Privacy Policy

Introduction

LexChest ("we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our platform and services. By accessing LexChest, you agree to the terms described here.

Information We Collect

We may collect the following categories of personal information:

• Account data — name, email address, password hash, and profile details provided at registration.
• Usage data — pages visited, features used, session duration, and interaction logs.
• Payment data — billing name, address, and tokenized card details processed by Stripe. We never store raw card numbers.
• Document data — legal documents you upload or generate through the platform.
• Device & technical data — IP address, browser type, operating system, and referrer URL.

How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve our platform and services.
• Process payments and manage subscriptions.
• Send transactional emails (receipts, security alerts, service updates).
• Respond to support requests and communications.
• Monitor for fraud, abuse, and security threats.
• Comply with legal obligations.

Legal Basis for Processing (PIPEDA)

LexChest operates in compliance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). We collect, use, and disclose personal information only with your knowledge and consent, except where otherwise permitted by law. You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice.

Data Sharing

We do not sell your personal information. We may share data with trusted third parties solely to deliver our services:

• Stripe — payment processing.
• Supabase — secure database hosting.
• Vercel / Netlify — application hosting and edge delivery.
• Analytics providers — aggregated, anonymised usage statistics.

All third-party processors are bound by data processing agreements and are prohibited from using your information for their own purposes.

Data Retention

We retain personal information for as long as your account is active or as needed to provide services. Account data is deleted within 90 days of a verified deletion request. Aggregated or anonymised data may be retained indefinitely for analytical purposes. Backup copies may persist for up to 30 additional days after deletion.

Your Rights

Under PIPEDA and applicable provincial laws, you have the right to:

• Access — request a copy of the personal information we hold about you.
• Correction — request that inaccurate or incomplete information be corrected.
• Deletion — request deletion of your personal data, subject to legal retention obligations.
• Portability — receive your data in a structured, machine-readable format.
• Withdrawal of consent — opt out of non-essential data processing at any time.

To exercise any of these rights, please contact us at privacy@lexchest.com. We will respond within 30 days.

Cookies

LexChest uses cookies and similar tracking technologies to maintain sessions, remember preferences, and analyse traffic. You can control cookie behaviour through your browser settings. Disabling cookies may affect certain platform features. We do not use cookies for cross-site advertising.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to our Privacy Officer: