Privacy Policy

California Privacy Policy

This privacy policy applies to residents of California and is provided in accordance with the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

Information We Collect

When you use LexBooks, we collect information which may include your name, email address, firm name, and profile information associated with your account. We also store the legal matters, contacts, time entries, billing records, and documents you choose to create within the platform. When you open an account we also ask for a California bar number, which we check against the State Bar's public records. At checkout our payment provider collects your billing address to work out sales tax. We do not use cookies or similar tracking technologies.

We Do Not Sell or Share Your Information

Purposes of the Processing

We use your personal information only for these purposes:

• If you create a LexBooks account, you will need an email address to access the platform and to persist the law firm data you store in it (matters, contacts, billing, documents, time entries). Authentication is handled via email and password.
• If your firm subscribes to LexBooks, Stripe processes and retains the payment details. We receive only a confirmation of subscription status, not card details.
• If you upload documents to LexBooks, they are stored with our database provider (Supabase Storage), which encrypts stored data, scoped to your firm. Only authenticated users within your firm can access them. Documents a client uploads through the client portal are sent to the firm's own AI instance instead.
• If your firm turns AI features on, the text of each AI request (for example, the matter events to summarize) is sent to our AI provider, which returns the draft.
• We send every LexBooks e-mail from lexbooks.app through our mail provider: sign-in e-mails (account confirmation, invitations and password resets); trial and billing reminders; notices to the firm when a client accepts or declines a proposal or pays an invoice online; and confirmations to the person who asked, when the deletion of a firm workspace or of a user account is done.
• We run no analytics on LexBooks.

Lawful Bases for Processing

• Contractual Necessity: We rely on this basis when you create an account, store law firm data, or subscribe to paid features.

Data Retention

We retain your personal information for as long as your account is active. When you delete your account or your firm deletes its workspace, we delete it from the live service 30 days after the request. A workspace that is read-only because a free trial ended or a payment failed is deleted after 6 months in that state, with 30 days' notice by e-mail first. Copies in our backups are deleted as the backups age out, within 37 days more at most, and are not restored in the meantime except to recover the service as a whole.

Data Processors and Transfers to Third Parties

LexBooks relies on a number of partners to function:

• Supabase is our database, authentication and file storage provider (hosted in AWS US East)
• Vercel is our web hosting platform (location: United States)
• Stripe processes subscription payments and works out sales tax from the billing address
• Resend sends every LexBooks e-mail, sign-in e-mails included (United States)
• Groq runs AI drafting and summaries, only if your firm turns AI features on (United States)
• Scaleway runs AI drafting and summaries for a firm that chooses the EU option, where LexBooks offers it (Paris, France, EU)
• Dropbox holds the encrypted copies of our nightly database backup, which it cannot read; each copy is deleted after 30 days (United States)

We do not sell your law firm data (matters, contacts, billing, documents) or use it for any purpose other than running LexBooks for your firm. It is stored with Supabase, scoped to your firm via row-level security policies, and reaches the other providers above only as needed for the feature you use.

Your California Privacy Rights

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to Correct: You may request correction of inaccurate personal information.
• Right to Opt-Out: While we do not sell or share your information, you have the right to opt-out of such practices.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

Exercise Your Rights

To exercise any of your privacy rights, please contact our Data Protection Officer: todolaw@privacycloud.com

UK Privacy Policy

This privacy policy applies to residents of the United Kingdom and is provided in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller

RINDOGATAN LLC, a Wyoming limited liability company and the operator of LexBooks, is the data controller responsible for your personal data. You can contact our Data Protection Officer at todolaw@privacycloud.com.

Information We Collect

When you use LexBooks, we collect information which may include your name, email address, firm name, and profile information associated with your account. We also store the legal matters, contacts, time entries, billing records, and documents you choose to create within the platform. When you open an account we also ask for a California bar number, which we check against the State Bar's public records. At checkout our payment provider collects your billing address to work out sales tax. We do not use cookies or similar tracking technologies.

Purposes of the Processing

We use your personal information only for these purposes:

• If you create a LexBooks account, you will need an email address to access the platform and to persist the law firm data you store in it. Authentication is handled via email and password.
• If your firm subscribes to LexBooks, Stripe processes the payment details. We receive only subscription status, not card details.
• If you upload documents, they are stored with our database provider, which encrypts stored data, scoped to your firm. Documents a client uploads through the client portal are sent to the firm's own AI instance instead.
• If your firm turns AI features on, the text of each AI request is sent to our AI provider, which returns the draft.
• We send every LexBooks e-mail from lexbooks.app through our mail provider: sign-in e-mails (account confirmation, invitations and password resets); trial and billing reminders; notices to the firm when a client accepts or declines a proposal or pays an invoice online; and confirmations to the person who asked, when the deletion of a firm workspace or of a user account is done.
• We run no analytics on LexBooks.

Lawful Bases for Processing

• Contractual Necessity: When you create an account, store law firm data, or subscribe to paid features.

Data Retention

We retain your personal data for as long as your account is active. When you delete your account or your firm deletes its workspace, we delete it from the live service 30 days after the request. A workspace that is read-only because a free trial ended or a payment failed is deleted after 6 months in that state, with 30 days' notice by e-mail first. Copies in our backups are deleted as the backups age out, within 37 days more at most, and are not restored in the meantime except to recover the service as a whole.

