How LexFab AI Labs LLP collects, protects, and processes your data — and the terms that govern your use of our platform.
Welcome to LexFab (“LexFab”, “we”, “our”, or “us”). We value the trust our customers place in us, and recognise that the information entrusted to our Platform often includes highly confidential legal, business, and personal information.
This Privacy Policy explains how LexFab AI Labs LLP collects, uses, stores, processes, shares, transfers, protects, and retains personal information when you access or use our websites, web applications, mobile applications, desktop applications, artificial intelligence features, APIs, integrations, and related services (collectively, the “Platform” or “Services”).
It also explains your privacy rights, the choices available to you, and how you may contact us regarding your personal information. By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy.
This Privacy Policy should be read together with our:
Where a separate written agreement between you and LexFab contains different privacy obligations, that agreement shall prevail to the extent of any inconsistency.
Each of these documents addresses a different aspect of your use of the Platform; together they form the complete framework governing our Services.
At LexFab, privacy, confidentiality, and security are fundamental principles of our Platform. Because we build software for advocates, law firms, and legal teams, we recognise that protecting Customer Data is essential to maintaining the trust placed in us.
Accordingly, we are committed to the following principles:
These commitments guide how we design, operate, and continuously improve the Platform.
This Privacy Policy applies to personal information that LexFab collects or processes when you:
It applies to individual users, advocates, law firms, legal departments, organisations, Authorised Users, prospective customers, and visitors to our website.
This Privacy Policy does not apply to:
Customers remain responsible for complying with applicable privacy and confidentiality obligations in relation to the personal information they collect, upload, or otherwise process using the Platform.
LexFab acts in two distinct roles, and the difference determines how information is handled and who you should approach to exercise rights:
If you are a client of a firm that uses LexFab and wish to exercise rights over your personal information, please contact that firm directly. Our processing of Customer Data on behalf of Organisations is governed by our Data Processing Addendum.
The Platform is operated by:
LexFab AI Labs LLP
For privacy-related questions, requests, or complaints, you may contact us using the details provided in the Contact us section of this Privacy Policy.
Unless otherwise defined here, capitalised terms have the meanings assigned to them in the Terms of Service. For the purposes of this Privacy Policy:
The information we collect depends on how you interact with the Platform, the features you use, and the information you choose to provide. We collect information directly from you, automatically through your use of the Platform, and, in limited circumstances, from third-party sources.
When you create an Account, subscribe to the Platform, invite team members, use our Services, or communicate with us, you may provide us with personal information, including:
Account information — used to create and administer your Account, authenticate your identity, communicate with you, and provide access to the Platform:
Organisation information — if you create or administer an Organisation Workspace, we may collect:
Organisation Administrators are responsible for ensuring that the information they provide about Authorised Users is accurate, and that they have appropriate authority to provide it.
Billing information — when you subscribe to paid Services, we may collect:
Payment card details and other sensitive payment credentials are generally processed directly by our payment service providers and are not stored by LexFab, except where necessary for payment reconciliation or as otherwise permitted by Applicable Law.
The Platform enables Customers to upload, create, store, organise, process, and manage a wide variety of information in connection with their legal practice. Depending on how the Platform is used, Customer Data may include:
Customer Data is processed solely to provide the Services requested by the Customer, subject to this Privacy Policy, our Terms of Service, and Applicable Law.
When you access or use the Platform, certain technical and usage information is collected automatically to help us operate, secure, maintain, and improve the Platform. Such information may include:
This information helps us maintain the security, reliability, and performance of the Platform, detect abuse or unauthorised access, troubleshoot technical issues, and improve the user experience.
When you use AI Features, we process the information you submit in order to generate the requested functionality. This may include:
To provide AI-powered functionality, Customer Inputs — including entire uploaded documents where necessary — may be transmitted to one or more third-party AI providers selected by LexFab.
AI conversations and AI Output may be stored within your Workspace to provide conversation history, enable future reference, improve continuity of your work, and support Platform functionality.
Where supported by the applicable AI provider, LexFab requests that Customer Data and Customer Inputs are not used to train public AI models without your explicit consent. The data handling practices of third-party AI providers remain subject to their respective terms and privacy policies.
When you contact us, request support, submit feedback, participate in surveys, or otherwise communicate with LexFab, we may collect:
We use this information to respond to your requests, improve our Services, investigate issues, and maintain records of customer interactions.
We use cookies and similar technologies to operate, secure, personalise, and improve the Platform. These may include:
Today we use essential Cookies, together with analytics Cookies where these are enabled. We do not currently operate a cookie preference centre — you can manage Cookies through your browser settings. If we introduce non-essential Cookies that require your consent, we will ask for it before they are placed.
In limited circumstances, we may receive information from third-party sources, including:
Where we receive information from third parties, we process it in accordance with this Privacy Policy and Applicable Law.
Legal work frequently involves information that is sensitive by nature. Customer Data uploaded to the Platform may include health information, financial information, information relating to criminal proceedings or convictions, information about religion, caste, or community, information concerning children, and other categories treated as sensitive under Applicable Law.
LexFab does not request or require such information. It is uploaded at the Customer’s discretion as part of their legal work. Where it is present in Customer Data, we apply the same confidentiality, access-control, and security measures described in this Privacy Policy, and process it only to provide the Services.
Customers are responsible for ensuring they have the authority to upload such information, and for complying with the professional, ethical, and legal obligations that apply to it.
LexFab uses Personal Information and Customer Data only for legitimate business purposes related to providing, maintaining, securing, improving, and supporting the Platform. We use different categories of information for different purposes, depending on how you interact with the Platform and the Services you use.
We use your information to provide and operate the Services you request, including to:
Where you choose to use AI Features, we use Customer Inputs and relevant Customer Data to:
AI processing is performed solely to provide the functionality requested by the Customer, and is described further in the AI processing and artificial intelligence features section of this Privacy Policy.
We use information to:
Where possible, we use aggregated or de-identified information for product improvement and analytics.
We use information to help protect the Platform, our Customers, and third parties by:
We use your information to communicate with you regarding:
These communications are generally necessary for the operation of the Platform.
Where required by Applicable Law, we will obtain your consent before sending promotional or marketing communications. You may opt out of marketing communications at any time using the unsubscribe mechanism included in such communications, or by updating your communication preferences.
Where applicable, we use billing information to:
Payment information is processed through authorised payment service providers.
We may process information where necessary to:
When you request assistance, we may process information necessary to:
Access to Customer Data by authorised personnel is limited to situations where such access is reasonably necessary to provide support, maintain the Platform, ensure security, or comply with legal obligations.
We may generate aggregated or de-identified information for purposes such as:
Aggregated or de-identified information does not identify individual Customers or disclose Customer Data.
We process Personal Information only where we have a proper basis for doing so. Depending on the information and the Applicable Law, we rely on:
Where we rely on your consent, you may withdraw it as described in section 13.5. Where we rely on legitimate interests, you may object as described in section 13.6.
To reinforce our commitment to protecting the confidentiality of Customer Data, LexFab does not:
Artificial intelligence (“AI”) is an integral part of the Platform and is used to provide productivity and workflow assistance to legal professionals. This section explains how LexFab processes information when you use AI Features, and the safeguards we apply to protect your information.
Depending on your subscription plan and the features you choose to use, AI Features may include:
AI Features are intended to assist legal professionals and improve productivity. They are not intended to replace independent professional judgment.
When you choose to use AI Features, LexFab may process information that you submit, including:
Depending on the functionality requested, this may include processing entire uploaded documents where necessary to provide the requested AI functionality.
AI processing occurs only when you actively use AI Features, or where AI functionality has been enabled as part of a workflow initiated by you or your Organisation.
To provide AI-powered functionality, LexFab may use one or more third-party AI providers, self-hosted models, or other machine learning technologies. The providers and technologies used may change over time as LexFab continues to improve the quality, performance, accuracy, availability, and cost-effectiveness of its Services.
Where AI processing is performed using third-party providers:
LexFab respects the confidentiality of Customer Data. Accordingly:
Nothing in this section prevents LexFab from using anonymised, aggregated, or de-identified information that does not identify any individual or Customer for product improvement, analytics, or operational purposes.
AI-generated content is produced automatically using machine learning technologies and may not always be accurate, complete, current, or suitable for your intended purpose. Accordingly:
LexFab does not guarantee the accuracy or suitability of AI Output.
