Privacy Policy

1. Introduction

Lexo Legal Technologies Pvt. Ltd. ("we", "us", "our") is committed to protecting your privacy. This policy describes how we collect, use, store, and protect your personal data in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act).

2. Data We Collect

• Account data: Phone number, name, email, city, profile photo
• Lawyer data: Bar Council registration number, verification documents, specializations, rate card
• Transaction data: Wallet balance, payment history, consultation records, invoices
• Communication data: Chat messages, call metadata (duration, timestamps — not call audio unless consented)
• Device data: Device type, OS version, FCM tokens (for push notifications)
• Usage data: Pages visited, features used, search queries

3. How We Use Your Data

• To provide and operate the Platform
• To verify lawyer credentials
• To process payments and maintain financial records
• To send notifications (session reminders, payment confirmations)
• To resolve disputes and provide customer support
• To improve the Platform and develop new features
• To comply with legal obligations (GST invoicing, regulatory requirements)

4. Consent

We collect your consent at the time of registration. You may withdraw consent at any time by contacting us or deleting your account from Settings. Withdrawal of consent does not affect the lawfulness of processing performed prior to withdrawal.

5. Data Retention

Account data is retained until you delete your account. After deletion, data is soft-deleted and permanently purged after 30 days. Financial records (transactions, invoices) are retained for the period required by applicable tax laws. Chat messages are retained for the duration of the consultation relationship.

6. Data Sharing

We share data only with: (a) Lawyers you choose to consult (your name and case notes), (b) Payment processors (Razorpay) for transaction processing, (c) Cloud infrastructure providers (AWS) for hosting, (d) Law enforcement when required by valid legal process.

7. Your Rights (under DPDP Act 2023)

• Right to access: Request a copy of your personal data
• Right to correction: Update inaccurate data
• Right to erasure: Delete your account and associated data
• Right to grievance redressal: Contact our Data Protection Officer

8. Security

We use TLS encryption for data in transit, encrypted storage for data at rest, and role-based access controls. Authentication tokens are stored securely (httpOnly cookies on web, Keychain on mobile). We never store passwords — authentication is via OTP.

9. Contact

Data Protection Officer: privacy@lexo.in