Privacy Policy
Last updated: July 2026
This Privacy Policy describes how LexisTrace ("LexisTrace," "we," "us," or "our") collects, uses, and protects information when you use our website and platform (collectively, the "Service"). By using the Service, you agree to the terms of this Privacy Policy.
1. Information We Collect
a. Information you provide directly
When you register for LexisTrace or use the Service, you may provide:
- Name and email address
- Case information (case name, case type, description of events)
- Files and documents you upload to your Evidence Locker
- Annotations, tags, and notes you add to your evidence
- Information about witnesses and attorneys you invite
b. Information collected automatically
When you use the Service, we automatically collect:
- Log data (IP address, browser type, pages visited, timestamps)
- Device information (operating system, browser version)
- Usage data (features used, actions taken in the platform)
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service
- Authenticate your identity and protect your account
- Generate the outputs you request (Counsel Handoff Packages, chain-of-custody logs, etc.)
- Respond to support requests
- Send service-related communications (account confirmations, beta access notifications)
- Comply with legal obligations
3. What We Do NOT Do With Your Data
We make the following firm commitments about your data:
- We do not use your case files or documents to train AI models — ours or any third party's.
- We do not sell your data to third parties.
- We do not share your evidence or case details with other LexisTrace users.
- We do not use your data for advertising or marketing profiling.
4. Data Isolation and Access
Your case files and case data are scoped to your account. No other LexisTrace user can access your evidence unless you explicitly invite them (as an Attorney or Reviewer role). LexisTrace employees do not access your case data except in limited circumstances disclosed below:
- When you contact support and provide access to diagnose an issue
- When required by law, court order, or valid legal process
- To investigate credible reports of illegal content or platform abuse
5. Data Retention
We retain your account data and case files as long as your account is active. You may delete your case and associated data at any time through the platform. Upon account deletion, we will delete your data within 30 days, except where retention is required by law.
6. Security
We use industry-standard security practices including encryption at rest and in transit, access controls, and audit logging. However, no method of electronic storage or transmission is 100% secure. We encourage you to use a strong, unique password and to notify us immediately if you believe your account has been compromised.
7. Third-Party Services
We use third-party services to operate the platform (hosting, storage, authentication). These providers process data on our behalf and are bound by data processing agreements. We do not permit them to use your data for their own purposes. A list of our current sub-processors is available upon request.
8. Cookies
We use essential cookies to maintain your session and authenticate your account. We do not use tracking cookies or advertising cookies. You can disable cookies in your browser, but doing so may impair the functionality of the Service.
9. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Object to or restrict certain processing
- Port your data to another service
To exercise these rights, contact us at privacy@lexistrace.com.
10. Children
The Service is not directed at individuals under 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us data, contact us and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice in the platform. Continued use of the Service after the effective date of changes constitutes acceptance of the updated policy.
12. Contact
For questions about this Privacy Policy or our data practices, contact us at: privacy@lexistrace.com