AI Features are assistive. They do not make automated decisions producing legal or similarly significant effects concerning individuals; a qualified legal professional remains in the loop for any decision that matters.
To improve usability and enable continuity of your work, LexFab may retain AI conversation history, prompts, Customer Inputs, and AI Output within your Workspace. This enables features such as:
The retention of AI conversations is subject to the data retention practices described in this Privacy Policy.
LexFab employees do not routinely access AI conversations, prompts, or AI-generated content. Access to AI-related Customer Data is limited to authorised personnel, and only where reasonably necessary to:
Such access is subject to appropriate internal authorisation procedures and confidentiality obligations.
Customers are responsible for determining whether and how to use AI Features. When using AI Features, Customers should:
Nothing in this Privacy Policy alters the Customer’s professional responsibilities when providing legal services.
LexFab continuously develops and improves its AI capabilities. Accordingly, AI Features may evolve over time, including through:
LexFab may update AI technologies from time to time without prior notice where reasonably necessary to maintain or improve the Platform.
LexFab believes AI should enhance — not replace — the expertise and professional judgment of legal professionals. Our approach to AI is guided by the following principles:
LexFab is headquartered in India, but the technology and service providers that support the Platform may operate in multiple countries. As a result, Personal Information and Customer Data may be transferred to, stored in, or processed in jurisdictions outside the country in which you are located.
These transfers occur only where reasonably necessary to provide the Services requested by you, operate the Platform, or support our business operations.
Depending on the Services you use, Personal Information or Customer Data may be transferred internationally for purposes including:
The countries involved may change over time as we enhance or modify our infrastructure and service providers.
Where Personal Information or Customer Data is transferred internationally, LexFab takes reasonable steps to ensure appropriate safeguards are in place. These may include:
While we strive to maintain appropriate safeguards, no method of electronic transmission or storage can be guaranteed to be completely secure.
Certain AI Features may require Customer Inputs or relevant Customer Data to be processed by AI providers located outside India. Where this occurs:
Further detail is provided in the AI processing and artificial intelligence features section of this Privacy Policy.
LexFab processes international transfers in accordance with applicable privacy and data protection laws. Where required by Applicable Law, we will implement additional measures to facilitate lawful international transfers of Personal Information.
If future laws or regulations impose additional requirements regarding cross-border data transfers, LexFab may update its practices and this Privacy Policy accordingly.
Customers are responsible for ensuring that their use of the Platform complies with any legal, regulatory, professional, or contractual obligations applicable to the information they upload or process through the Services.
Where a Customer is subject to specific data residency or cross-border transfer requirements, the Customer is responsible for determining whether the Platform is suitable for their intended use, and for configuring available settings appropriately.
As our business and technology evolve, LexFab may change its cloud infrastructure, data storage architecture, AI providers, or other service providers. Such changes may result in Personal Information or Customer Data being processed in different jurisdictions, provided that such processing remains consistent with this Privacy Policy and Applicable Law.
LexFab retains Personal Information and Customer Data only for as long as reasonably necessary to provide the Services, comply with legal obligations, resolve disputes, enforce our agreements, protect the security and integrity of the Platform, and fulfil the purposes described in this Privacy Policy.
The length of time we retain information depends on the type of information involved, the Services used, applicable legal requirements, and our legitimate business needs. When information is no longer required, we take reasonable steps to securely delete, anonymise, or otherwise dispose of it in accordance with our internal retention practices.
We retain Account information for as long as your Account remains active. If your Account is closed or terminated, we may retain certain Account information for up to 12 months to:
After the applicable retention period, Account information will be securely deleted or anonymised, unless a longer retention period is required or permitted by law.
Customer Data remains under the control of the Customer. Subject to this Privacy Policy, our Terms of Service, and Applicable Law, Customer Data is generally retained while your subscription remains active.
Following termination or expiration of your subscription, Customer Data may be retained for 30 days to allow Customers an opportunity to restore or export their information, unless:
After the applicable retention period, Customer Data will be securely deleted from active systems, subject to the backup retention described below.
AI conversation history, prompts, Customer Inputs, and AI Output are Customer Data. While your subscription remains active, they may be retained for 12 to 24 months, depending on the Services used and the configuration of your Workspace. Following termination or expiration of your subscription, they are deleted in accordance with section 11.2. This information is retained to:
Retention of AI-related information is subject to applicable legal obligations and any deletion requests processed in accordance with this Privacy Policy.
Voice recordings, transcriptions, and related AI-generated content are retained until:
Customers remain responsible for managing voice recordings stored within their Workspace.
Invoices, billing records, payment history, tax documentation, and related financial records may be retained for up to 8 years, or such longer period as may be required by applicable tax, accounting, or other legal obligations.
Customer support requests, communications, attachments, diagnostic information, and related support records may be retained for up to 2 years following resolution of the support request. These records help us:
Security logs, authentication records, audit trails, system logs, and related operational records may be retained for 12 to 24 months. These records are maintained to:
Backup copies of Personal Information and Customer Data are maintained for disaster recovery and business continuity purposes. Backups may be retained for 90 to 180 days before being automatically overwritten or securely deleted in accordance with our backup lifecycle procedures.
Because backups are maintained for disaster recovery, information deleted from active systems may remain in backup media until those backups expire or are replaced through normal rotation.
Notwithstanding the retention periods described above, LexFab may retain certain information for a longer period where reasonably necessary to:
Where such circumstances apply, the affected information will be retained only for as long as reasonably necessary for the applicable purpose.
When applicable retention periods expire, LexFab takes reasonable steps to securely delete, anonymise, or otherwise render information permanently inaccessible. Deletion may occur in stages as information is removed from:
While we strive to complete deletion promptly, complete removal from all systems may require a reasonable period consistent with our operational and backup procedures.
Customers are responsible for exporting or retrieving any Customer Data they wish to retain before terminating their subscription or requesting permanent deletion of their Account. Once Customer Data has been permanently deleted in accordance with this Privacy Policy and our internal retention practices, it may no longer be recoverable.
Protecting the confidentiality, integrity, and availability of Personal Information and Customer Data is a core part of how LexFab designs, operates, and maintains the Platform. We implement and continually review technical, organisational, and administrative safeguards designed to protect information against unauthorised access, disclosure, alteration, loss, misuse, or destruction.
While we strive to maintain a secure Platform, no method of transmitting information over the internet or storing information electronically can be guaranteed to be completely secure. Accordingly, we cannot guarantee absolute security.
LexFab maintains a security programme designed to protect Personal Information and Customer Data throughout its lifecycle. Depending on the nature of the information and the Services used, our measures may include:
Our security practices evolve over time as technology, threats, and regulatory requirements change. Further detail is available on our Security page.
Access to Personal Information and Customer Data is restricted to authorised personnel who require such access to perform their job responsibilities. Access is granted in accordance with the principle of least privilege, and is subject to appropriate authentication and internal authorisation procedures.
Personnel with access to Customer Data are subject to confidentiality obligations and are expected to handle information in accordance with our internal security policies.
Security is a shared responsibility between LexFab and our Customers. Customers are responsible for:
Customers are also responsible for ensuring that information uploaded to the Platform may lawfully be processed using the Services.
Where an Organisation maintains a shared Workspace, Organisation Administrators are responsible for managing user access, permissions, and Workspace settings. LexFab processes access requests based on the permissions configured by the Organisation.
Organisation Administrators should periodically review user permissions to ensure that access remains appropriate and is limited to Authorised Users with a legitimate business need.
LexFab maintains processes designed to detect, investigate, respond to, and mitigate security incidents affecting the Platform. Where appropriate, these processes may include:
Where required by Applicable Law, LexFab will notify affected Customers or relevant authorities of reportable security incidents within the timeframes prescribed by law.
LexFab maintains backup and recovery processes designed to support the availability and resilience of the Platform. These measures are intended to:
The existence of backups does not guarantee recovery of all information under every circumstance.
Certain aspects of the Platform rely on third-party service providers, including cloud infrastructure, payment processors, artificial intelligence providers, communication services, and other technology partners. While LexFab carefully selects providers that support our operational and security objectives, each provider maintains its own security practices.
Where appropriate, LexFab requires such providers to implement reasonable safeguards for the protection of Personal Information and Customer Data.
