Lexorii. If you decline, those tags do not load. Necessary cookies and local storage are still used to keep you signed in and remember interface preferences. The Lexorii product does not use advertising cookies.

How we use information

• To provide, maintain, secure and improve the Lexorii platform.
• To enforce the role-based access your firm has configured.
• To synchronize calendar events you have authorized between Google Calendar and Lexorii.
• To send transactional email - reminders, approvals, digests and account notices. We do not send marketing email.
• To answer support requests and diagnose faults.
• With your permission on the public site, to measure marketing performance and demo requests. We do not use firm or client records for advertising.

We do not sell personal information, and we do not use your firm’s content to train AI models.

Where your data is stored

Firm data is stored in our own Supabase/Postgres database and file storage hosted on a server in the United Arab Emirates. The web application itself runs on Vercel in Frankfurt, Germany, so data is processed in the EU while a request is being served. Some of the providers listed below operate outside the UAE; where data reaches them, it is limited to what that provider needs to do its job.

Who processes data on our behalf

• Vercel - hosting for the web application (Frankfurt).
• Resend - delivery of notification and account email. Receives recipient addresses and message contents.
• Google - Calendar API for the calendar sync you connect, and the Gemini model behind the in-app assistant. The assistant receives your typed message and product documentation; it is not given your firm’s matters, documents or financial records.
• Microsoft - Microsoft 365 calendar sync, where your firm enables it.
• Google Analytics and Google Ads - optional public-site audience and conversion measurement, loaded only after you allow measurement.

Google user data

Lexorii’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only request the Google Calendar scopes necessary to provide calendar synchronization. We do not use Google user data for advertising, we do not sell it, and we do not use it to train AI models. Google Calendar data is used only to display and sync events on your behalf, and access tokens are encrypted at rest. You can disconnect Google at any time from your calendar settings, which revokes Lexorii’s access.

Data sharing

We do not sell personal information. We share data only with the providers listed above, and where we are required to by law. Inside the platform, data is visible to authorized members of your firm according to their role - for example, accountants cannot open legal documents. Where your firm invites a client to the client portal, that client sees only the specific matter information your firm shares with them.

Retention

We keep data for as long as your firm’s account is active. Records deleted inside the app are held in a recoverable state for 60 days and are then permanently purged. When an account closes, firm data is deleted 30 days afterwards, once any export has been provided. Audit and security logs may be kept longer where needed to investigate an incident.

Security

Access is authenticated and role-checked on every request, transport is encrypted, and credentials for connected services are encrypted at rest. Sensitive actions are recorded in an audit trail. No system is perfectly secure - if a breach affects your data we will notify your firm without undue delay.

Your choices and rights

• Disconnect Google Calendar at any time from calendar settings.
• Request access to, correction of, export of, or deletion of your personal data.
• Contact your firm’s partners or administrator for firm-managed records - for client and matter data, your firm decides what is kept and for how long, and we will refer such requests to them.
• Email support@lexorii.com with any privacy question or request; we aim to respond within 30 days.

Children

Lexorii is a business tool for law firms and is not directed at children. We do not knowingly create accounts for anyone under 18.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced in the app or by email, and the “Last updated” date above will change.