Legal information · 2026-09-06-draft-v2
Privacy Policy
Provider / controller: Pending
Registration ID: Pending
Address: Pending
Support: Pending
Privacy: Pending
1. Identity and access
Clerk manages identity, email verification, passwords and sessions. LexSport does not receive or store your password. Access records explicitly link the account, firm, seat and invitation; an email domain does not grant permission. Commercial and support contacts are handled separately from research events.
2. Research and telemetry
We do not retain prompts, free-text searches, typed names, case numbers, consulted document identifiers or research-content fingerprints in usage events. We record the tool, channel, time, duration, technical result, access type and filter values from the catalog. Arguments needed to perform research are processed in memory.
3. Pseudonymization and retention
Events identify accounts with opaque IDs. Names and emails are encrypted separately with keys protected by KMS. The dashboard displays pseudonyms. Revealing an identity requires an explicit administrative action, recent MFA and an audit record without personal details. Detailed events are retained for 30 days; afterward, only aggregates with no individual link remain. Earlier data and backups need separate assessment: this policy does not claim that retroactive deletion has already been completed.
4. Providers and rights
Conversations in your AI client follow that client’s rules. The protection described here covers LexSport’s tools and infrastructure. We use authentication, cloud and email providers to operate the service. Transactional messages do not authorize marketing; open and click tracking remain disabled. Use the privacy contact to request access, correction, export or deletion, subject to identity verification and applicable retention requirements.