Privacy, Terms, & Security.

LexAlert Inc. (“LexAlert”, “we”, “our”) operates the LexAlert platform, a software-as-a-service that monitors public social media platforms (Reddit, X, Quora, Avvo Q&A, and others) for legal intent signals and assists law firms in drafting compliant outreach responses. This Privacy Policy explains how we collect, use, and protect information in connection with our services.

For questions, contact us at admin@lexalert.ai.

From law firm clients:

• Name, email address, and phone number of firm contacts
• Law firm name, size, and practice areas
• Billing information (processed by our payment processor — not stored by LexAlert)
• Platform connection metadata — which accounts you have linked through the LexAlert browser extension and per-device session tokens. We do not collect or store your platform passwords; you authenticate in your own browser
• Configured keywords, source targets, and system prompts

From platform operations:

• Public posts identified as matching your firm's criteria across every active source (publicly available content)
• AI-generated draft responses and your edits / approvals / rejections
• Audit logs: timestamps, action types, post identifiers
• Usage data: API calls, pipeline stage throughput, error rates

• To operate and maintain the LexAlert pipeline for your firm
• To deliver lead notifications to your Signal Desk dashboard and by email
• To generate AI-drafted responses using your firm's configured prompts
• To enforce compliance rules in the Gate stage
• To maintain immutable audit logs as required for professional accountability
• To diagnose and fix technical issues
• To communicate with you about your account and service updates

We do not sell your information to third parties. We do not use your client data to train AI models without explicit opt-in consent.

Post data and draft responses are retained for 90 days after the pipeline processes them, then permanently deleted. Audit logs are retained for 24 months. Account data is retained until account termination plus 30 days.

We use the following third-party services to operate LexAlert:

• Anthropic API — AI classification and response drafting (Claude Haiku, Claude Sonnet)
• Reddit, X, Quora, Avvo — Source monitoring via official APIs and the LexAlert browser extension operating within your own signed-in browser session
• Resend — Transactional email delivery (lead notifications and account email)
• Stripe — Payment processing (billing details are handled by Stripe and not stored by LexAlert)
• Supabase / PostgreSQL — Database and authentication (production)

Each service has its own privacy policy. We choose providers that meet appropriate security standards for B2B SaaS.

You connect your platform accounts through the LexAlert browser extension in your own browser, so your platform passwords never reach our servers. Session tokens and any service secrets we do hold never appear in logs, error messages, or API responses. We use HTTPS for all data in transit, and data in our managed database is encrypted at rest. Access to production systems is restricted to authorized personnel only. See the Security section below for details.

You have the right to access, correct, or delete your personal information held by LexAlert. To exercise these rights, contact admin@lexalert.ai. We will respond within 30 days.

We will notify clients of material changes to this Privacy Policy by email at least 30 days before the change takes effect.

By accessing or using LexAlert, you agree to be bound by these Terms of Service. If you are accepting on behalf of a law firm or other legal entity, you represent that you have authority to bind that entity.

LexAlert provides software that monitors public social media platforms (Reddit, X, Quora, Avvo Q&A, and additional platforms added over time) for legal intent signals, generates AI-assisted draft responses, and delivers them to law firm users for review and optional posting. LexAlert is a drafting and monitoring tool. It does not practice law, provide legal advice, or act as legal counsel.

You acknowledge and agree that:

• All content posted via LexAlert is posted by the attorney using their account on the source platform
• The attorney is the professional of record for all posted responses
• You are solely responsible for compliance with applicable bar rules, ethics rules, and advertising regulations in your jurisdiction
• LexAlert's compliance gate does not guarantee compliance with all applicable rules — it enforces a configurable subset of rules and is not a substitute for legal judgment
• Auto-post mode, if enabled, remains the attorney's responsibility

You agree not to:

• Use LexAlert to post spam, misleading content, or content that violates the source platform's Terms of Service
• Use LexAlert to contact individuals who have explicitly opted out of attorney contact
• Attempt to reverse-engineer, copy, or resell the LexAlert platform
• Share your credentials with third parties outside your law firm
• Use LexAlert in ways that violate applicable law or bar rules

LexAlert retains all intellectual property rights in the platform, pipeline architecture, and software. You retain ownership of your firm's system prompts, keywords, and any content you create. AI-generated draft responses are provided to you as a tool and are not claimed by LexAlert.