Security is an ongoing process. LexFab continually evaluates and improves its security practices by:
If you believe your Account has been compromised, become aware of unauthorised access, or identify a potential security vulnerability affecting the Platform, you should notify LexFab as soon as reasonably possible using the contact details provided in this Privacy Policy. Prompt reporting helps us investigate potential issues, reduce risks, and protect the security of the Platform and its users.
Although LexFab uses reasonable measures designed to protect Personal Information and Customer Data, no security programme can eliminate every risk. Customers acknowledge that:
Accordingly, while LexFab works to maintain appropriate safeguards, we cannot guarantee that unauthorised access, cyberattacks, security incidents, or other events will never occur.
LexFab believes that individuals should have meaningful control over their Personal Information. Subject to Applicable Law and the nature of the Services you use, you may exercise the privacy rights described below.
Certain rights may vary depending on your jurisdiction, the role in which you use the Platform (for example, as an individual user or as part of an Organisation), and applicable legal or contractual requirements.
You may request access to the Personal Information that LexFab processes about you. In many cases, you can access and review much of it directly through your Account, including your profile information, Workspace settings, subscription details, and other information associated with your use of the Platform.
If you are unable to access certain information through the Platform, you may submit a request using the contact details provided in this Privacy Policy.
You may request that inaccurate, incomplete, or outdated Personal Information be corrected. Most profile information can be updated directly within your Account settings; where information cannot be updated through the Platform, you may contact LexFab for assistance.
Keeping your information accurate helps us provide the Services effectively and maintain the security of your Account.
Subject to Applicable Law, you may request deletion of your Personal Information or Customer Data. Upon receiving a valid request, LexFab will take reasonable steps to delete or anonymise the requested information, unless retention is necessary to:
Deletion requests are also subject to our data retention practices and backup procedures described in this Privacy Policy.
Where supported by the Platform, you may export or download certain Personal Information and Customer Data associated with your Account. This functionality is intended to help Customers maintain control over their information and facilitate migration to other systems where appropriate.
The availability and format of exported information may depend on the type of data involved and the features available under your subscription plan.
Where LexFab relies on your consent to process Personal Information, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
Withdrawing consent for certain types of processing may affect your ability to use some features of the Platform, where such processing is necessary to provide the requested functionality.
Where permitted by Applicable Law, you may object to or request restrictions on certain processing activities. LexFab will consider such requests in accordance with applicable legal requirements and the legitimate interests necessary to operate the Platform.
In some cases, restricting certain processing activities may limit the availability or functionality of the Services.
Under the Digital Personal Data Protection Act, 2023, you may nominate another individual to exercise your rights under that Act on your behalf in the event of your death or incapacity. You may register or update a nomination by contacting us using the details in the Contact us section.
LexFab is committed to transparency regarding the use of artificial intelligence. You may request information regarding:
While we strive to provide meaningful transparency, we may be unable to disclose information that would reveal confidential information, proprietary technologies, trade secrets, or information relating to the security of the Platform.
If you receive promotional or marketing communications from LexFab, you may opt out at any time by:
You may continue to receive service-related communications that are necessary for the administration of your Account or the provision of the Services.
If your Account is provided or managed by your employer, law firm, organisation, or other entity, that Organisation may control certain aspects of your Personal Information and Customer Data. In such cases:
Where applicable, LexFab will assist Organisations in responding to privacy requests in accordance with Applicable Law and our contractual obligations.
To exercise any of the rights described in this Privacy Policy, you may contact LexFab using the details provided in the Contact us section.
To protect the security and confidentiality of Personal Information, we may request additional information to verify your identity before processing your request. We will respond within the timeframes required by Applicable Law or, where no specific timeframe applies, within a reasonable period. If we are unable to fulfil your request, we will explain the reasons to the extent permitted by Applicable Law.
If you believe that LexFab has processed your Personal Information in a manner inconsistent with applicable privacy laws or this Privacy Policy, you may contact us using the details provided below. We encourage you to contact us first, so that we have an opportunity to understand and address your concerns.
Where Applicable Law provides the right to do so, you may also lodge a complaint with the relevant regulatory or supervisory authority responsible for data protection matters. In India, that authority is the Data Protection Board of India.
The Platform is intended for use by advocates, law firms, legal professionals, corporate legal departments, businesses, and other organisations. It is not directed to, or intended for use by, children.
Individuals must be at least 18 years of age, or the age of legal majority in their jurisdiction (whichever is higher), to create an Account or use the Platform.
LexFab does not knowingly collect Personal Information directly from children, or knowingly permit children to create Accounts or use the Services. If we become aware that Personal Information has been collected directly from a child in violation of Applicable Law or this Privacy Policy, we will take reasonable steps to delete such information as soon as reasonably practicable, unless retention is required by Applicable Law.
If you believe that a child has provided Personal Information through the Platform, please contact us using the details provided in this Privacy Policy so that we can investigate and take appropriate action. Parents, legal guardians, and other concerned individuals are encouraged to contact us promptly.
The Platform may contain links to third-party websites, applications, products, or services, or may enable you to connect the Platform with third-party services through supported integrations. These services are provided and operated independently of LexFab, and are subject to their own terms, privacy policies, and security practices.
This Privacy Policy applies only to the processing of Personal Information by LexFab, and does not govern the privacy practices of independent third parties.
To provide and enhance the Services, LexFab may support integrations with third-party providers, including services relating to:
The information shared with a third-party integration depends on:
LexFab shares information with third-party integrations only to the extent reasonably necessary to provide the requested functionality.
Our website or Platform may include links to third-party websites for your convenience or reference. If you choose to visit a third-party website, your interaction with it is governed solely by that website’s own terms, privacy policy, and security practices.
LexFab is not responsible for the content, availability, or privacy practices of third-party websites we do not own or control. We encourage you to review the privacy policy of any third-party website before providing Personal Information.
LexFab relies on trusted third-party service providers to support the operation of the Platform. These providers may assist with services such as:
These providers process Personal Information and Customer Data only as necessary to perform services on LexFab’s behalf, and are subject to contractual, technical, and organisational safeguards intended to protect such information. Further detail is provided in the When and how we share information section of this Privacy Policy.
Certain AI Features rely on third-party AI providers or other machine learning technologies. When you choose to use AI Features, Customer Inputs and relevant Customer Data may be processed by these providers solely to generate the requested AI functionality.
Further detail regarding AI processing, AI providers, and the safeguards applied by LexFab is set out in the AI processing and artificial intelligence features section of this Privacy Policy.
Customers are responsible for evaluating whether third-party services, integrations, or external websites are appropriate for their intended use. Before enabling an integration or sharing information with a third-party service, Customers should review the applicable terms, privacy policy, and security practices of that provider.
LexFab is not responsible for:
As the Platform evolves, LexFab may add, replace, or discontinue third-party service providers or integrations to improve the quality, security, functionality, reliability, or efficiency of the Services. Such changes do not alter LexFab’s commitment to process Personal Information in accordance with this Privacy Policy.
Where required by Applicable Law or contractual obligations, LexFab will provide appropriate notice regarding material changes affecting the processing of Personal Information.
LexFab may update this Privacy Policy from time to time to reflect changes in our Services, technology, business operations, legal or regulatory requirements, industry practices, or other operational needs. When we make changes, we will update the effective date shown at the top of this Privacy Policy.
If we make changes that materially affect how we collect, use, disclose, or otherwise process Personal Information, we will take reasonable steps to notify affected Customers before or when the changes become effective. Depending on the nature of the changes, notification may be provided through one or more of the following:
Where required by Applicable Law, we will obtain any necessary consent before implementing changes that require it.
We may make non-material or administrative updates to this Privacy Policy without providing individual notice. Such updates may include:
These changes become effective when the updated Privacy Policy is published, unless otherwise required by Applicable Law.
We encourage you to review this Privacy Policy periodically to remain informed about how LexFab processes and protects Personal Information.
Your continued access to or use of the Platform after the effective date of an updated Privacy Policy constitutes your acknowledgment of the revised Privacy Policy, to the extent permitted by Applicable Law. Where Applicable Law requires your consent for particular changes, LexFab will obtain that consent before those changes take effect.
For transparency and record-keeping purposes, LexFab may maintain prior versions of this Privacy Policy. Previous versions may be made available on request, or through our website where appropriate.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way LexFab processes Personal Information, please contact us using the details below. We welcome the opportunity to address your questions and will make reasonable efforts to respond in a timely manner.
