Privacy Policy

1. Information we process

We may process:

• account information such as your email address and authentication information;
• information you provide about your professional use of SmartLex; and
• matter content you choose to upload, enter, generate or save, including documents, factual material, notes, research questions, saved authorities, drafts and related matter information.

Matter content may contain personal, confidential or sensitive information relating to clients, opposing parties, witnesses or other persons. You should upload such information only where you are authorised to do so.

2. How we use information

We use information as reasonably necessary to:

• authenticate and manage user accounts;
• create, store and organise matters;
• upload, extract and analyse documents;
• perform legal research;
• generate, revise and export drafts;
• maintain the security and reliability of the service;
• diagnose errors and improve product performance; and
• comply with applicable legal obligations.

SmartLex does not sell matter content or personal information.

3. AI and third-party service providers

Some SmartLex functions depend on third-party infrastructure, artificial-intelligence and legal-information services.

Depending on the feature being used, relevant information or excerpts from a matter may be transmitted to service providers supporting functions such as authentication, hosting, storage, AI inference and legal-authority retrieval.

SmartLex currently uses services including Supabase, Vercel, OpenAI, Anthropic and Indian Kanoon for different parts of the platform. Additional providers will be identified here when they are actually enabled in the production service.

SmartLex does not use your matter content to train its own foundation models and does not intentionally opt confidential matter content into third-party foundation-model training.

Third-party providers may process or retain limited information as necessary to operate their services, maintain security, prevent abuse or comply with law, subject to their applicable contractual terms and data-processing practices.

4. Matter confidentiality

SmartLex is designed for professional legal workflows and takes the confidentiality of matter information seriously.

Matter documents are stored using private storage and authenticated user access controls. SmartLex does not intentionally make users' matter documents publicly accessible.

However, use of SmartLex does not itself create, preserve or determine legal professional privilege or professional confidentiality. Lawyers and legal teams remain responsible for deciding whether particular information may appropriately and lawfully be uploaded to or processed through cloud and AI services.

5. Security

SmartLex uses technical and organisational measures intended to protect account and matter information, including authenticated access and user-scoped controls.

No internet-based system can guarantee absolute security.

SmartLex does not claim SOC 2, ISO 27001 or any other security certification unless that certification is expressly confirmed by SmartLex.

6. Retention and deletion

SmartLex retains account and matter information for as long as reasonably necessary to provide and secure the service, comply with applicable legal obligations, resolve disputes and maintain legitimate operational records.

Deleting a matter through the account workspace is designed to remove the active matter record and storage objects tied to that matter. Signed-in users can permanently delete their SmartLex account from Account security. Account deletion is designed to remove the active account together with associated matters, research, drafts and uploaded matter documents.

Certain information may remain temporarily in backups, logs, security records or systems where retention is technically or legally required.

7. Cookies and similar storage

SmartLex uses essential cookies or similar browser storage where necessary for authentication, session continuity, security and core product functions. SmartLex does not currently operate a non-essential advertising-cookie layer.

Read the Cookie Notice for more detail.

8. International processing

Some SmartLex service providers may process information using infrastructure located outside India.

Where applicable, SmartLex will handle such processing in accordance with applicable Indian law and the contractual arrangements governing its service providers.

9. Your choices and rights

You decide what matter information you upload to SmartLex.

Subject to applicable law and legitimate retention requirements, you may request access to, correction or completion of, or deletion of personal information associated with your account, or raise a grievance about how personal information is handled. Signed-in users can use Account security to permanently delete their account and associated active SmartLex data.

10. Information relating to other persons

Lawyers and legal teams may upload information relating to clients, witnesses, opposing parties, employees, minors or other persons in connection with legitimate legal work.

The user uploading such information is responsible for having an appropriate professional and legal basis to process it and for limiting uploaded information to what is reasonably necessary for the matter.

11. Changes to this Privacy Policy

SmartLex may update this Privacy Policy as the service develops or applicable requirements change.

Material changes will be reflected on this page and, where appropriate, communicated to users.

12. Privacy and grievance contact

Privacy and data-protection questions may be sent to:

aismartlex@gmail.com