Privacy Policy

Introduction

GenText AI, Inc. ("we," "us," "our," or "Company") operates the LexDraft product and website located at lexdraft.ai (the "Service"). This Privacy Policy explains how we collect, use, disclose, and otherwise process your personal information in connection with our Service.

We are committed to protecting your privacy and ensuring you have a transparent understanding of our data practices. Please read this Privacy Policy carefully. If you do not agree with our policies, please do not use the Service.

Information We Collect

We collect various types of information in connection with the services we provide, including:

Account Information

When you create a LexDraft account, we collect information such as your name, email address, company name, organization details, and job title. This information is necessary to create and manage your account.

Microsoft 365 Account Information

Since LexDraft integrates with Microsoft 365, we receive limited information from your Microsoft account through OAuth authentication, including your Microsoft user ID, display name, email address, and organization information. We do not receive or store your Microsoft password.

Usage Information

We collect information about how you interact with LexDraft, including features used, documents processed (metadata only), time spent on the platform, and feature adoption patterns. This helps us improve our Service and understand user needs.

Document Metadata

We collect metadata about documents you work with, such as document titles, creation dates, and processing timestamps. We do not permanently store the actual content of your documents.

Device & Technical Information

We automatically collect information about the devices and browsers you use to access LexDraft, including operating system, browser type, IP address, and referring URL. This information is used for security, analytics, and service improvement.

Communication Data

If you contact our support team, we collect the content of your messages, attachments, and any information you provide to resolve your inquiry. Support communications may be retained for quality assurance and service improvement.

Payment Information

If you subscribe to a paid plan, we collect billing information through secure payment processors. We do not directly store credit card data—payment processing is handled by third-party payment providers.

How We Use Information

We use the information we collect for various purposes:

Service Delivery

We use your account information to create and maintain your account, provide LexDraft's core features, and deliver AI-powered document drafting services.

Personalization

We use usage information and preferences to personalize your experience, recommend templates and features, and optimize the Service for your needs.

Communication

We use your email address to send you transactional emails (account confirmations, password resets, billing notifications) and, with your consent, product updates and promotional communications.

Service Improvement

We analyze usage patterns and feedback to improve our features, fix bugs, and develop new functionalities that better serve our users.

Security & Compliance

We use information to detect fraud, prevent abuse, investigate security incidents, and comply with applicable laws and regulations.

Analytics & Reporting

We use aggregated and anonymized data for analytics, reporting, and understanding market trends. This data cannot identify individuals.

Legal Obligations

We may use your information to comply with legal obligations, enforce our terms, protect our rights, and respond to lawful requests from authorities.

Data Storage & Security

We implement comprehensive security measures to protect your information:

Encryption

All data is encrypted at rest using AES-256 encryption and encrypted in transit using TLS 1.2+ protocols. Your data is protected both when stored and when transferred over the internet.

Storage Location

User data is stored on secure cloud servers located in the United States. Access to these servers is restricted to authorized personnel only.

Document Content

Document content submitted to LexDraft is processed immediately and not permanently stored. After processing and draft generation, document text is securely deleted from our processing systems.

Access Controls

We maintain strict access controls and authentication mechanisms. Employees can only access user data if necessary to perform their duties and have signed confidentiality agreements.

Data Retention

We retain account information for the duration of your subscription. If you delete your account, we securely delete your data within 30 days, except where retention is required by law or for legitimate business purposes.

Backup & Disaster Recovery

We maintain encrypted backups for disaster recovery. Deleted data may exist in backups for up to 30 days before being securely destroyed.

Third-Party Services

LexDraft integrates with or uses the following third-party services:

Microsoft 365

LexDraft integrates with Microsoft 365 to access Word documents. This integration uses OAuth 2.0 authentication and Microsoft's security standards apply to the connection.

Payment Processors

We use third-party payment processors to handle billing and subscriptions. These processors maintain PCI-DSS compliance and secure handling of payment information.

Cloud Infrastructure

LexDraft is hosted on secure cloud infrastructure providers that maintain enterprise-grade security standards and compliance certifications.

Analytics Services

We may use third-party analytics services to understand usage patterns. These services operate under strict data processing agreements and cannot use your data for their own purposes.

Support & Communication Tools

We may use third-party tools for customer support, email delivery, and communication. These vendors are contractually obligated to protect your data.

These third parties have access only to the minimum information necessary to provide their services and are contractually prohibited from using your information for any other purpose.

Your Rights

You have the following rights regarding your personal information:

Access

You have the right to request a copy of the personal information we hold about you. You can access much of your account information directly through your account settings.

Correction

You have the right to correct inaccurate or incomplete information. You can update your account information directly through your account settings.

Deletion

You have the right to request deletion of your account and associated personal data. Upon request, we will delete your information within 30 days, except where retention is required by law.

Data Portability

You have the right to request your data in a portable format. We can provide you with a copy of your account information in a machine-readable format.

Opt-Out

You have the right to opt out of promotional emails and non-essential communications. You can manage your communication preferences in your account settings or by clicking unsubscribe in any email.

GDPR Rights (for EU residents)

If you are located in the European Union, you have additional rights under the General Data Protection Regulation (GDPR), including the right to restrict processing and object to processing.

CCPA Rights (for California residents)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt-out of the sale of personal information.

To exercise any of these rights, please contact us at privacy@lexdraft.ai with your request and verification of your identity.

Cookies

LexDraft uses cookies and similar tracking technologies to enhance your experience:

Essential Cookies

These cookies are necessary for the Service to function, including session management, authentication, and security. You cannot disable these without preventing the Service from working.

Performance Cookies

These cookies help us understand how users interact with LexDraft and improve performance. They collect information about page load times and feature usage.

Analytical Cookies

These cookies help us analyze usage patterns and improve our Service. They may be provided by third-party analytics services.

Marketing Cookies

With your consent, we use cookies to track how you arrived at our Service and to help us understand marketing effectiveness. You can control these preferences.

You can manage cookie preferences through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. Note that disabling cookies may affect the functionality of the Service.

Contact

If you have questions about this Privacy Policy or our privacy practices, please contact us:

Privacy Team
GenText AI, Inc.
Email: privacy@lexdraft.ai

General Support
Email: support@lexdraft.ai

Legal Department
Email: legal@lexdraft.ai

We will respond to privacy inquiries within 30 days. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.

Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by updating the "Effective Date" at the top of this policy and, where appropriate, by sending you an email notification.

Your continued use of the Service after changes become effective constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy regularly to stay informed about how we protect your information.

Last Updated: March 2026
GenText AI, Inc. Privacy Policy