Last updated: September 24, 2026

lexpad. (“lexpad,” “we,” “us,” or “our”) respects your privacy and is committed to handling personal information responsibly.

This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our website, use lexpad, or otherwise interact with our services.

By using our website or services, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

The information we collect depends on how you interact with lexpad and the type of relationship you have with us.

Roles and enterprise relationships

For business or enterprise use, an organization or customer may control accounts, workspace access, and content within its workspace. Lexpad provides the platform and processes information as necessary to provide the services requested by the organization or user.

The roles of Lexpad LLC, an organization, and an individual user may depend on the type of information, the way the service is used, and the applicable contractual relationship. We do not treat any one role as applying to every situation.

A separate written agreement, such as a Data Processing Addendum, Master Services Agreement, or Order Form, may supplement this Privacy Policy and may establish additional responsibilities for the applicable relationship.

Categories of information

Depending on how you interact with lexpad, we may collect or process the following categories of information:

• Account information

• Contact information

• Authentication and session information

• Workspace information

• User Content

• Documents and files

• Knowledge bases

• Metadata

• Embeddings and vector representations

• Search and retrieval information

• Prompts and other AI inputs

• AI-generated outputs

• Usage and diagnostic information

• Support communications

• Billing or payment information, when applicable

• Integration or API information, when applicable

• Early Access or waitlist information

These categories may not apply in every case, and we do not necessarily collect every category from every user.

Information you provide

We may collect information that you voluntarily provide to us, including:

• Name

• Email address

• Company or organization name

• Job title or role

• Information submitted through forms or communications with us

• Account information

• Information provided when requesting access to lexpad

• Information you provide when contacting our support or business teams

• Information provided through an Early Access or waitlist request

We only request information that is reasonably necessary for the relevant interaction or service.

Information collected automatically

When you access our website or services, certain technical information may be collected automatically, such as:

• IP address

• Browser type and version

• Device information

• Operating system

• Pages or features accessed

• Approximate usage information

• Date and time of interactions

• Technical logs and diagnostic information

We use this information to operate, secure, maintain, troubleshoot, and support our services.

2. How We Use Information

We may use information we collect to:

• Provide and operate lexpad.

• Create and manage accounts.

• Provide requested features and functionality.

• Process requests for Early Access, demonstrations, pilots, or other services.

• Communicate with users and organizations.

• Provide customer support.

• Operate, maintain, troubleshoot, and support the platform.

• Understand service usage for operational purposes.

• Detect, investigate, and prevent fraud, abuse, security incidents, and other unauthorized activity.

• Maintain the security and integrity of our systems.

• Comply with applicable legal obligations.

• Establish, exercise, or defend legal claims.

• Perform other purposes disclosed at the time information is collected.

We do not use User Content, prompts, context, or AI-generated outputs for training or fine-tuning Lexpad AI models. We do not use User Content for generalized AI model improvement.

We do not use personal information for purposes materially incompatible with those described in this Privacy Policy without providing additional notice where required by applicable law.

3. User Content and Documents

lexpad allows users and organizations to upload or otherwise submit documents, files, information, and other content to a workspace.

User Content may include confidential business information, legal documents, contracts, policies, regulatory materials, internal company information, knowledge bases, or personal information contained within documents.

For purposes of this Privacy Policy, User Content may include documents, files, knowledge bases, metadata, embeddings, vector representations, indexes, and other content provided or generated within a workspace.

Depending on the functionality used, User Content may move through the following conceptual flow:

User Content → storage → indexing or embeddings → retrieval or search → AI-assisted processing → workspace functionality.

Lexpad processes User Content as necessary to provide the functionality requested by the user or organization. Users and organizations remain responsible for ensuring that they have the appropriate rights, permissions, and authority to provide the information.

Organizations using lexpad may control or administer user accounts and workspace content. In those circumstances, the organization may determine how information is managed within its account and may provide instructions to users.

Users should not submit information to lexpad unless they are authorized to do so.

4. AI and Automated Processing

lexpad uses artificial intelligence and machine-learning technologies to provide features such as research assistance, document analysis, drafting, retrieval, summarization, and other forms of legal and compliance workflow support.

For certain AI functionalities, Lexpad uses AI services provided by Anthropic, including Claude. User Content, prompts, context, and other AI inputs may be transmitted to those services when necessary to provide the functionality requested by the user or organization.

AI session data means prompts, context, and AI-generated outputs used to provide AI functionality during the applicable session or workspace interaction. AI session data is distinct from User Content, although a user or organization may choose to save generated material or other information within a workspace.

Lexpad does not use User Content to train its AI models.

Lexpad does not use User Content to fine-tune AI models.

Prompts and outputs are not used by Lexpad for model training or fine-tuning.

AI processing is performed to provide the requested functionality. AI-generated outputs may contain errors, omissions, inaccuracies, outdated information, or incomplete analysis. Users should review outputs before relying on them.

We do not represent that AI-generated content is a substitute for professional legal advice or independent professional judgment.