LexFab AI Labs LLP
Write to contact@lexfab.ai regarding:
Please notify us at contact@lexfab.ai as soon as reasonably practicable if you believe that:
Prompt reporting helps us investigate and take appropriate action.
If you believe that LexFab has not complied with this Privacy Policy or applicable privacy laws, you may submit a complaint using the contact details above. Please include enough information to help us understand your concern, including:
We will acknowledge and review your complaint and respond within a reasonable period, or within any timeframe required by Applicable Law. Where you remain dissatisfied with our response, you may have the right to lodge a complaint with the relevant regulatory or supervisory authority in accordance with Applicable Law.
In accordance with applicable Indian law, the Grievance Officer for the Platform is Nagendra B, reachable at founder@lexfab.ai. We acknowledge grievances within 24 hours and endeavour to resolve them within 15 days of receipt.
Where required by Applicable Law, LexFab will designate an appropriate Data Protection Contact or other responsible individual to address privacy-related matters, and will publish those details on our website.
From time to time, we may update our contact details to reflect changes in our business operations. The most current contact information will always be available on our website and supersedes any outdated details previously published.
These Terms of Service (“Terms”) constitute a legally binding agreement between LexFab AI Labs LLP (“LexFab”, “we”, “our”, or “us”) and the individual or legal entity (“Customer”, “you”, or “your”) that accesses or uses the LexFab platform, websites, mobile applications, desktop applications, application programming interfaces (APIs), artificial intelligence features, and any related products or services we provide (collectively, the “Platform” or “Services”).
By creating an account, accessing, or using the Platform, you acknowledge that you have read, understood, and agree to be bound by these Terms. If you are accepting these Terms on behalf of a law firm, company, organisation, or other legal entity, you represent and warrant that you have the authority to bind that entity to these Terms. In such cases, references to “you” or “Customer” refer to both the individual accepting these Terms and the entity they represent.
If you do not agree to these Terms, you must not access or use the Platform.
LexFab is an AI-powered legal practice management platform designed for advocates, law firms, in-house legal teams, and other authorised legal professionals. The Platform provides tools to help manage legal matters more efficiently, including case management, document management, task management, billing, workflow automation, team collaboration, calendar management, legal research, document drafting, contract analysis, AI-powered assistance, and related productivity features.
The Platform may also integrate with third-party services, including communication platforms, calendars, payment providers, court data sources, and artificial intelligence providers, to enhance functionality and improve the user experience.
LexFab continuously develops, improves, and expands the Platform. As a result, features, functionality, integrations, artificial intelligence capabilities, and supported services may be added, modified, suspended, or discontinued from time to time.
LexFab is a technology platform intended to assist legal professionals in managing their practice and improving operational efficiency. While the Platform includes artificial intelligence capabilities designed to support drafting, legal research, document review, summarisation, workflow automation, and other productivity tasks, LexFab is not a law firm and does not provide legal advice, legal opinions, legal representation, or legal services.
The Platform is intended to assist—not replace—the professional judgment, expertise, and independent decision-making of qualified legal professionals. Customers remain solely responsible for reviewing, verifying, approving, and relying upon any documents, legal research, filings, communications, AI-generated outputs, or other work product produced or assisted by the Platform.
Nothing contained within the Platform should be interpreted as legal advice or as a substitute for professional legal judgment.
These Terms govern your access to and use of the Platform and apply to all users, subscription plans, and Services offered by LexFab unless expressly superseded by a separate written agreement, such as an enterprise subscription agreement or other negotiated contract.
Your use of the Platform is also subject to any additional policies or guidelines that LexFab may publish from time to time, including our:
To the extent of any conflict, the following order of precedence shall apply:
For the purposes of these Terms, the following definitions apply:
Confidential Information means any non-public information disclosed by one party to the other, whether orally, electronically, visually, or in writing, that is designated as confidential or that a reasonable person would understand to be confidential considering the nature of the information and the circumstances of disclosure.
Confidential Information includes, without limitation:
Confidential Information does not include information that:
The Platform is intended for use by legal professionals and individuals associated with the legal profession. You may access or use the Platform only if you:
LexFab reserves the right to refuse registration, suspend access, or terminate Accounts that do not satisfy these eligibility requirements.
Organisations, including law firms, legal departments, and other entities, may create Organisation Accounts that permit multiple Authorised Users to access the Platform under a single subscription.
Each Organisation shall designate one or more Administrators who will have authority to:
Actions performed by an Administrator are deemed to be authorised by the Organisation. The Organisation is responsible for the acts and omissions of its Administrators and Authorised Users.
To access certain features of the Platform, you must register an Account and provide accurate, current, and complete information during the registration process.
You agree to:
LexFab may reject or suspend any registration that contains false, misleading, incomplete, or fraudulent information.
You are responsible for maintaining the confidentiality of your login credentials and for all activities that occur under your Account.
You agree to:
LexFab is not responsible for losses arising from your failure to adequately safeguard your Account credentials or devices.
Organisations may authorise employees, partners, associates, contractors, interns, or other personnel to access the Platform as Authorised Users.
Each Authorised User must:
The Customer remains responsible for ensuring that all Authorised Users comply with these Terms.
The Organisation is solely responsible for:
LexFab is not responsible for disputes between an Organisation and its Authorised Users regarding ownership of data, permissions, or account administration.
Certain features or subscription plans may be available only to verified legal professionals or organisations.
LexFab may, at its discretion:
Failure to provide requested verification may result in suspension or denial of access to the applicable features.
LexFab may temporarily suspend or restrict access to an Account, Workspace, or specific Services if it reasonably believes that:
Where reasonably practicable, LexFab will provide notice of the suspension and an opportunity to remedy the issue before taking action. However, LexFab may suspend access immediately where necessary to protect the Platform, Customers, or third parties.
Customer Accounts are personal to the registered Customer or Organisation and may not be assigned, sold, sublicensed, rented, or otherwise transferred without LexFab’s prior written consent.
This restriction does not prevent an Organisation from adding or removing Authorised Users through the Platform in accordance with these Terms.
Customers may close their Accounts at any time through the Platform or by contacting LexFab.
Account closure does not automatically terminate any outstanding payment obligations, nor does it affect any rights or obligations that, by their nature, survive termination of these Terms.
The handling, retention, recovery, and deletion of Customer Data following account closure is governed by the Data Following Termination section of these Terms.
LexFab offers various subscription plans, which may include free plans, free trials, monthly subscriptions, annual subscriptions, enterprise subscriptions, usage-based services, and other pricing models that may be introduced from time to time.
The features, usage limits, pricing, storage allocations, user limits, AI capabilities, integrations, support levels, and other benefits available under each subscription plan are described on the Platform or in the applicable Order Form or Enterprise Agreement.
LexFab reserves the right to modify, introduce, suspend, or discontinue subscription plans or features at any time. Where such changes materially affect an active paid subscription, LexFab will provide reasonable advance notice where practicable.
LexFab may make certain Services available without charge through free plans, promotional offers, evaluation licences, or free trial periods.
Free plans and trial services are provided solely to allow Customers to evaluate the Platform and are subject to these Terms unless otherwise specified.
Unless expressly stated otherwise:
If a Customer elects to subscribe to a paid plan following a free trial, billing will begin only after the Customer expressly authorises the purchase.
Paid subscriptions commence on the date payment is successfully processed and continue for the selected subscription term unless earlier terminated in accordance with these Terms.
Subscriptions automatically renew at the end of each billing cycle unless:
Enterprise subscriptions may be governed by separate commercial terms agreed between the parties.
The Customer agrees to pay all applicable subscription fees, usage charges, taxes, and other amounts associated with the selected subscription plan.
Unless otherwise stated:
Customers must provide a valid payment method acceptable to LexFab or its authorised payment providers.
LexFab may process payments through one or more third-party payment providers.
The Customer authorises LexFab and its payment providers to charge all applicable Fees to the designated payment method in accordance with the selected subscription.
LexFab does not store complete payment card information unless expressly stated otherwise. Payment processing is performed by third-party payment providers in accordance with their own terms and privacy practices.
Unless the Customer cancels before the end of the current subscription period, recurring subscriptions will automatically renew for successive billing periods of the same duration.
By enabling automatic renewal, the Customer authorises recurring charges using the selected payment method until the subscription is cancelled.
Customers may disable automatic renewal at any time through their Account settings or by contacting LexFab before the next renewal date.