To the maximum extent permitted by law, LexAlert shall not be liable for any indirect, incidental, special, or consequential damages arising from your use of the service, including but not limited to bar complaints, client disputes, or regulatory actions arising from content posted using LexAlert. You use the service at your own professional risk.

Either party may terminate service with 30 days written notice. LexAlert may suspend service immediately for violations of these Terms or applicable law. Upon termination, your data will be deleted per the Privacy Policy retention schedule.

These Terms are governed by the laws of the State of Delaware, without regard to its conflict of laws provisions. Disputes shall be resolved by binding arbitration in Delaware, except where prohibited by law.

We will notify clients of material changes to these Terms by email at least 30 days before the change takes effect. Continued use after the effective date constitutes acceptance of the updated Terms.

For legal inquiries: admin@lexalert.ai.

LexAlert posts to the platforms you monitor (Reddit, X, Quora, Avvo) through the LexAlert browser extension running in your own browser, where you are already signed in. Your platform passwords are never transmitted to or stored on LexAlert's servers — they never leave your browser.

Each extension is paired to your firm with a per-device session token. That token is scoped to your firm, is never shared across firms, never appears in URLs or access logs, and can be revoked at any time — revoking a session immediately stops any further action from that device. Any secrets LexAlert does hold (for example, internal service API keys) are kept in restricted environment configuration, are never returned in API responses, and are never written to logs. Data stored in our managed Postgres database is encrypted at rest by the database provider.

Every approval, edit, rejection, post, and compliance-gate decision is appended to an immutable audit log with the attorney's identity, a timestamp, the platform, the post identifier, and (for edits) the diff. The log is append-only — no row is ever updated or deleted. CSV export is available on request.

The compliance Gate is a deterministic Python rules engine, not an LLM. Its checks are line-for-line auditable. If a bar investigator asks why a particular post was sent, we can show them the rules that fired and the values that passed.

Production database access is restricted to a small set of authorized engineers via Railway and Supabase IAM. Supabase Row-Level Security (RLS) enforces tenant isolation at the DB layer in addition to application-layer query scoping.

SOC 2 Type II is in progress. We will publish our completion status on this page when available. In the interim, we contractually agree to applicable security controls in customer DPAs.

Suspect a security issue? Email admin@lexalert.ai. We respond to all reports within one business day.

The Refer a Firm program (the “Program”) lets an eligible LexAlert customer (the “Referrer”) share a personal link or send an email invitation to another law firm (the “Referred Firm”). When a Referred Firm signs up through that link or invitation, the Referred Firm receives a discount on its onboarding fee and the Referrer may earn a service credit, on the terms below.

• Referrers must hold an active, paid LexAlert subscription in good standing at the time of the referral and at the time the credit is earned.
• A Referred Firm must be a new LexAlert customer that has not previously held an account or been referred by another Referrer or partner.
• A Referrer may not refer itself, an affiliate, or a firm under common ownership or control.

• The Referrer's credit equals one month of the Referrer's then-current subscription plan fee and is applied to the Referrer's next invoice.
• The credit is earned only after the Referred Firm has remained a paying customer for 30 consecutive days from its first subscription payment (the “hold period”).
• One credit per Referred Firm.
• No more than 12 credits may be earned per Referrer per calendar year.
• Credits are non-transferable, have no cash value, cannot be redeemed for cash or refunded, and expire when the Referrer's account closes for any reason.
• Where a signup is attributed to a LexAlert Partner Program participant, the Partner Program governs and no Referrer credit is earned.

The Referred Firm receives the onboarding-fee discount stated on the LexAlert pricing page at the time of signup. The discount applies once, to the onboarding fee only, and has no cash value.

The Referrer's firm name is displayed to anyone who opens the Referrer's link. By participating, the Referrer consents to that display.

The credit is a discount on LexAlert software fees in recognition of a product recommendation. Nothing under this Program is payment for recommending, procuring, or referring any lawyer's legal services, and no legal fees are shared or divided between firms under this Program. Each participant remains solely responsible for compliance with the professional-conduct rules of its jurisdiction.

LexAlert may void any credit, and may suspend or remove a Referrer from the Program, where it reasonably determines that a referral is fraudulent, self-referred, made through spam or unsolicited bulk messaging, or otherwise abusive.

LexAlert may modify or end the Program at any time. Credits already earned will be honoured; credits still within the hold period will be honoured if the Referred Firm completes the hold period.