Privacy Policy

Introduction

GenText AI, Inc. ("we," "us," "our," or "Company") operates the LexDraft product and website located at lexdraft.ai (the "Service"). This Privacy Policy explains how we collect, use, disclose, and otherwise process your personal information in connection with our Service.

We are committed to protecting your privacy and ensuring you have a transparent understanding of our data practices. Please read this Privacy Policy carefully. If you do not agree with our policies, please do not use the Service.

Information We Collect

We collect various types of information in connection with the services we provide, including:

Account Information

When you create a LexDraft account, we collect information such as your name, email address, company name, organization details, and job title. This information is necessary to create and manage your account.

Microsoft 365 Account Information

Since LexDraft integrates with Microsoft 365, we receive limited information from your Microsoft account through OAuth authentication, including your Microsoft user ID, display name, email address, and organization information. We do not receive or store your Microsoft password.

Usage Information

We collect information about how you interact with LexDraft, including features used, documents processed (metadata only), time spent on the platform, and feature adoption patterns. This helps us improve our Service and understand user needs.

Document Metadata

We collect metadata about documents you work with, such as document titles, creation dates, and processing timestamps. We do not permanently store the actual content of your documents.

Device & Technical Information

We automatically collect information about the devices and browsers you use to access LexDraft, including operating system, browser type, IP address, and referring URL. This information is used for security, analytics, and service improvement.

Communication Data

If you contact our support team, we collect the content of your messages, attachments, and any information you provide to resolve your inquiry. Support communications may be retained for quality assurance and service improvement.

Payment Information

If you subscribe to a paid plan, we collect billing information through secure payment processors. We do not directly store credit card data—payment processing is handled by third-party payment providers.

How We Use Information

We use the information we collect for various purposes:

Service Delivery

We use your account information to create and maintain your account, provide LexDraft's core features, and deliver AI-powered document drafting services.

Personalization

We use usage information and preferences to personalize your experience, recommend templates and features, and optimize the Service for your needs.

Communication

We use your email address to send you transactional emails (account confirmations, password resets, billing notifications) and, with your consent, product updates and promotional communications.

Service Improvement

We analyze usage patterns and feedback to improve our features, fix bugs, and develop new functionalities that better serve our users.

Security & Compliance

We use information to detect fraud, prevent abuse, investigate security incidents, and comply with applicable laws and regulations.

Analytics & Reporting

We analyze service and marketing-site usage to improve LexDraft and understand product performance. Depending on the feature and your choices, this may include account-linked operational usage or pseudonymous marketing-site identifiers and interaction data; we do not describe all analytics data as anonymous.

Legal Obligations

We may use your information to comply with legal obligations, enforce our terms, protect our rights, and respond to lawful requests from authorities.

Data Storage & Security

We implement comprehensive security measures to protect your information:

Encryption

All data is encrypted at rest using AES-256 encryption and encrypted in transit using TLS 1.2+ protocols. Your data is protected both when stored and when transferred over the internet.

Storage Location

User data is stored on secure cloud servers located in the United States. Access to these servers is restricted to authorized personnel only.

Document Content

Document content submitted to LexDraft is processed immediately and not permanently stored. After processing and draft generation, document text is securely deleted from our processing systems.

Access Controls

We maintain strict access controls and authentication mechanisms. Employees can only access user data if necessary to perform their duties and have signed confidentiality agreements.

Data Retention

We retain account information for the duration of your subscription. If you delete your account, we securely delete your data within 30 days, except where retention is required by law or for legitimate business purposes.

Backup & Disaster Recovery

We maintain encrypted backups for disaster recovery. Deleted data may exist in backups for up to 30 days before being securely destroyed.

Third-Party Services

LexDraft integrates with or uses the following third-party services:

Microsoft 365

LexDraft integrates with Microsoft 365 to access Word documents. This integration uses OAuth 2.0 authentication and Microsoft's security standards apply to the connection.

Payment Processors

We use third-party payment processors to handle billing and subscriptions. These processors maintain PCI-DSS compliance and secure handling of payment information.

Cloud Infrastructure

LexDraft is hosted on secure cloud infrastructure providers that maintain enterprise-grade security standards and compliance certifications.

