Legal

Privacy Policy

Last updated: June 20, 2026

This Privacy Policy describes how Lexora Agentic AI LLC, an Arizona limited liability company (“Lexora,” “we,” or “us”), collects, uses, and shares information when you use the Lexora website and research application at lexora.design (the “Service”). By using the Service, you agree to the practices described here. See also our Terms of Service.

1. Information we collect

Account information. When you sign up or sign in, we collect information such as your name, email address, and profile image (if provided by an OAuth provider). Authentication is handled through Better Auth; session data is stored in our database.

Research activity. When you use the research app, we process the questions you submit, generated reports, research trace events, and related metadata needed to run and display results.

Usage and technical data. We automatically collect information such as IP address, browser type, device information, pages visited, and timestamps. Our hosting provider (Vercel) and infrastructure partners may log request data for security and performance.

Cookies and similar technologies. We use session cookies to keep you signed in and to protect the Service. You can control cookies through your browser settings; disabling them may limit sign-in functionality.

2. How we use information

We use collected information to:

  • Provide, maintain, and secure the Service.
  • Authenticate users and manage accounts.
  • Run legal research queries and return results, traces, and verification output.
  • Respond to support requests and communicate about the Service.
  • Monitor abuse, enforce our Terms, and comply with legal obligations.
  • Improve reliability and product quality (including debugging errors).

We do not sell your personal information. We do not use your research queries to train third-party foundation models for general-purpose AI products, except as required to process your request through our AI provider (see below).

3. How we share information

We share information only as needed to operate the Service:

  • AI processing: Research questions and retrieved source material may be sent to Anthropic (Claude) to generate analysis and reports, subject to Anthropic’s policies.
  • Legal data APIs: Search queries are sent to sources such as CourtListener, Congress.gov, and eCFR to retrieve public legal materials.
  • Authentication: If you use Google, Microsoft, LinkedIn, or similar sign-in, those providers receive information necessary to authenticate you per their own policies.
  • Infrastructure: Hosting (Vercel), database (Turso), and related subprocessors store and process data on our behalf under contractual safeguards.
  • Legal requirements: We may disclose information if required by law, court order, or to protect rights, safety, and integrity of the Service.

4. Data retention

Account and session data are retained while your account is active and for a reasonable period afterward for security, backup, and legal compliance. Research session data may be retained to support your history and Service improvement unless you request deletion where applicable. We may anonymize or aggregate data for analytics.

5. Security

We use industry-standard measures including HTTPS, signed session tokens, and access controls. No method of transmission or storage is completely secure; we cannot guarantee absolute security. You are responsible for safeguarding your account credentials.

6. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or export personal information, or to object to certain processing. To make a request, email legal@lexora.design. We may need to verify your identity before responding. You may sign out at any time from the research app or revoke OAuth access in your provider’s account settings.

7. Children

The Service is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, email legal@lexora.design and we will delete it.

8. International users

The Service is operated from the United States. If you access the Service from other regions, your information may be transferred to and processed in the U.S. and other countries where our providers operate, which may have different data protection laws.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the “Last updated” date. Material changes may be communicated through the Service or by email where appropriate.

10. Contact

Privacy questions, data requests, or legal notices: legal@lexora.design.