1. Who We Are
LexChest Legal Technologies ("LexChest," "we," "us") operates lexchest.com and provides legal document templates for individuals and businesses across North America. We are not a law firm.
Contact: privacy@lexchest.com
2. What We Do NOT Collect
We are architected around minimal data. We do not collect:
- Your name, address, or personal contact information
- The content of your legal documents (generation is client-side only)
- Any information about individuals named in your documents
- Your payment card details (processed entirely by Stripe)
3. What We Collect Automatically
Standard server logs: IP address (anonymized), browser type, pages visited, timestamps. Used for security monitoring and aggregate analytics only.
Fraud detection: A non-reversible session fingerprint (hash of browser characteristics — no PII) is used to detect purchase rate abuse.
IP logging: For fraud prevention, your IP address may be collected via third-party API (ipify.org / ipapi.co) and stored locally in your browser only.
4. Browser Storage (Local/Session)
All document customization data stays in YOUR browser only:
fv_jurisdiction: your selected jurisdiction codefv_tokens: your single-use tokens (UUID format, no PII)fv_intake_[key]: form progress saved locally
You can clear this anytime via your browser settings.
5. Payment Processing
Payments are processed by Stripe, Inc. LexChest receives confirmation of payment status but never processes or stores card details. Stripe's privacy policy governs all payment data. Learn more at stripe.com/privacy.
6. Cookies
We use:
- Strictly necessary: session tokens (no tracking cookies)
- Analytics: aggregate page view data (no individual tracking)
We do not use advertising cookies or sell data to ad networks.
7. Your Rights — Canadian Users (PIPEDA / Quebec Law 25)
Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Act Respecting the Protection of Personal Information in the Private Sector (Law 25), you have the right to:
- Access personal information we hold about you
- Correct inaccurate or incomplete data
- Withdraw consent to the collection or use of your personal information
- Request deletion of your personal information
- File a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca
8. Your Rights — California Users (CCPA)
Under the California Consumer Privacy Act (CCPA), California residents have the right to know what personal information is collected, delete personal information, and opt out of the sale of personal information. We do not sell personal data.
To submit a CCPA request, contact privacy@lexchest.com with "CCPA Request" in the subject line. We will respond within 45 days.
9. Data Retention
- Payment records: 7 years (legal/tax compliance)
- Server logs: 90 days, then permanently deleted
- Support emails: 3 years
10. Third-Party Services
LexChest uses the following third-party services:
- Stripe — payment processing
- Netlify — website hosting
- ipify.org / ipapi.co — IP address lookup for fraud prevention only
- Google Fonts — font delivery (Inter typeface)
11. Children's Privacy
LexChest is not intended for persons under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted information through our platform, please contact us at privacy@lexchest.com.
12. Changes to This Policy
Material changes to this Privacy Policy will be posted on this page with an updated effective date. Continued use of the platform after changes constitutes acceptance of the updated policy.
13. Contact
privacy@lexchest.com
LexChest Legal Technologies, Canada