If payment cannot be successfully processed for any reason, including insufficient funds, expired payment methods, payment reversals, or declined transactions, LexFab may:
LexFab is not responsible for interruptions resulting from unsuccessful payment processing.
Customers may upgrade or downgrade their subscription plans where such options are offered by LexFab.
Unless otherwise specified:
Customers may cancel their subscription at any time.
Cancellation prevents future renewals but does not immediately terminate access to the Platform.
Unless otherwise agreed, the Customer will continue to have access to the subscribed Services until the end of the current paid billing period.
Following expiration of the subscription term, access to paid features may be restricted or discontinued.
Except as expressly provided in these Terms or required by Applicable Law, all Fees paid to LexFab are non-refundable.
Without limiting the foregoing:
Nothing in this section limits any non-waivable rights available to Customers under Applicable Law.
LexFab may revise subscription pricing from time to time.
For existing paid subscriptions, revised pricing will generally apply only upon the next renewal term unless otherwise required by Applicable Law or agreed between the parties.
Where practicable, LexFab will provide reasonable advance notice before material pricing changes become effective.
The Customer is responsible for all applicable taxes, duties, levies, or governmental charges arising from the use of the Platform, except taxes imposed on LexFab’s income.
Where required by law, LexFab will collect and remit applicable indirect taxes, including GST.
Enterprise customers may enter into separate commercial agreements governing pricing, payment schedules, procurement requirements, implementation services, onboarding, support commitments, service level agreements, or other negotiated commercial terms.
To the extent of any conflict between these Terms and an executed Enterprise Agreement, the Enterprise Agreement shall prevail solely with respect to the matters expressly addressed therein.
You agree to use the Platform lawfully, in good faith, and in accordance with these Terms, the Documentation, and our Acceptable Use Policy. You are responsible for the conduct of your Authorised Users. You must not, and must not permit any Authorised User or third party to:
LexFab may investigate suspected violations and may suspend or restrict access in accordance with the Term, Suspension and Termination section below.
As between the parties, you retain all right, title, and interest in and to your Customer Data. These Terms do not transfer to LexFab any ownership of Customer Data.
You grant LexFab a limited, non-exclusive, worldwide, royalty-free licence to host, store, process, transmit, display, and otherwise use Customer Data, and to engage its sub-processors and Third-Party Services to do so, solely as necessary to provide, maintain, secure, and support the Services and as instructed by you through the Platform.
You represent and warrant that you have all rights, consents, and authority necessary to upload Customer Data and to authorise its processing under these Terms, and that such processing does not violate Applicable Law or the rights of any third party. You are responsible for the accuracy, quality, and legality of Customer Data and for maintaining your own copies of important records; the Platform is not a system of record.
LexFab’s processing of personal data contained in Customer Data is governed by our Privacy Policy and, where applicable, the Data Processing Addendum.
AI Features generate AI Output in response to Customer Inputs. AI Output is provided to assist you and does not constitute legal advice. As stated in the Nature of the Platform section, LexFab is not a law firm.
AI Output may be inaccurate, incomplete, out of date, or may not reflect the current state of the law. You are solely responsible for independently reviewing, verifying, and exercising professional judgment over any AI Output before relying on it, sending it, filing it, or otherwise acting on it. AI Features may produce different or similar results for different users.
As between the parties, and to the extent permitted by Applicable Law, AI Output generated for you is treated as Customer Data, and you are responsible for its use. LexFab does not use your Customer Data, Customer Inputs, or Confidential Information to train foundation models, and configures its AI providers on zero-retention terms where such terms are available.
AI Features may depend on Third-Party Services, including third-party artificial intelligence models, whose availability, capabilities, and terms may change. LexFab may modify, limit, or discontinue AI Features in accordance with these Terms.
The Platform, the Services, all underlying software, the Documentation, and all related Intellectual Property Rights are and remain the exclusive property of LexFab and its licensors. Except for the limited rights expressly granted in these Terms, no right, title, or interest is granted to you.
Subject to your compliance with these Terms and payment of applicable Fees, LexFab grants you a limited, non-exclusive, non-transferable, non-sublicensable, revocable licence to access and use the Platform for your internal legal-practice purposes during the subscription term.
The LexFab name, logo, and marks may not be used without LexFab’s prior written consent. If you provide suggestions, ideas, or feedback about the Platform, you grant LexFab a perpetual, irrevocable, worldwide, royalty-free licence to use that feedback without restriction or obligation to you.
Each party (as receiving party) may be given access to the other party’s Confidential Information. The receiving party will:
These obligations do not apply to information falling within the exceptions set out in the definition of Confidential Information, and do not prevent a disclosure required by Applicable Law or a lawful order, provided that (where legally permitted) the receiving party gives reasonable prior notice. Customer Data is the Customer’s Confidential Information. The obligations in this section survive termination of these Terms.
The Platform may interoperate with or provide access to Third-Party Services, such as communication platforms, calendars, payment providers, court data sources, and artificial intelligence providers.
Third-Party Services are governed by their own terms and privacy practices. LexFab does not control, endorse, or assume responsibility for any Third-Party Service, and your use of a Third-Party Service is at your own risk and between you and the relevant provider.
Enabling a Third-Party Service may require you to authorise the exchange of Customer Data with that provider. Any such exchange is at your direction. LexFab may suspend or remove an integration if a provider changes, restricts, or discontinues its service, or where continued interoperation would create a security or legal risk.
LexFab may make Beta Features available for evaluation. Beta Features are provided “as is” and “as available”, are excluded from any Service Level Agreement, and may be changed, limited, or withdrawn at any time without liability.
Beta Features may be less reliable than generally available features. You should not rely on Beta Features for live matters, filings, or deadlines, and any such use is at your own risk. LexFab may collect feedback and Usage Data relating to Beta Features to evaluate and improve them.
LexFab aims to make the Platform available with reasonable reliability but does not guarantee that the Platform will be uninterrupted, timely, secure, or error-free, except as expressly set out in an applicable Service Level Agreement.
LexFab may perform scheduled maintenance, and will provide reasonable notice where practicable. Emergency maintenance may be carried out without notice where necessary to protect the security, integrity, or availability of the Platform.
Support is provided in accordance with your Subscription plan and the Documentation. Enterprise support commitments, if any, are set out in the applicable Enterprise Agreement.
These Terms apply from the date you first access or use the Platform and continue until terminated in accordance with this section. Subscription terms and renewals are governed by the Subscription Plans, Billing and Payments section.
You may stop using the Platform at any time, cancel your Subscription as described in section 6.9, or close your Account as described in section 5.10.
LexFab may suspend access as described in section 5.8, and may terminate these Terms or any Subscription:
On termination, your right to access and use the Platform ceases and you must stop using it; any Fees accrued or payable before termination remain due. Any provisions that by their nature are intended to survive termination — including Definitions, Customer data and ownership, Intellectual property, Confidentiality, Disclaimers, Limitation of liability, Indemnification, and Governing law — will survive.
Following termination of these Terms or closure of your Account, and where technically feasible, LexFab will retain your Customer Data for 30 days so that you can restore or export it, unless you request earlier deletion or a different period is required by Applicable Law.
After that period, LexFab will securely delete or anonymise Customer Data from active production systems. Residual copies held in encrypted backups expire through normal backup rotation, within 90 to 180 days, unless a longer retention period is required by Applicable Law or is necessary to resolve a dispute or enforce these Terms.
Where an Account is suspended for non-payment or breach, export access may be limited until the underlying issue is resolved. The full retention and deletion schedule, including backups, audit logs, and financial records, is set out in our Privacy Policy and, where applicable, the Data Processing Addendum.
To the maximum extent permitted by Applicable Law, the Platform, the Services, AI Features, and AI Output are provided “as is” and “as available”, without warranties or conditions of any kind, whether express, implied, or statutory, including any implied warranties of merchantability, fitness for a particular purpose, title, non-infringement, or that the Platform will be uninterrupted, secure, or error-free.
LexFab does not warrant that AI Output is accurate, complete, current, or suitable for any particular matter, and does not provide legal advice. Any reliance on the Platform or AI Output is at your own risk and subject to your independent professional judgment.
Nothing in these Terms excludes or limits any warranty, right, or remedy that cannot be excluded or limited under Applicable Law.