Data Processors and Transfers to Third Parties

LexBooks relies on the following partners: Supabase (database, sign-in and file storage, AWS US East), Vercel (hosting; location: United States), Stripe (payments, and sales tax from the billing address), Resend (every LexBooks e-mail, sign-in e-mails included, United States), Groq (AI drafting and summaries, only if your firm turns AI features on, United States), Scaleway (AI drafting and summaries for a firm that chooses the EU option, where LexBooks offers it; Paris, France, EU) and Dropbox (encrypted copies of the nightly database backup, which it cannot read, each deleted after 30 days; United States). Your law firm data is stored with Supabase and reaches the other partners only as needed for the feature you use. We do not sell it.

International Transfers

Your data may be transferred to and processed in the United States by RINDOGATAN LLC. Such transfers are conducted in compliance with UK GDPR requirements, including the use of appropriate safeguards such as Standard Contractual Clauses (SCCs).

Your UK Data Protection Rights

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data, subject to certain legal exceptions.
• Right to Restrict Processing: You may request that we limit the processing of your personal data.
• Right to Data Portability: You may request to receive your personal data in a structured, commonly used format.
• Right to Object: You may object to processing based on legitimate interests.

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated. Visit ico.org.uk for more information.

Exercise Your Rights

To exercise any of your data protection rights, please contact our Data Protection Officer: todolaw@privacycloud.com

EU Privacy Policy

This privacy policy applies to residents of the European Economic Area (EEA) and is provided in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR).

Data Controller

RINDOGATAN LLC, a Wyoming limited liability company and the operator of LexBooks, is the data controller responsible for your personal data. You can contact our Data Protection Officer at todolaw@privacycloud.com.

Information We Collect

When you use LexBooks, we collect information which may include your name, email address, firm name, and profile information associated with your account. We also store the legal matters, contacts, time entries, billing records, and documents you choose to create within the platform. When you open an account we also ask for a California bar number, which we check against the State Bar's public records. At checkout our payment provider collects your billing address to work out sales tax. We do not use cookies or similar tracking technologies.

Purposes of the Processing

We use your personal information only for these purposes:

• If you create a LexBooks account, you will need an email address to access the platform and to persist the law firm data you store in it. Authentication is handled via email and password.
• If your firm subscribes to LexBooks, Stripe processes the payment details. We receive only subscription status, not card details.
• If you upload documents, they are stored with our database provider, which encrypts stored data, scoped to your firm. Documents a client uploads through the client portal are sent to the firm's own AI instance instead.
• If your firm turns AI features on, the text of each AI request is sent to our AI provider, which returns the draft.
• We send every LexBooks e-mail from lexbooks.app through our mail provider: sign-in e-mails (account confirmation, invitations and password resets); trial and billing reminders; notices to the firm when a client accepts or declines a proposal or pays an invoice online; and confirmations to the person who asked, when the deletion of a firm workspace or of a user account is done.
• We run no analytics on LexBooks.

Lawful Bases for Processing

• Contractual Necessity: When you create an account, store law firm data, or subscribe to paid features.

Data Retention

We retain your personal data for as long as your account is active. When you delete your account or your firm deletes its workspace, we delete it from the live service 30 days after the request. A workspace that is read-only because a free trial ended or a payment failed is deleted after 6 months in that state, with 30 days' notice by e-mail first. Copies in our backups are deleted as the backups age out, within 37 days more at most, and are not restored in the meantime except to recover the service as a whole.

Data Processors and Transfers to Third Parties

LexBooks relies on the following partners: Supabase (database, sign-in and file storage, AWS US East), Vercel (hosting; location: United States), Stripe (payments, and sales tax from the billing address), Resend (every LexBooks e-mail, sign-in e-mails included, United States), Groq (AI drafting and summaries, only if your firm turns AI features on, United States), Scaleway (AI drafting and summaries for a firm that chooses the EU option, where LexBooks offers it; Paris, France, EU) and Dropbox (encrypted copies of the nightly database backup, which it cannot read, each deleted after 30 days; United States). Your law firm data is stored with Supabase and reaches the other partners only as needed for the feature you use. We do not sell it.

International Transfers

Your data may be transferred to and processed in the United States by RINDOGATAN LLC. Such transfers are conducted in compliance with GDPR requirements, including the use of appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission.

Your EU Data Protection Rights

• Right of Access (Art. 15): You may request a copy of the personal data we hold about you.
• Right to Rectification (Art. 16): You may request correction of inaccurate or incomplete personal data.
• Right to Erasure (Art. 17): You may request deletion of your personal data, subject to certain legal exceptions.
• Right to Restrict Processing (Art. 18): You may request that we limit the processing of your personal data.
• Right to Data Portability (Art. 20): You may request to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object (Art. 21): You may object to processing based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

Supervisory Authority

You have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD) or your local supervisory authority if you believe your data protection rights have been violated. Visit aepd.es for more information.

Exercise Your Rights

To exercise any of your data protection rights, please contact our Data Protection Officer: todolaw@privacycloud.com

Cookie Policy

We do not use analytics cookies, advertising cookies, or social media cookies. We do not use tracking pixels. We do not fingerprint your browser or device.