Analytics Services

If you independently enable Analytics in Cookie settings, Google Analytics may process marketing-site visit data and Microsoft Clarity may process pseudonymous interaction data on the narrow reviewed marketing-page allowlist described below. Microsoft Corporation and relevant affiliates receive and process Clarity data as our analytics service provider/processor, subject to Microsoft's terms and privacy statement. We exclude tools, forms, contact flows, documents, and other user-content pages from Clarity.

Support & Communication Tools

We may use third-party tools for customer support, email delivery, and communication. These vendors are contractually obligated to protect your data.

These third parties have access only to the minimum information necessary to provide their services and are contractually prohibited from using your information for any other purpose.

Your Rights

You have the following rights regarding your personal information:

Access

You have the right to request a copy of the personal information we hold about you. You can access much of your account information directly through your account settings.

Correction

You have the right to correct inaccurate or incomplete information. You can update your account information directly through your account settings.

Deletion

You have the right to request deletion of your account and associated personal data. Upon request, we will delete your information within 30 days, except where retention is required by law.

Data Portability

You have the right to request your data in a portable format. We can provide you with a copy of your account information in a machine-readable format.

Opt-Out

You have the right to opt out of promotional emails and non-essential communications. You can manage your communication preferences in your account settings or by clicking unsubscribe in any email.

GDPR Rights (for EU residents)

If you are located in the European Union, you have additional rights under the General Data Protection Regulation (GDPR), including the right to restrict processing and object to processing.

CCPA Rights (for California residents)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt-out of the sale of personal information.

To exercise any of these rights, please contact us at privacy@lexdraft.ai with your request and verification of your identity.

Cookies

LexDraft uses cookies and similar technologies for the categories below. Analytics and advertising measurement are independent optional choices and remain off unless you explicitly enable each one. A saved optional-consent grant expires after no more than 9 months, after which we ask again.

Essential Cookies

These cookies are necessary for the Service to function, including session management, authentication, and security. You cannot disable these without preventing the Service from working.

Analytics

With your Analytics consent, Google Analytics may use identifiers such as the _ga cookie to measure marketing-site visits. On a separate narrow allowlist of reviewed marketing pages, Microsoft Clarity may reconstruct sessions and produce heatmaps. Clarity typically uses the pseudonymous first-party _clck cookie to recognize a browser on this site and _clsk to connect page views into a session. Microsoft and relevant affiliates receive and process that data for us as an analytics service provider/processor.

Clarity is permitted only on the reviewed static documentation, security, privacy, and terms pages and the three reviewed paid landing pages: /paid/ai-legal-drafting-word, /paid/ai-contract-drafting-review, and /paid/legal-document-drafting-small-firms. On those paid pages, query parameters and fragments are removed before Clarity starts. It remains disabled on every other /paid/* page, the homepage, features, pricing, every /tools/* page, the tools index, contact-sales and other form flows, templates, guides, blog and comparison content, and every page containing a form, editable field, document, or other user content. Ordinary Clarity playback data may be retained for up to 30 days. A limited randomly selected or favorited subset of recordings, and heatmap/click data, may be retained for up to 9 months. See Microsoft's Clarity retention documentation and cookie documentation.

Advertising Measurement

With your separate consent, advertising-measurement cookies help us understand whether an advertisement contributed to a visit or signup. We do not use the marketing site for personalized advertising or remarketing.

Use the Cookie settings button shown on every marketing-site page to accept, reject, independently change, or withdraw either optional category at any time. Withdrawal updates the consent signal, clears accessible measurement cookies and optional attribution storage, and reloads the page without disallowed tags. You can also use browser controls; disabling essential storage may prevent us from remembering your choice.

Contact

If you have questions about this Privacy Policy or our privacy practices, please contact us:

Privacy Team
GenText AI, Inc.
Email: privacy@lexdraft.ai

General Support
Email: support@lexdraft.ai

Legal Department
Email: legal@lexdraft.ai

We will respond to privacy inquiries within 30 days. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.

Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by updating the "Effective Date" at the top of this policy and, where appropriate, by sending you an email notification.

Your continued use of the Service after changes become effective constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy regularly to stay informed about how we protect your information.

Last Updated: July 29, 2026
GenText AI, Inc. Privacy Policy