Model or provider behavior may change over time. We do not make additional claims about the retention, use, or processing practices of a third-party AI provider beyond the arrangements applicable to the relevant service.

Lexpad does not have routine human access to customer content as part of the normal operation of the service. Nothing in this statement should be understood as an absolute guarantee that human access can never occur. Access may be considered where reasonably necessary to comply with law, address a security incident, provide support, or investigate abuse, subject to applicable requirements and controls.

5. How We Share Information

We may share information in the following circumstances:

Service providers

We may share information with vendors and service providers that help us operate the website or services, such as cloud infrastructure, AI services, hosting, analytics, communications, authentication, security, customer support, integration, API, and technology providers, when applicable.

Anthropic and Claude may process information when necessary to provide requested AI functionality. We do not make additional claims about a provider’s practices beyond the arrangements applicable to the relevant service.

These providers may access information only as reasonably necessary to perform services on our behalf and subject to applicable contractual arrangements.

Business transactions

Information may be disclosed as part of a merger, acquisition, financing, reorganization, sale of assets, or similar corporate transaction, subject to applicable law.

Legal requirements

We may disclose information when we reasonably believe disclosure is necessary to:

• Comply with applicable law or legal process.

• Respond to lawful requests from governmental authorities.

• Protect the rights, property, or safety of lexpad, our users, or others.

• Detect or investigate fraud, security incidents, or abuse.

• Enforce our agreements.

With your direction

We may disclose information when you direct us to do so or otherwise provide consent where required.

We do not sell personal information for monetary consideration.

6. Data Security

We use reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, disclosure, alteration, or destruction.

However, no method of transmitting or storing information can be guaranteed to be completely secure.

The security measures applicable to a particular customer or organization may also be governed by contractual agreements between that customer and lexpad.

Users are responsible for maintaining appropriate credentials and access controls for their accounts.

7. Data Retention and Deletion

Users and organizations can determine when to delete User Content within the applicable workspace, subject to the functionality and controls available to them.

Deletion may be subject to reasonable technical processes, including processing time, backups, security requirements, legal obligations, dispute resolution, or enforcement of agreements. We do not state that all copies of information are deleted immediately when a user closes a session or stops using the service.

AI session data is handled separately from User Content and may be retained for as long as reasonably necessary to provide the requested functionality, maintain security, troubleshoot, provide support, comply with law, or protect our legitimate operational interests.

Where an organization controls a lexpad workspace, retention and deletion of User Content may also be governed by the organization’s settings or agreement with lexpad.

8. International Data Transfers and Data Location

Lexpad’s production data is stored and processed in the United States.

Lexpad may use service providers that operate in multiple countries or that may access information from outside the United States, where applicable. As a result, information may be accessed or processed in a country other than the country in which you reside.

Where required by applicable law, we will use appropriate arrangements for international processing and transfers of personal information. The specific arrangements may depend on the type of information, the service provider, and the applicable contractual relationship.

9. Your Privacy Rights

Depending on where you live and the laws that apply to you, you may have certain rights regarding your personal information.

These rights may include, where applicable:

• Requesting access to personal information we hold about you.

• Requesting correction of inaccurate information.

• Requesting deletion of certain information.

• Requesting information about how your personal information is used or disclosed.

• Objecting to or restricting certain processing.

• Requesting portability of certain information.

• Withdrawing consent where processing is based on consent.

• Exercising other rights provided by applicable law.

To exercise applicable rights, contact us using the information provided below.

We may need to verify your identity before processing certain requests.

If you use lexpad through an organization, some privacy requests may need to be directed to that organization because it may control the relevant information.

10. Cookies and Similar Technologies

Our website may use cookies and similar technologies to operate the website, understand usage, maintain security, and support functionality.

Cookies may allow us to remember preferences, understand interactions with our website, and support certain functionality.

You may be able to control cookies through your browser settings.

Disabling certain cookies may affect the functionality of parts of the website.

The technologies used may vary over time. We do not identify specific analytics, advertising, or other providers in this Privacy Policy unless those providers are confirmed for the applicable service.

11. Children’s Privacy

lexpad is intended for business and professional use and is not directed to children.

We do not knowingly collect personal information from children in circumstances where such collection is prohibited by applicable law.

If you believe that a child has provided personal information to us in violation of applicable law, please contact us so that we can take appropriate action.

12. Third-Party Websites and Services

Our website or services may contain links to third-party websites, applications, or services.

We are not responsible for the privacy practices of third parties.

We encourage users to review the privacy policies of third-party services before providing them with personal information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

When we make changes, we will update the “Last updated” date at the top of this Privacy Policy.

If we make material changes, we may provide additional notice where required by applicable law.

Your continued use of the website or services after an updated Privacy Policy becomes effective constitutes acceptance of the updated policy to the extent permitted by applicable law.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise applicable privacy rights, please contact us at:

Email: privacy@lexpad.ai

Company: Lexpad LLC

Address:
16192 Coastal Highway
Lewes, Delaware 19958
County of Sussex
United States