To the maximum extent permitted by Applicable Law, neither party will be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or for any loss of profits, revenue, data, goodwill, or business, arising out of or relating to these Terms or the Platform, even if advised of the possibility of such damages.
To the maximum extent permitted by Applicable Law, LexFab’s total aggregate liability for all claims arising out of or relating to these Terms or the Platform will not exceed the total Fees paid by you to LexFab in the twelve (12) months immediately preceding the event giving rise to the claim. For free plans or trials, LexFab’s aggregate liability will not exceed one thousand Indian Rupees (₹1,000).
LexFab is not liable for any missed deadline, limitation period, filing, hearing, or court date, or for any legal or commercial outcome, arising from your use of, or reliance on, the Platform or AI Output. You remain the responsible legal professional. These limitations do not apply to liability that cannot be excluded or limited under Applicable Law.
You will defend, indemnify, and hold harmless LexFab and its Affiliates, and their respective officers, employees, and agents, from and against any third-party claims, damages, losses, liabilities, costs, and expenses (including reasonable legal fees) arising out of or relating to:
LexFab will defend you against any third-party claim alleging that the Platform, when used in accordance with these Terms (and excluding Customer Data and Third-Party Services), infringes that third party’s Intellectual Property Rights, provided you promptly notify LexFab, allow LexFab to control the defence and settlement, and reasonably cooperate. LexFab may, at its option, modify or replace the affected part of the Platform, or terminate the affected Services and refund any prepaid, unused Fees.
These Terms and any dispute or claim arising out of or in connection with them are governed by the laws of India, without regard to conflict-of-laws principles.
Before commencing formal proceedings, the parties will attempt in good faith to resolve any dispute through discussion for a period of 30 days after written notice of the dispute. Subject to this, the courts at Bengaluru, Karnataka will have exclusive jurisdiction, except that an Enterprise Agreement may specify arbitration or another agreed forum.
Nothing in this section prevents either party from seeking urgent injunctive or equitable relief from a court of competent jurisdiction.
LexFab may update these Terms from time to time to reflect changes to the Platform, our business, or Applicable Law. For material changes, LexFab will provide reasonable notice by email or through the Platform before the changes take effect.
Your continued use of the Platform after the effective date of the updated Terms constitutes acceptance of them. Where required, LexFab may ask you to re-accept the updated Terms. If you do not agree to the updated Terms, you must stop using the Platform and may terminate in accordance with these Terms.
LexFab may give you notices by email, through the Platform, or by posting them within your Account. You may send legal notices to LexFab AI Labs LLP at contact@lexfab.ai and at its registered office at FLAT NO-104, MBR Scapple Apts, BG Road, Gottigere, Karnataka, India, 560083.
In accordance with applicable Indian law, the Grievance Officer for the Platform is Nagendra B, reachable at founder@lexfab.ai. We will acknowledge grievances within 24 hours and endeavour to resolve them within 15 days of receipt.
Contact contact@lexfab.ai.
This Data Processing Addendum (“DPA”) forms part of the Terms of Service between LexFab AI Labs LLP and the Customer, and applies wherever LexFab processes personal data on the Customer’s behalf in providing the Platform.
Where a Customer or Organisation uploads personal data to its Workspace — client details, case parties, opposing parties, witnesses, and similar — that Customer determines the purposes and means of processing and is the Data Fiduciary (controller). LexFab processes that data solely on the Customer’s documented instructions, as the Data Processor.
LexFab is an independent Data Fiduciary for the information it processes to run its own business, including Account, billing, support, and Usage Data. That processing is governed by our Privacy Policy, not by this DPA.
Capitalised terms not defined here have the meanings given in the Terms of Service. “Applicable Data Protection Law” means the Digital Personal Data Protection Act, 2023 and any other privacy or data protection law applicable to the processing.
| Attribute | Detail |
|---|---|
| Subject matter | Provision of the LexFab legal practice management platform and its AI features |
| Duration | The term of the subscription, plus the retention windows set out in section 12 |
| Nature and purpose | Hosting, storage, organisation, retrieval, transmission, analysis, AI processing, and deletion, as directed by the Customer through the Platform |
| Data subjects | The Customer’s advocates and staff, its clients, case parties, opposing parties, witnesses, and other individuals named in Customer Data |
| Categories of data | Contact details, case records, court information, documents and pleadings, communications, notes, billing records, voice recordings and transcriptions, and AI prompts and outputs |
| Sensitive categories | May be present within Customer Data at the Customer’s discretion — including health, financial, criminal-proceedings, and religion or community information — as described in Privacy Policy section 6.8 |
LexFab will:
If LexFab believes an instruction infringes Applicable Data Protection Law, we will inform the Customer without undue delay.
As Data Fiduciary, the Customer:
LexFab treats Customer Data as the Customer’s confidential information. Access is limited to personnel who need it to provide, support, or secure the Services, is granted on a least-privilege basis, and is subject to written confidentiality obligations that survive the end of their engagement.
Personnel receive guidance on handling confidential legal information appropriate to their role.
LexFab implements and maintains technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, and destruction. Those measures are described in our Security Policy, which forms part of this DPA.
Measures may be updated as the Platform and the threat landscape evolve, provided that the overall level of protection is not reduced.
The Customer gives LexFab general authorisation to engage sub-processors in the categories below to help deliver the Platform. Each sub-processor is subject to written terms imposing data protection obligations no less protective than those in this DPA, and LexFab remains responsible for their performance.
| Category | Purpose |
|---|---|
| Cloud infrastructure | Hosting, storage, and backup of the Platform and Customer Data |
| Artificial intelligence providers | Drafting, summarisation, research assistance, and other AI Features |
| Voice and transcription | Processing of voice recordings into text |
| Email and notifications | Delivery of service emails, reminders, and alerts |
| Messaging | WhatsApp and messaging-platform notifications, where enabled |
| Payment processing | Processing of subscription payments and invoicing |
| Analytics and error monitoring | Performance, reliability, and diagnostic monitoring |
| Customer support tooling | Handling and tracking of support requests |
We maintain a current list of named sub-processors, including their processing locations, and provide it on request at contact@lexfab.ai. We will give at least 30 days’ notice before adding or replacing a sub-processor that processes Customer Data. If you reasonably object on data protection grounds within that period, we will work with you in good faith to find an alternative; if none is available, you may terminate the affected Services and receive a refund of any prepaid, unused Fees.
The Platform provides tools that allow the Customer to access, correct, export, and delete Customer Data directly, which in most cases will be sufficient to respond to a request from a data principal.
Where a data principal contacts LexFab directly about data held in a Customer’s Workspace, we will not respond substantively; we will refer them to the Customer and inform the Customer without undue delay. Where the Customer needs further help, LexFab will provide reasonable assistance, taking into account the nature of the processing and the information available to us.
LexFab will notify the Customer without undue delay, and in any event within 72 hours, of becoming aware of a confirmed personal data breach affecting the Customer’s personal data.
The notification will include, to the extent known and as it becomes available: the nature of the breach, the categories and approximate volume of data affected, the likely consequences, and the measures taken or proposed to address it. LexFab will cooperate reasonably with the Customer’s own notification obligations to data principals and to the Data Protection Board of India or other competent authority.
Notification is not an acknowledgement of fault or liability.
LexFab aims to host primary Customer Data on infrastructure located in India. We will confirm the applicable hosting location for your subscription on request, and will record any specific location commitment in writing where a Customer requires one.
Certain processing may take place outside India — in particular AI inference, and some email, messaging, and monitoring services. Where that occurs, LexFab shares only the information reasonably necessary, engages providers under contractual data protection commitments, and requests zero-retention terms where the provider supports them.
If Applicable Data Protection Law restricts transfers to a particular country, LexFab will not knowingly transfer personal data there without an appropriate safeguard or the Customer’s instruction.
On reasonable written request, and no more than once in any 12-month period unless required by a regulator or following a confirmed breach, LexFab will provide the information reasonably necessary to demonstrate compliance with this DPA. This may take the form of a completed security questionnaire, a written description of our controls, or, once available, a third-party assessment report.
Any audit information is Confidential Information. Where an on-site or third-party audit is required by Applicable Data Protection Law, the parties will agree its scope, timing, and cost in advance, and it will be conducted in a manner that does not compromise the security or confidentiality of other customers’ data.
On termination, we retain your data for 30 days so you can restore or export it — or delete it sooner on request — then remove it from production, with backups expiring through normal rotation, within the windows set out in the Privacy Policy, unless retention is required by law.
