Privacy Policy

1. Scope and who we are

This Privacy Policy applies to Lexlinq Pty Ltd and the LexLINQ website, application, support, billing, and related services. References to “we”, “us”, or “LexLINQ” mean Lexlinq Pty Ltd.

We handle personal information in accordance with applicable Australian privacy law, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply.

2. Personal information we may collect

• Account and identity information, such as name, email address, organisation, role, account identifiers, and authentication records.
• Contact and support information, including enquiries, messages, feedback, and records needed to resolve a request.
• Subscription, billing, transaction, invoice, and payment-method information. Payment providers process payment details; we generally retain provider identifiers and limited payment-method details such as type and last four digits rather than full card numbers.
• Customer Content, including uploaded documents, matter names and details, prompts, questions, templates, instructions, generated outputs, and document indexing information.
• Usage and technical information, including feature activity, credit transactions, timestamps, IP address, browser or device information, diagnostic records, and security events.
• Website information collected through necessary cookies and any analytics tools we use to understand performance and use.

3. Sensitive, confidential, and privileged information

Customer Content may contain sensitive information, confidential client material, or legally privileged information. We collect and process that material only when a user submits it or it is generated from a submitted request.

You must ensure you have authority to submit the material and that doing so is consistent with privacy law, professional obligations, client instructions, contracts, privilege, and court orders. Where practical, minimise or de-identify personal information before upload.

4. How we collect information

We collect information directly from you when you visit, enquire, register, subscribe, pay, upload content, use a feature, or contact support. We also collect technical and transaction records automatically when the service operates.

An organisation or account administrator may provide information about authorised users. Documents submitted by a user may contain information about clients, counterparties, witnesses, employees, or other third parties.

5. Why we use personal information

• Provide, authenticate, operate, and support accounts and requested features.
• Upload, index, retrieve, compare, analyse, and generate content in response to user instructions.
• Process subscriptions and Prepaid Credit purchases, issue invoices, maintain credit ledgers, and prevent payment abuse.
• Secure the service, enforce matter and account boundaries, investigate incidents, troubleshoot errors, and maintain service integrity.
• Respond to enquiries, communicate service and billing information, and provide support.
• Improve reliability, usability, performance, and safety using appropriately limited operational information.
• Comply with law, court orders, regulatory obligations, and lawful requests, and establish, exercise, or defend legal claims.

6. Generative AI and model providers

Depending on the selected feature and system configuration, LexLINQ may send prompts and the minimum relevant portions of Customer Content to API services supplied by OpenAI, Google Gemini, or Anthropic. OpenAI services may also be used for document embeddings and other AI processing.

LexLINQ does not use Customer Content to train public AI models. We use business or API services and available provider data controls for the requested processing. We may use limited operational information and user feedback to improve the LexLINQ service, but we do not repurpose Customer Content to train a public foundation model.

AI providers, models, subprocessors, and data controls may change. Contact us if a current provider assessment is required before using LexLINQ for a particular client, matter, or data category.

7. When we disclose information

We may disclose personal information to service providers that support hosting, storage, AI processing, payments, email and communications, monitoring, support, security, and professional advice. They receive information only for the services they provide and are subject to applicable contractual and legal obligations.

We may also disclose information with your direction or consent; to an organisation administering your account; in a corporate transaction subject to appropriate safeguards; or where required or authorised by law, a court, or a regulator.

We do not sell personal information.

8. Overseas processing and disclosure

Some providers operate outside Australia. Personal information and Customer Content may therefore be processed or stored in the United States and in other countries where our hosting, AI, payment, communications, or support providers and their subprocessors operate.

The exact countries may depend on the provider, feature, routing, and infrastructure available at the time. We take reasonable steps required by applicable Australian privacy law when using overseas providers. Current provider and location information can be requested from info@lexlinq.ai before submitting highly sensitive material.

9. Security

We apply technical and organisational safeguards intended to protect personal information against misuse, interference, loss, and unauthorised access, modification, or disclosure. No internet transmission, provider, or storage system can be guaranteed completely secure.

Users must protect their credentials and devices, manage authorised access, and promptly report suspected compromise. See the Security page for more information.

10. Retention and deletion

We retain personal information and Customer Content for as long as reasonably necessary to provide an account and requested services, support billing and audit records, resolve disputes, maintain security, and meet legal, tax, accounting, and regulatory obligations.

Retention depends on the information type, account status, customer instructions, legal requirements, dispute or security needs, and reasonable backup cycles. When information is no longer required, we take reasonable steps to delete or de-identify it, subject to lawful exceptions and technical backup limitations.

Cancelling a subscription does not by itself close the account, delete Customer Content, or remove a saved payment method. Contact us to request account or payment-method deletion. Some transaction, invoice, consent, security, and legal records must be retained.

11. Access and correction

You may ask for access to personal information we hold about you or request correction if it is inaccurate, out of date, incomplete, irrelevant, or misleading. Contact info@lexlinq.ai and provide enough information for us to identify the relevant record and verify your identity.

We will respond within a reasonable period. If an exception permits us to refuse access or correction, we will ordinarily explain the reason and available complaint options.

12. Privacy complaints

Send a privacy question or complaint to info@lexlinq.ai, telephone 07 3349 3214, or write to Lexlinq Pty Ltd, Brisbane Technology Park, 3 Clunies Ross Court, Eight Mile Plains QLD 4113, Australia. Describe the concern and the outcome you seek, without sending unnecessary confidential information.

We will acknowledge and investigate the complaint and respond within a reasonable period. If you are not satisfied, you may complain to the Office of the Australian Information Commissioner through the contact options published at oaic.gov.au.

13. Data breaches

We assess suspected data breaches and, where the Notifiable Data Breaches scheme applies, notify affected individuals and the Office of the Australian Information Commissioner when required by law.

14. Automated decisions

LexLINQ generates information and workflow outputs at a user’s request. It is not designed to make binding automated decisions about a person’s rights, employment, credit, eligibility, access, or legal position.

If our use of personal information in substantially automated decisions changes, we will update this policy and provide any notice required by applicable law.

15. Children and changes to this policy

LexLINQ is intended for adults and professional or business use, not for children. Do not create an account if you are under 18.

We may update this policy when our service, providers, or legal obligations change. The current version and its update date will be published on this page, with additional notice for material changes where appropriate.