Privacy Policy

Last updated: 30 March 2026

LexiDraft Technologies ("LexiReview", "we", "us", or "our") operates the website lexireview.in and the LexiReview application at app.lexireview.in. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, in compliance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and other applicable Indian laws.

1. Information We Collect

1.1 Personal Data You Provide

  • Name, email address, phone number, and organisation details when you create an account or contact us.
  • Billing information (processed by our payment gateway; we do not store card details).
  • Communications you send to us via email, chat, or contact forms.

1.2 Data Generated Through Platform Use

  • Contracts and documents you upload for review, generation, or storage.
  • AI analysis outputs including risk scores, compliance flags, and audit trails.
  • Usage analytics such as features used, session duration, and interaction patterns.

1.3 Automatically Collected Data

  • IP address, browser type, device information, and operating system.
  • Cookies and similar tracking technologies (see Section 7).

2. How We Use Your Information

We process your data for the following lawful purposes:

  • Service delivery — To provide AI-powered contract review, generation, and compliance analysis.
  • Account management — To create and maintain your account, process payments, and communicate about your subscription.
  • Platform improvement — To improve our AI models, fix bugs, and enhance user experience (using aggregated, anonymised data only).
  • Legal compliance — To comply with applicable laws, regulations, and legal processes.
  • Security — To detect, prevent, and address fraud, abuse, or technical issues.
  • Communication — To send service-related notifications, updates, and marketing communications (with your consent).

3. Your Rights as a Data Principal

Under the DPDP Act 2023, you have the following rights as a Data Principal:

  • Right to Access — Request a summary of your personal data being processed and the processing activities.
  • Right to Correction — Request correction of inaccurate or incomplete personal data.
  • Right to Erasure — Request deletion of your personal data, subject to legal retention requirements.
  • Right to Grievance Redressal — Lodge complaints regarding processing of your personal data.
  • Right to Nominate — Nominate an individual to exercise your rights in the event of your death or incapacity.

To exercise any of these rights, contact our Data Protection Officer at privacy@lexireview.in.

4. Data Storage and Security

  • All data is stored on servers located in India, ensuring compliance with data localisation requirements.
  • We use AES-256 encryption at rest and TLS 1.3 encryption in transit.
  • Access controls are enforced through role-based access management.
  • Chain-hashed SHA-256 audit trails ensure tamper-evident logging of all platform actions.
  • Regular security assessments and penetration testing are conducted.

5. Data Sharing and Disclosure

We do not sell your personal data. We may share data with:

  • Service providers — Payment processors, cloud infrastructure providers, and analytics services, bound by data processing agreements.
  • Legal obligations — When required by law, court order, or government authority.
  • Business transfers — In connection with a merger, acquisition, or asset sale (with prior notice to you).

We do not transfer personal data outside India without explicit consent and appropriate safeguards as prescribed under the DPDP Act.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Upon account deletion, your personal data is erased within 90 days, except where legal retention obligations apply. Uploaded contracts are deleted immediately upon your request or within 30 days of account closure.

7. Cookies and Tracking

We use the following types of cookies:

  • Essential cookies — Required for platform functionality (authentication, session management).
  • Analytics cookies — To understand usage patterns and improve our service (anonymised).
  • Preference cookies — To remember your settings and preferences.

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect platform functionality.

8. Children's Privacy

LexiReview is a business platform and is not directed at individuals under 18 years of age. We do not knowingly collect personal data from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We will notify registered users of material changes via email.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights: