Privacy Policy

This Privacy Policy describes how Lexful, Inc. ("Lexful", "we", "us", or "our") collects, uses, discloses, and otherwise processes personal data when you visit our websites, interact with us, or use our Services.

For certain activities, such as when we process Client Data on behalf of our managed service provider customers ("Partners"), we act as a processor. In those cases, our processing is governed by our Data Processing Addendum with the relevant Partner.

This Privacy Policy applies to personal data we process about: (a) visitors to our websites; (b) individuals who register for or use the Services; (c) individuals who communicate or interact with us; and (d) other individuals whose personal data we receive in connection with our business operations.

1. Scope and Who We Are

1.1 Controller and Contact Details

Lexful, Inc. is a Delaware corporation with its principal office in Florida. For processing described in this Privacy Policy, Lexful acts as a controller, processor, or sub-processor of your personal data depending on the context.

Unless expressly defined here, defined terms have the meanings given in the Subscription Terms & Conditions ("Subscription Terms").

1.2 Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. Your continued use of the Services after any update constitutes your acknowledgement of the revised Privacy Policy.

1.3 Key Definitions

"Personal data" means any information relating to an identified or identifiable natural person, as defined under applicable privacy laws.

2. Categories of Personal Data We Collect

2.1. Account and Contact Information. Your name, business affiliation, job title, email address, phone number, mailing address, and other information you provide when creating an account or communicating with us.

2.2. Usage and Log Data. IP address, browser type, device identifiers, operating system, pages visited, features used, date and time stamps, and other log information.

2.3. Cookies and Similar Technologies Data. Information collected via cookies, web beacons, pixels, local storage, and similar technologies. See Section 5 for details.

2.4. Communications and Support Data. Content of your communications, contact details, and related metadata when you contact us.

2.5. Authorized User Profile and Configuration Data. User role, permissions, authentication credentials, security settings, and audit logs.

2.6. Billing and Commercial Information. Subscription details, transaction history, invoices, payment status, and tax information. Payment card information is processed by third-party payment processors.

2.7. Client Data. Our Services enable Partners to store and process data relating to their managed clients. When we process Client Data on behalf of a Partner, we do so as a processor under the applicable Data Processing Addendum.

2.8. Marketing and Events Data. Contact details, registration information, event participation details, and survey responses.

2.9. Inferences and Profile Data. Inferences about your interests, product preferences, or service usage patterns.

2.10. AI and Analytics Data. Prompts, queries, usage telemetry, and feedback related to AI-generated outputs when you enable Generative AI Features.

2.11. Special Categories. We do not intentionally collect special categories of personal data other than as may be incidentally included in Client Data by a Partner.

2.12. Business Contact and Publicly Available Information. Business contact information from public sources or third parties for the purpose of operating and expanding our business relationships.

2.13. Children's Data. Our Services are not directed to children. See Section 11 for more information.

3. How We Collect Personal Data

3.1. Directly from You. When you create an account, submit forms, communicate with us, request support, participate in surveys, attend events, or subscribe to marketing communications.

3.2. Automatically from Your Devices. Via cookies, server logs, and analytics tools when you access our websites or the Services.

3.3. From Partners and Third Parties. From our managed service provider customers, referral partners, data enrichment providers, and other third parties.

3.4. From Public Sources. Publicly available business directories, social media platforms, and other public sources.

4. How We Use Personal Data

4.1. Providing and Improving the Services. To operate, maintain, and improve the Services, process transactions, and provide customer support.

4.2. Account Management. To create and manage accounts, authenticate users, and manage permissions.

4.3. Communications. To send service announcements, updates, security alerts, and administrative messages.

4.4. Marketing. To send promotional communications, subject to your communication preferences and applicable law.

4.5. Analytics and Research. To understand how our Services are used and to improve user experience.

4.6. Security and Fraud Prevention. To detect, investigate, and prevent fraudulent transactions and other illegal activities.

4.7. Legal Compliance. To comply with applicable laws, regulations, legal processes, and government requests.

4.8. AI Features. To provide, improve, and develop Generative AI Features when enabled by you or your organization.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and use personal data about you. For more information about the types of cookies we use and how to control them, please see our Cookie Policy or the cookie settings available on our website.

6. How We Share Personal Data

6.1. Service Providers. We share personal data with third-party vendors and service providers that perform services on our behalf, such as cloud hosting, payment processing, analytics, and customer support.

6.2. Partners. We may share data with our managed service provider customers as necessary to provide the Services.

6.3. Business Transfers. In connection with a merger, acquisition, financing, or sale of assets, personal data may be transferred as part of the transaction.

6.4. Legal Requirements. We may disclose personal data if required by law or in response to valid legal process.

6.5. With Your Consent. We may share personal data for other purposes with your consent.

7. International Data Transfers

Lexful operates globally. If you are located outside the United States, your personal data may be transferred to and processed in the United States or other countries. Where required by applicable law, we implement appropriate safeguards for such transfers, including standard contractual clauses approved by the relevant authorities.

8. Data Retention

We retain personal data for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. When determining retention periods, we consider the nature and sensitivity of the data, the purposes for which we process it, and applicable legal requirements.

9. Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, or alteration. However, no security measure is perfect, and we cannot guarantee absolute security.

10. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal data, including the right to:

• Access the personal data we hold about you;
• Correct inaccurate or incomplete personal data;
• Request deletion of your personal data;
• Object to or restrict certain processing;
• Data portability;
• Withdraw consent where processing is based on consent.

To exercise your rights, contact us at legal@lexful.ai. We will respond to your request in accordance with applicable law.

11. Children's Privacy

Our Services are not directed to children under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected personal data from a child, please contact us and we will promptly delete it.

12. Third-Party Links

Our websites and Services may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

Email: legal@lexful.ai

Mail:

Lexful, Inc.

1010 S Federal Highway, Suite 1400

Hallandale Beach, FL 33009