On written request within the 30-day window, LexFab will provide the Customer’s data in a commonly used machine-readable format where technically feasible.
Each party’s liability under this DPA is subject to the limitations and exclusions in section 18 of the Terms of Service. This DPA does not create a separate or additional liability cap.
In the event of a conflict, this DPA prevails over the Terms of Service and the Privacy Policy in relation to the processing of personal data on the Customer’s behalf. A separately executed data processing agreement between the parties prevails over this DPA.
LexFab may update this DPA to reflect changes in the Platform, our sub-processors, or Applicable Data Protection Law. Material changes will be notified in accordance with section 21 of the Terms of Service, and will not reduce the level of protection provided to Customer Data.
Firms that need a countersigned copy, or the current named sub-processor list, can request one at contact@lexfab.ai.
Legal work demands confidentiality. This policy describes how LexFab protects the case files, documents, and client data entrusted to the Platform — and, just as importantly, what we have not yet done.
This Security Policy explains the technical and organisational measures LexFab applies to protect Customer Data and the Platform. It is referenced by our Privacy Policy and forms part of our Data Processing Addendum.
It covers the LexFab Platform, its supporting infrastructure, and the people who operate it. It does not cover a Customer’s own devices, networks, or internal practices — see section 11 on shared responsibility.
LexFab does not yet hold third-party security certifications. We build to established control frameworks and intend to pursue formal certification as we grow. We describe our current posture honestly rather than claiming credentials we have not earned.
Our obligations to you do not depend on a certificate: the commitments in our Privacy Policy and Data Processing Addendum are contractual and apply today.
Security is owned at founder level. A named individual is accountable for security decisions, incident response, and vendor review, and can be reached at contact@lexfab.ai.
As the team grows, we will formalise this into documented internal policies, defined roles, and periodic review. Everyone with access to production systems is bound by written confidentiality obligations and is briefed on handling confidential legal information.
The Platform is designed around the following controls. Specific implementations evolve as the product matures.
Data is encrypted in transit using industry-standard transport security, and encrypted at rest in our cloud infrastructure.
Role-based permissions inside every Workspace, and least-privilege access for LexFab personnel, granted only where needed.
System and authentication logging, with audit trails over actions taken on a case file, used to investigate and respond to incidents.
Logical isolation between firms, with encrypted backups retained for disaster recovery as described in our Privacy Policy.
External penetration testing is planned as part of our certification-readiness work; we will update this section once it has been completed.
The Platform runs on established cloud infrastructure. We aim to host primary Customer Data on infrastructure located in India, and will confirm the applicable hosting location on request.
Encrypted backups are taken to support recovery from failure or accidental deletion, and expire through normal rotation within the windows set out in Privacy Policy section 11.8. Backups exist for disaster recovery; they are not a substitute for exporting your own records.
We do not offer a contractual uptime commitment at this stage. Availability expectations for enterprise customers can be agreed separately.
We retain system, authentication, and application logs to detect unauthorised access, investigate incidents, and diagnose faults. Workspace activity is recorded so that actions taken on a case file can be traced.
Log retention periods are set out in Privacy Policy section 11.7. Logs are treated as confidential and access is restricted.
Before a provider is given access to Customer Data, we review what it will process, where, on what terms, and what security commitments it offers. Providers are engaged under written terms that impose data protection obligations, and we request zero-retention terms from AI providers where they are supported.
The categories of sub-processor we engage, and how to request the current named list, are set out in the Data Processing Addendum.
We maintain an incident-response process with defined severity levels and escalation paths, covering detection, containment, investigation, recovery, and review.
In the event of a confirmed breach affecting your data, we notify you without undue delay — and within 72 hours where the law or our DPA requires it — with the information you need to meet your own obligations, including notifying the Data Protection Board of India where applicable.
After a significant incident we carry out a review and implement corrective actions.
We welcome responsible disclosure from security researchers. If you believe you have found a vulnerability, please report it privately so we can investigate before any public disclosure. Please do not access, modify, or delete data belonging to others while testing.
We will acknowledge your report, keep you informed, and will not pursue action against researchers who act in good faith and follow this process.
Email contact@lexfab.ai. Firms evaluating LexFab can request our security documentation and a completed security questionnaire under NDA.
We will update this Security Policy as our controls mature — including when certifications, penetration testing, or new security features are in place. Material changes will be notified in accordance with section 21 of the Terms of Service.
This Acceptable Use Policy sets out what you may and may not do with LexFab. It forms part of, and is incorporated into, our Terms of Service — a breach of this policy is a breach of those Terms.
Capitalised terms used here have the meanings given in the Terms of Service. This policy applies to every Customer, Organisation, Administrator, and Authorised User of the Platform.
Because LexFab is used by legal professionals handling confidential client information, this policy reflects both ordinary software-service rules and the professional standards that apply to legal work. Customers are responsible for the conduct of their Authorised Users.
You must not upload, store, generate, or transmit content that:
You must not:
LexFab is not a law firm and does not provide legal advice. When you use the Platform in your practice, you must:
Nothing in the Platform relieves you of your professional obligations, and nothing you produce with it should be presented as originating from LexFab.
When using AI Features, you must not:
You remain the responsible legal professional for everything produced with AI assistance. Our approach to AI processing is described in the Privacy Policy.
You must not:
Security researchers acting in good faith should follow the responsible disclosure process on our Security page.
Subscription plans include limits on users, storage, AI usage, and API calls. You must not circumvent those limits, share seats between individuals, or place an unreasonable load on the Platform that degrades the service for others.
Where usage substantially exceeds normal patterns for your plan, we may contact you, apply rate limits, or require an upgrade before continuing.
You may connect only those third-party services you are authorised to connect, and you must comply with those providers' own terms. Before enabling an integration, satisfy yourself that the exchange of information it involves does not breach your confidentiality, privilege, or professional obligations.
If you become aware of a breach of this policy — including misuse of a Workspace, unauthorised access, or unlawful content — please report it to contact@lexfab.ai with enough detail for us to investigate.
Where we reasonably believe this policy has been breached, we may:
We will give notice and an opportunity to remedy the breach where reasonably practicable, but may act immediately where necessary to protect the Platform, our Customers, or third parties, or where required by Applicable Law. We may report unlawful activity to the relevant authorities where the law requires it.
We may update this Acceptable Use Policy as the Platform evolves or as legal requirements change. Material changes will be notified in accordance with section 21 of the Terms of Service.
Contact contact@lexfab.ai.
You are handing a machine your clients' files. You are entitled to know exactly what happens to them. This policy explains where AI appears in LexFab, who processes what, and what we will never do with your work.
This AI Policy explains how artificial intelligence works within the Platform. It supplements our Privacy Policy (which governs how personal information is processed) and our Terms of Service (which governs your use of AI Features). Capitalised terms have the meanings given in the Terms.
Where this policy and the Privacy Policy describe the same processing, they are intended to be read together; the Privacy Policy remains the binding statement of how we handle personal information.
Depending on your subscription plan, AI Features may include drafting assistance, document summarisation, legal research assistance, contract review, document comparison, voice transcription, conversational assistance, document classification, and workflow automation.
AI Features are allocated by plan. Your plan determines which features are available to you and how much AI usage is included; the current allocation is shown on our pricing page and in your Workspace. Features may be added, changed, or withdrawn as described in section 13.
AI processing only happens when you take a deliberate action — asking for a draft, requesting a summary, running a comparison, starting a transcription, or sending a message to the assistant. LexFab does not scan, summarise, index, or otherwise process your case files with AI in the background.
If you never use an AI Feature, no Customer Data of yours is sent to an AI provider.
Where an Organisation enables a workflow that triggers AI automatically, that automation is configured by the Organisation's Administrator, and the Organisation is responsible for informing its Authorised Users.
We publish the third-party AI providers that process Customer Inputs, so you can assess them yourself and tell your clients who is involved. As at the effective date of this policy, we use or plan to use:
| Provider | Used for | Processing |
|---|---|---|
| Anthropic (Claude) | Drafting, summarisation, research assistance, contract review, conversational assistance | Provider’s API, outside India |
| OpenAI (ChatGPT models) | Drafting, summarisation, research assistance, conversational assistance | Provider’s API, outside India |
| Moonshot AI (Kimi) | Drafting, summarisation and long-document tasks | Provider’s API, outside India |
| LexFab self-hosted models | Classification, extraction and other narrower tasks | LexFab-controlled infrastructure |
Which provider handles a given request depends on the feature and the task. This list will change as we evaluate models on quality, cost, and confidentiality terms — we will keep it current and give notice of changes as described in section 13.
