Lexi procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | unknown | “ If you are a resident of the European Union (EU) and European Economic Area (EEA), you have certain data protection rights, covered by GDPR. We aim to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data. In certain circumstances, you have the following data protection rights to:” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA). These rights include the right to know what personal information we collect, the right to delete personal information, and the right to opt-out of the sale of personal information (note: we do not sell your personal information). To exercise these rights, please contact us at legal@getlexi.io .” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Be provided with a copy of your Personal Data in a structured, machine-readable and commonly used format Withdraw your consent at any time where we rely on your consent to process your personal information Please note that we may ask you to verify your identity before responding to such requests. You have the right to complain to a Data Protection Authority about our collection and use of your Personal Data.” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Have your information rectified if that information is inaccurate or incomplete” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies. We retain your Personal Data for different periods of time depending on what it is, how we use it, and how you configure your settings. We will either delete or anonymize Personal Data once it is no longer needed or after expiration of the applicable retention periods.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We may use third-party companies, vendors, personnel and other service providers to facilitate our Services, provide Services on our behalf, analyze how our Services are used, and provide similar third-party services (collectively, “Service Providers”). These Service Providers may have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ This section describes when we may disclose Personal Data: Service Providers. We may disclose Personal Data with Service Providers who are working on our behalf (e.g., billing and payment service providers, cloud providers, communications providers). Your data is never used to train third-party AI models. Customers. If a customer of Lexi (e.g., your law firm or employer) has given you access to the Services, we may disclose certain information about you (e.g., your account information) with that Customer to satisfy our contractual obligations. Protection of Lexi and Others. We may disclose your information to protect the rights, property, or personal safety of Lexi, its agents and affiliates, its users, and the public. This includes exchanging information with other companies and organizations for fraud protection and similar purposes. Business Transfers. We may disclose your Personal Data in connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company. Affiliates. We may disclose Personal Data with our affiliates who use Personal Data as set out in this Privacy Policy. Others with Your Consent. We may share your Personal Data with other third parties with your express consent.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ The Services may operate on, with or using application programming interfaces and other services operated or provided by third parties ("Third-Party Services"), including without limitation through integrations or connectors to such Third-Party Services that are provided by Lexi. At this time, Lexi may use OpenAI or Anthropic LLMs as Third-Party Services to generate Outputs. These providers do not use your data to train their models, and all shared data is deleted after 30 days. Lexi is not responsible for the operation of any Third-Party Services nor the availability or operation of the Services to the extent such availability and operation is dependent upon Third-Party Services. Any Third-Party Services are subject to their own terms and conditions. Lexi does not make any representations or warranties with respect to Third-Party Services.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ D. Payment Processor. We use third party payment processors (each, a "Payment Processor") to bill you through a payment account linked to your account. The processing of payments will be subject to the terms, conditions and privacy policies of the Payment Processor, in addition to these Terms. Unless otherwise indicated, our current Payment Processor is Stripe, and your payments are processed by Stripe in accordance with Stripe's terms of service and privacy policy.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Your information, including Personal Data, may be transferred to, and maintained on, computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including Personal Data, to the United States and process it there. Lexi will take steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We may use third-party web analytics and product experience services on the Services, such as those of Google Analytics, Microsoft Clarity, Contentsquare, and PostHog. These vendors use technology to help us analyze how users use the Services, including by noting the third-party website from which you arrive. Some of these services may use cookies and similar technologies and may record or replay your interactions with the Services (such as page navigation, clicks, and scrolling) to help us understand and improve user experience. The information collected by such technology will be disclosed to or collected directly by these vendors, who use the information to evaluate your use of the Services.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ When you sign up for any of our Paid Services, our third-party payment processor, Stripe, Inc. (“Stripe”), collects and processes your payment-related information, such as your name, email, billing address, credit/debit card or banking information, or other financial information. Stripe’s privacy policy is available at stripe.com/privacy .” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ The Services may contain links to third-party websites or services. We are not responsible for the content or practices of those websites or services. The collection, use, and disclosure of your information by third parties will be subject to the privacy policies of the third-party websites or services, and not this Policy. We urge you to read the privacy and security policies of these third parties before providing information to them.” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “ Duplicate or erroneous charge — you were charged twice for the same billing period, or charged after a confirmed cancellation. Service never delivered — you paid for a Paid Service but were never able to access it due to a fault attributable solely to Lexi that we were unable to resolve. Unauthorized or fraudulent charge — your payment instrument was used without your authorization, subject to verification and investigation. Prolonged service outage attributable to Lexi — the Services were materially unavailable for an extended continuous period due to a fault caused by Lexi (excluding outages caused by Third-Party Services, your internet connection, scheduled maintenance, or force-majeure events). Any refund or service credit in this case is at Lexi's sole discretion. Lexi-initiated discontinuation — as set out in Section 11.A, if Lexi discontinues the Services before the end of a fixed term you have paid for, we will refund the pro-rata unused portion.” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “ B. Cancellation. You may cancel your Paid Services at any time from your account settings or by contacting us at hi@getlexi.io. Your cancellation will take effect at the end of the then-current billing period (monthly or annual), and you will retain access to the Paid Services until that period ends. If you do not pay for your Paid Services in a timely manner, we reserve the right to suspend such Paid Services.” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ (i) Eligibility — when a refund may be issued. Lexi will consider a refund only in the following cases:” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “ C. Refund Policy. All payments made to Lexi are final and non-refundable, except in the limited circumstances set out in this Section. By purchasing a Paid Service, you acknowledge that the Services are digital and consumed immediately upon access, and you waive any right to a refund except as expressly provided below or as required by applicable law (including the Consumer Protection Act, 2019 and the Consumer Protection (E-Commerce) Rules, 2020 of India).” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “ A. Payment. Certain parts of the Services are paid or premium services. You can add paid features to your account ("Paid Services"). We will automatically bill you from the date you sign up for a Paid Service, and on each periodic renewal until cancellation. If you are on an annual plan, we will send you a notice email reminding you that your plan is about to renew within a reasonable period of time prior to the renewal date. You are responsible for all applicable taxes, and we will charge tax when required to do so. Some countries have mandatory local laws regarding your cancellation rights, and this paragraph does not override these laws.” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “ E. Changes. We may change the fees in effect on renewal of your subscription based on our business needs, but we will give you reasonable notice of such changes via an in-app notification or message to the email address associated with your account, and you will have the opportunity to cancel your subscription before the new fee comes into effect.” | Captured 2026-09-25Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.