Privacy Policy

We collect only the information needed to provide, secure, bill for, and improve the service.

• Account information: name, email address, organization details, professional credentials, licensing information, and billing details.
• Service data: legal documents, matter information, AI interactions, queries, feature preferences, and support communications.
• Technical data: IP address, approximate location, device and browser information, cookies, session records, authentication logs, and performance data.
• Public-law research data: public statutes, regulations, judgments, and other non-confidential legal sources may be analyzed to improve research quality. Private client documents and privileged matter content are not used for public-law model training without explicit authorization.

We use personal information to provide AI-assisted legal workflows, process documents, administer accounts, deliver support, prevent fraud, monitor security, meet legal obligations, and improve performance.

Where GDPR applies, processing relies on performance of a contract, compliance with legal obligations, consent where required, and legitimate interests that do not override your rights.

• Provide and personalize the AiLex service.
• Authenticate users and protect tenant data.
• Process subscriptions, payments, and service communications.
• Diagnose faults, measure reliability, and improve features.
• Respond to lawful requests and enforce platform terms.

We do not sell personal information. We disclose it only when necessary to operate the service or when the law requires it.

• Service providers bound by confidentiality and data-processing obligations.
• Courts, regulators, or public authorities when disclosure is legally required.
• A successor entity during a merger, acquisition, financing, or sale, subject to continued protection.
• Other parties when you give explicit authorization.

AiLex uses layered administrative, technical, and organizational safeguards. No system is completely secure, but we maintain incident-response and notification procedures.

We retain information only for as long as necessary for the purposes described here, contractual commitments, professional obligations, dispute handling, and applicable law.

• Encryption in transit and at rest.
• Role-based access controls and multi-factor authentication.
• Audit logging, monitoring, security testing, and staff training.
• SOC 2 Type II-aligned controls and vendor reviews.

Depending on your location, you may request access, correction, deletion, restriction, portability, or an objection to processing. You may also withdraw consent where consent is the legal basis.

Submit a request to privacy@ailexlaw.com. We may verify your identity before acting and will respond within the period required by applicable law.

• GDPR rights include access, rectification, erasure, restriction, portability, objection, and safeguards for automated decision-making.
• CCPA rights include knowing, correcting, and deleting covered personal information, opting out where applicable, and freedom from discrimination for exercising privacy rights.

Essential cookies support authentication, security, and core functionality. Optional analytics, preference, and marketing cookies are used only according to your choices and applicable law.

You can change optional-cookie choices on the Cookie Policy page or through your browser settings. Blocking essential cookies may prevent parts of the service from working.

When personal information crosses borders, AiLex uses lawful safeguards such as adequacy decisions, Standard Contractual Clauses (SCCs), and data-processing agreements.

For EU users, the data controller is AiLex Europe BVBA, Belgium, and the relevant supervisory authority is the Belgian Data Protection Authority. For US users, the data controller is AiLex Inc., USA, subject to applicable federal and state privacy law.