Providers are engaged under written terms that impose confidentiality and data protection obligations, and we request zero-retention terms wherever the provider supports them. Where we process a task on our own self-hosted models, your input does not leave LexFab-controlled infrastructure at all.
Sub-processors across the whole Platform, not just AI, are covered in our Data Processing Addendum.
When you invoke an AI Feature, we send the provider what that feature needs to answer — typically your prompt or instruction, and the document, case details, or recording you selected. For some tasks, such as summarising or reviewing a contract, this means the entire document.
We do not send your whole Workspace, your other matters, or unrelated client files. AI providers receive the input for the task and return an output; they are not given standing access to your data.
LexFab does not use Customer Data, Customer Inputs, or AI Output to train publicly available AI models, and we do not permit our providers to do so, without your explicit consent.
Where a provider offers a zero-retention or no-training configuration, we use it. Where a provider's own terms differ, those terms are disclosed alongside the provider in section 5 so you can make an informed choice.
We may use anonymised or aggregated information that identifies no individual, Customer, or matter to measure and improve how the Platform performs.
AI Output is generated by statistical models. It can be wrong, incomplete, out of date, or entirely fabricated — including citations, case names, and statutory references that look authentic but do not exist. This is a known limitation of the technology, not a defect we can promise to eliminate.
Accordingly, you must verify every citation, quotation, and statement of law before relying on it; read the full document rather than trusting a summary for anything consequential; and never file, serve, or send AI Output without professional review.
AI Features do not make automated decisions producing legal or similarly significant effects. A qualified professional remains in the loop.
Sending client information to a third-party AI provider is a disclosure to a service provider. We contract to keep it confidential, and we send only what is needed — but you should satisfy yourself that this is consistent with your obligations to your client, any confidentiality undertaking you have given, and any court direction that applies to the matter.
Do not submit material you are barred from disclosing to a processor by law, by a sealing or protective order, or by contract. Where a matter is especially sensitive, consider whether to use AI Features on it at all.
LexFab is not a law firm and does not provide legal advice. Using AI does not transfer any part of your professional responsibility to us.
You remain responsible for the advice you give, the documents you file, the deadlines you meet, and your compliance with the rules of the Bar Council of India, your State Bar Council, and any court before which you practise. Where a court or client expects disclosure of AI assistance, that disclosure is yours to make.
LexFab personnel do not routinely read your AI conversations, prompts, or outputs. Access is limited to authorised personnel and only where reasonably necessary to investigate a technical issue, provide support you have requested, protect the security of the Platform, or comply with the law — subject to internal authorisation and written confidentiality obligations.
AI conversations, prompts, and outputs are stored in your Workspace as Customer Data, so you can revisit them, ask follow-up questions, and keep a record of how a document was produced. You can delete them.
Retention periods are set out in Privacy Policy section 11.3, and deletion after termination follows section 11.2.
AI moves quickly. We may add, change, or discontinue AI Features, and may add or replace AI providers, to improve quality, accuracy, cost, or availability.
Where we add or replace a provider that processes Customer Inputs, we will update the table in section 5 and give notice in accordance with the sub-processor provisions of our Data Processing Addendum. Material changes to this policy are notified under section 21 of the Terms of Service.
Contact contact@lexfab.ai. Firms evaluating LexFab can request details of our AI providers and their contractual terms.
LexFab is in development. These terms apply to advocates and firms we invite to use it early, free of charge, while we build it — and they are deliberately plain about what that means.
The pilot programme gives a small number of invited advocates and firms access to LexFab before general release, so that we can learn how the Platform performs in real practice and improve it before launch.
These Pilot Terms supplement our Terms of Service and apply for the duration of your participation. Where they conflict, these Pilot Terms prevail. All our other policies — Privacy Policy, AI Policy, Security Policy, Acceptable Use Policy — apply in full.
The Platform is pre-release software. Treat it as such: it is not yet a system of record, and you should keep your existing records and processes running alongside it.
Participation is by invitation. The programme begins with a small cohort and will grow to no more than 50 participating advocates. We may close or pause enrolment at any time.
To participate you must be an advocate enrolled with a State Bar Council, or a firm or legal team acting through such an advocate, and you must meet the eligibility requirements in section 5.1 of the Terms of Service.
The pilot is free. We will not ask you for payment or card details during the programme, and no charge arises when it ends.
If you choose to continue on a paid plan afterwards, that is a separate decision you make expressly — nothing converts automatically. Because no Fees are paid, the billing provisions in section 6 of the Terms of Service do not apply to your participation.
Your participation runs from the date your Workspace is created until the programme ends or either of us ends it earlier.
You may leave at any time, for any reason, with no notice and no cost. Tell us and we will help you export your data.
We may end your participation, or the programme, on reasonable notice — or immediately where required to protect the Platform, other participants, or to comply with the law. We will give you a reasonable opportunity to export your data first, except where that is not lawfully possible.
Early software behaves like early software. During the pilot:
For this reason: do not use LexFab as your only record of a matter, a deadline, or a limitation period during the pilot. Keep your existing system running in parallel.
Feedback is what we are asking for in return for early access. We would like to hear from you periodically — a short call or written notes — about what works, what does not, and what is missing. Participation in these conversations is voluntary.
When you give us feedback, suggestions, or ideas about the Platform, you grant LexFab a perpetual, irrevocable, worldwide, royalty-free licence to use them to improve our products, with no obligation or payment to you. Your feedback is about our software; it does not give us any rights over your Customer Data.
We will not use your Customer Data, client information, case details, or documents in marketing, sales material, demonstrations, screenshots, or case studies.
We will not name you, your firm, or your clients publicly, or describe you as a LexFab customer, without your prior written consent. If we would like to quote you or reference your firm, we will ask, and you are free to decline.
Your Customer Data remains yours. We act as your Data Processor for it, as set out in our Data Processing Addendum, which applies to the pilot in full.
Our security measures, retention periods, and AI commitments are the same as for paying customers — the pilot is not a lower standard of care. In particular, we do not use your data to train publicly available AI models, and nothing is sent to an AI provider unless you take a deliberate action, as described in our AI Policy.
You can export your data at any time during the pilot, and we will help if you need us to.
LexFab is not a law firm and does not give legal advice. Using pre-release software does not change your obligations to your clients, to your State Bar Council and the Bar Council of India, or to any court before which you practise.
You remain responsible for every deadline, filing, and piece of advice. Verify everything the Platform produces — and, given the state of the software, verify it more carefully than you would a finished product.
The Platform is provided “as is” and “as available”, without warranties of any kind, as set out in section 17 of the Terms of Service.
Because the pilot is free, the liability limits in section 18 of the Terms of Service apply, and our aggregate liability arising from your participation is limited to one thousand Indian Rupees (₹1,000). We are not liable for any missed deadline, limitation period, filing, hearing, or court date, or for any lost data, lost work, or professional or commercial consequence arising from your use of pre-release software.
Nothing in this section limits liability that cannot lawfully be limited.
Confidentiality runs both ways. We treat your Customer Data and anything you tell us about your practice as your confidential information, under section 11 of the Terms of Service.
In return, please treat as confidential any non-public information about the Platform you learn through the pilot — unreleased features, roadmap, pricing under discussion, known issues, and technical details — and do not disclose it outside your firm without our consent. If you would prefer a signed mutual non-disclosure agreement, ask us and we will provide one.
Before the programme ends we will tell you what happens next, including any plans available to you and their pricing. You are under no obligation to subscribe.
If you do not continue, your Workspace closes and your Customer Data is retained for 30 days so you can export it, then deleted in accordance with section 11.2 of the Privacy Policy. Export your records before that window closes.
Your participation is personal to you and your firm and cannot be transferred. Access is not an offer of employment, partnership, agency, or investment, and creates no exclusivity or commitment to build any particular feature.
These Pilot Terms are governed by the laws of India, with jurisdiction as set out in section 20 of the Terms of Service. We may update them as the programme develops, and will tell you when we do.
Contact contact@lexfab.ai. If you would like a countersigned copy of these terms or a mutual NDA, just ask.