Privacy Policy

1. Who we are

Lexara AI is an AI intake solution for law firms operated by Nexplay AI LLC, a Florida limited liability company ("Lexara AI," "we," "us," or "our"). This Privacy Policy describes how we collect, use, share, and protect personal information when you visit our website at lexarai.com, interact with our demo chatbot, submit our contact form, or otherwise engage with us.

2. Scope of this policy

This policy applies to information we collect on lexarai.com and through any communication you have with us directly. It does not apply to:

• Chatbots we deploy on our law firm clients' own websites — those interactions are governed by each client firm's own privacy policy, with us acting as a processor on the firm's behalf.
• Third-party websites linked from lexarai.com.

3. Information we collect

Information you give us directly

When you submit our contact form, email us, or interact with our demo chatbot at lexarai.com, you may give us:

• Your first and last name
• Your email address
• Your law firm name
• Your primary practice area
• Any free-text message you choose to send us
• Information you type into our public-facing demo chatbot during the demonstration

Information collected automatically

When you visit lexarai.com we may automatically collect limited technical information, including:

• Your IP address (used by our hosting provider, Cloudflare, for routing and security)
• Browser type and version, operating system, and device type
• Referring URL and pages viewed
• Date and time of visit
• Standard server log information generated by Cloudflare

Information from third parties

We use the following third-party service providers, each of which may collect information described in their own privacy policies:

• Cloudflare — website hosting, content delivery, and security
• Botpress — the platform powering the demo chatbot embedded on this site
• Anthropic — the AI model (Claude) that generates chatbot responses
• Formspree — the service that delivers contact form submissions to our inbox
• Google Fonts — typography rendering

4. How we use information

We use the information we collect to:

• Respond to your inquiries and follow up on contact form submissions
• Demonstrate our product capabilities to prospective clients
• Provide, maintain, and improve our services
• Send you information about Lexara AI that you have requested
• Comply with legal obligations and enforce our Terms of Service
• Detect, prevent, and address fraud, abuse, or security incidents

We do not sell personal information to third parties for advertising or any other purpose.

5. Legal bases for processing (for GDPR-covered visitors)

If you are in the European Economic Area, the United Kingdom, or another jurisdiction with similar laws, we process your personal information on the following bases:

• Consent — when you submit a contact form or interact with our demo chatbot
• Legitimate interests — to operate, secure, and improve our website, and to communicate with prospective clients who have voluntarily reached out
• Legal obligation — to comply with applicable law

6. How we share information

We share personal information only in the following limited circumstances:

• With our service providers listed in Section 3, who process information on our behalf under contractual confidentiality obligations
• To comply with law — including subpoenas, court orders, or other valid legal process
• To protect rights and safety — including to investigate fraud, abuse, or security threats
• In connection with a business transfer — such as a merger, acquisition, or sale of assets, in which case the acquiring entity will be bound by this policy or provide notice of any changes

We do not share personal information for third-party advertising or marketing purposes.

7. How long we keep information

We retain personal information only as long as reasonably necessary for the purposes described in this policy, including:

• Contact form submissions and email correspondence — up to 24 months from your last interaction, then deleted unless you become a client
• Demo chatbot conversations — up to 90 days, then deleted from Botpress and our records, unless required for security or legal reasons
• Server log data — retained by Cloudflare in accordance with its standard retention practices
• Information related to active client relationships — retained for the duration of the relationship plus seven (7) years for tax, audit, and legal purposes

8. How we protect information

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information from loss, misuse, unauthorized access, disclosure, alteration, or destruction. These include encrypted transmission (HTTPS), access controls, vendor due diligence, and regular review of security practices.

No internet transmission or storage system is completely secure, however, and we cannot guarantee absolute security.

9. Cookies and tracking

Our website uses a small number of cookies and similar technologies. For full details, see our Cookie Notice.

10. Your privacy rights

Subject to applicable law, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your personal information, subject to legal exceptions
• Object to or restrict certain processing
• Withdraw consent where we rely on consent (without affecting prior processing)
• Receive a copy of your data in a portable format
• Lodge a complaint with a data protection authority

To exercise any of these rights, email us at erika@lexarai.com. We will respond within 30 days, or as required by applicable law.

11. California residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:

• The right to know what personal information we collect, use, disclose, and (if applicable) sell
• The right to delete personal information we have collected from you
• The right to correct inaccurate personal information
• The right to opt out of the sale or sharing of personal information
• The right to limit use and disclosure of sensitive personal information
• The right to non-discrimination for exercising these rights

We do not sell or share personal information as those terms are defined under California law. To exercise your rights, contact us at erika@lexarai.com.

12. European residents (GDPR / UK GDPR)

If you are in the European Economic Area or the United Kingdom, you have the rights described in Section 10 above. The data controller for personal information collected through lexarai.com is Nexplay AI LLC. You may also lodge a complaint with your local data protection authority.

13. Children's privacy

Lexara AI's services are intended for legal professionals and adult prospective clients. Our website is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided personal information to us, please contact us at erika@lexarai.com and we will delete it.

14. International data transfers

We are based in the United States, and our service providers may operate in the United States and elsewhere. If you access our website from outside the United States, your information may be transferred to, stored, and processed in countries with different data protection laws than your country of residence. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for such transfers.

15. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be communicated by posting a prominent notice on our website or, where appropriate, by email.

16. How to contact us

If you have questions, requests, or concerns about this Privacy Policy or our privacy practices, please contact us:

Nexplay AI LLC (operating Lexara AI)
Email: erika@lexarai.com
Florida, United States