Privacy Policy

At Lexchange AI ("Lexchange", "we", "our", or "us"), we respect your right to privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and disclose your information when you use our website, platform, APIs, and related services (collectively, the "Services"), as well as your rights under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).

This Privacy Policy applies when you visit or use Lexchange's website, platform, APIs, or related services. By using the Services, you agree to the terms of this Privacy Policy.

We collect certain data from you directly, including information you provide when creating an account, using the Services, and communicating with us. We also collect information relating to your organization's use of the Services, including data associated with law firms, lawyers, clients, legal matters, billing, and documents managed through the platform. In addition, we collect certain information automatically, such as information about your device and how you interact with our Services.

Account Data:

Information required to create and manage your account, such as your name, email address, password, organization, and other account details.

Law Firm Data:

Information relating to your law firm or organization, including firm details, users, teams, offices, settings, and other information necessary to provide the Services.

Lawyer Data:

Information relating to lawyers and authorized users of the platform, including profile information, work assignments, time entries, schedules, and other information generated through use of the Services.

Client and Matter Data:

Information entered into the platform regarding your clients, legal matters, cases, contacts, documents, notes, deadlines, communications, and other information necessary for managing legal work.

Billing and Financial Data:

Information relating to timekeeping, billable activities, invoices, expenses, payment records, and other billing information required to support the Services. Payment information is processed by authorized payment providers where applicable.

Communications and Support:

If you contact us for support, submit feedback, or otherwise communicate with us, we collect the information you provide, including your contact details, messages, and any other information necessary to respond to your request.

We use your data to provide, maintain, and improve the Services, including managing user accounts, facilitating legal practice management, supporting timekeeping and billing, enabling collaboration within your organization, responding to support requests, monitoring platform performance, detecting and preventing fraud or unauthorized access, complying with applicable legal and regulatory requirements, and communicating important updates regarding the Services.

We process your information only for legitimate business purposes and in accordance with applicable data privacy laws.

We do not sell or rent your personal information.

We may share your data only when necessary to operate and provide the Services, including with trusted third-party service providers that assist with cloud hosting, infrastructure, payment processing, customer support, analytics, security monitoring, and other operational functions. These providers are contractually required to safeguard your information and process it only for the purposes authorized by Lexchange.

We may also disclose information where required by law, legal process, or governmental request, or when necessary to protect the rights, property, security, or integrity of Lexchange, our customers, or others.

Protecting the confidentiality and security of legal and client information is a core priority at Lexchange.

We recognize that information stored on the platform may include privileged, confidential, and sensitive client information, and we implement appropriate administrative, organizational, and technical safeguards to help protect the integrity, confidentiality, and availability of such data.

These safeguards may include secure cloud infrastructure, encrypted communications, role-based access controls, authentication mechanisms, audit logging, regular backups, system monitoring, and other industry-standard security practices.

Access to customer data is restricted to authorized personnel who require such access to operate, maintain, or support the Services, and only to the extent necessary to perform their responsibilities.

While we continuously work to protect your information, no method of electronic storage or transmission over the Internet can be guaranteed to be completely secure. Accordingly, we encourage users to maintain the confidentiality of their account credentials and promptly notify us of any suspected unauthorized access.

Lexchange is designed specifically for legal professionals and recognizes the confidential, privileged, and sensitive nature of the information entrusted to the platform.

All client information, legal matters, billing records, documents, and other data uploaded to Lexchange remain the property of the law firm or organization that provided such information. Lexchange acts solely as a service provider in processing this information for the purpose of delivering, maintaining, and improving the Services.

We do not access, review, disclose, or use customer data except:

• where necessary to provide technical support or troubleshoot issues;
• to maintain, secure, and improve the Services;
• with the authorization of the customer; or
• where required by applicable law or a lawful governmental request.

All personnel and authorized service providers with access to customer data are expected to maintain its confidentiality and are subject to appropriate contractual and security obligations. We are committed to implementing reasonable administrative, organizational, and technical safeguards to help protect customer information from unauthorized access, disclosure, alteration, or destruction.

In accordance with the Philippine Data Privacy Act of 2012 and other applicable laws, you may have the following rights with respect to your personal information:

• Right to be informed – to know how your personal information is collected, used, and processed.
• Right to access – to request access to the personal information we hold about you.
• Right to object – to object to the processing of your personal information where permitted by law.
• Right to rectification – to request the correction of inaccurate or incomplete personal information.
• Right to erasure or blocking – to request the deletion or restriction of your personal information where permitted by law.
• Right to data portability – to obtain your personal information in a structured and commonly used electronic format, where applicable.
• Right to damages – to seek compensation if your rights under applicable data privacy laws have been violated.

To exercise any of these rights or if you have questions regarding how your information is processed, please contact us using the contact details provided below.