LexHelps

Privacy Policy

Effective September 18, 2026

How LexHelps collects, uses, shares, retains, and protects personal data across its website, mobile applications, case workspaces, document tools, AI features, collaboration, and LexSpace.

LexHelps, Inc.
651 N. Broad St., Suite 206
Middletown, DE 19709, United States
support@lexhelps.com | lexhelps.com

Privacy in plain language

LexHelps processes sensitive official-life information to provide user-requested case, document, AI, collaboration, and community features. We do not sell personal data or use private case content for cross-context behavioral advertising. AI and infrastructure providers receive only the data needed for their functions, subject to applicable contracts and settings. You can request access, correction, deletion, or other rights by contacting support@lexhelps.com.

1. Who We Are and Scope

LexHelps, Inc. is a Delaware corporation with a mailing address at 651 N. Broad St., Suite 206, Middletown, DE 19709, United States. In this Policy, “LexHelps,” “we,” “us,” and “our” refer to LexHelps, Inc.

This Privacy Policy applies to lexhelps.com, our mobile applications, case workspaces, document tools, AI-assisted features, LexSpace, collaboration features, support channels, and related services that link to this Policy (collectively, the “Services”). It does not govern a third party's independent service or website.

For direct consumer Services, LexHelps generally determines why and how personal data is processed and acts as the controller or business. Accepting our Terms is not consent to every form of processing. When consent is required, we request it separately.

2. Roles and Enterprise Customers

When a law firm, employer, mobility provider, professional, or other organization provides the Services to an individual under a business agreement, that organization may control some or all case data and LexHelps may process the data on its behalf. The agreement and any data processing addendum determine the parties' roles for that processing.

If an enterprise customer controls the data, requests concerning that data may need to be directed to the customer. LexHelps will assist the customer as required by contract and applicable law. This Policy does not override a signed data processing agreement.

3. Personal Data We Collect

The data collected depends on the features used. Because official procedures vary, uploaded documents can reveal more sensitive information than ordinary consumer applications.

CategoryExamplesTypical context
Account and contactName, email, username, language, country or region, account identifiersAccount creation, authentication, communication, personalization
Profile and case factsNationality, residence, family, employment, education, travel, financial or procedural factsEligibility, case setup, tailored steps, next actions
Documents and extracted dataPassports, residence cards, certificates, letters, forms, images, translations, metadata, OCR textDocument IQ, readiness review, evidence organization, case files
Messages and collaborationChats, prompts, AI responses, comments, invitations, files, participant actionsAI assistance, case collaboration, support, auditability
LexSpace contentPublished procedures, posts, ratings, status, contributor profile, expert verification informationCommunity discovery, adaptation, moderation, provenance
Inferences and workflow statePossible eligibility, missing evidence, stage, responsible actor, risk flags, deadlines, recommendationsPersonalized case execution; not an official or final legal decision
Technical and usageIP address, device and browser, OS, app version, timestamps, logs, feature usage, crash and security eventsSecurity, diagnostics, reliability, analytics, abuse prevention
LocationApproximate location from IP; precise device location only when a feature requests it and permission is grantedJurisdiction selection and local resources
Transactions and supportSubscription status, purchase metadata, support requests, correspondence; payment tokens rather than full card data where handled by app stores or processorsBilling, customer support, refunds, recordkeeping

Camera and file access

If you use a camera or file picker, the device requests permission so you can capture or select a document. LexHelps processes the image or file you choose to submit. Any information visible in the submitted image may be processed; frame documents carefully and avoid including unnecessary people or background information.

4. Sources of Personal Data

We collect data directly from you; from your device and use of the Services; from people you invite to a case; from an enterprise customer or professional providing the Services; from identity, payment, support, and infrastructure providers; and from public or official sources when needed to maintain procedural information.

If another person provides your data, that person or organization is responsible for having authority to do so and for giving any required notice.

5. Why We Process Data and Legal Bases

Where the GDPR, UK GDPR, or similar law applies, the legal basis depends on the purpose and context. The following table summarizes the principal purposes and bases.

PurposeData commonly usedLegal basis where applicable
Provide accounts and requested featuresAccount, profile, cases, documents, messages, location choices, workflow stateContract; steps requested before contract; consent where specifically required
Run AI, OCR, translation, and tailoringSelected prompts, documents, extracted data, case context, outputsContract; legitimate interests in delivering and improving requested functionality; explicit consent or another condition for protected sensitive data where required
Secure and operate the ServicesIdentifiers, logs, IP, device, access events, content relevant to abuseLegitimate interests in security, fraud prevention, reliability, and legal protection; legal obligation
Support and service communicationsContact details, account, correspondence, diagnosticsContract; legitimate interests; legal obligation
Analytics and product improvementUsage, diagnostics, pseudonymized interactions, feedbackLegitimate interests; consent for non-essential tracking where required
MarketingEmail and communication preferencesConsent where required; otherwise legitimate interests subject to opt-out
Compliance and disputesRecords relevant to taxes, rights requests, claims, fraud, lawful requestsLegal obligation; legitimate interests; establishment, exercise, or defense of legal claims

When we rely on legitimate interests, we consider the purpose, necessity, and impact on individuals. You may object as described below. Withdrawal of consent does not affect processing completed before withdrawal.

6. Sensitive and Criminal-Record Data

Documents used in immigration, tax, employment, family, and other official procedures may contain government identifiers, nationality or origin information, health or disability information, financial data, family information, biometric-like document images, or criminal-record information. LexHelps does not use document images to create biometric identifiers unless a clearly disclosed feature specifically requires and lawfully supports that processing.

Where special-category data is protected by Article 9 of the GDPR or an equivalent rule, we process it only when an applicable condition is available, such as explicit consent where appropriate, necessity for legal claims, or another condition provided by law. Criminal-record data is processed only where authorized by applicable law and with appropriate safeguards.

Upload only information reasonably necessary for the procedure. Redact unrelated sensitive information when possible. A professional or enterprise customer may impose additional instructions.

7. AI and Automated Processing

LexHelps uses AI and automated tools for document extraction, OCR, translation, simplification, classification, chat responses, procedural tailoring, source organization, calculations, missing-evidence detection, and workflow recommendations.

To provide these features, selected prompts, documents, extracted text, case context, and outputs may be sent to approved AI providers, including OpenAI. We seek to limit the transmitted context to what is reasonably needed. Provider retention and access depend on the applicable service, account configuration, legal requirements, and contract.

LexHelps currently uses OpenAI business/API services for which OpenAI states that API inputs and outputs are not used to train its models by default unless the customer opts in. LexHelps does not opt private case content into third-party model training without a separate, legally valid authorization and corresponding notice.

AI outputs can be inaccurate, incomplete, mistranslated, or outdated. LexHelps does not use AI to make a solely automated decision that produces legal or similarly significant effects on you. Eligibility indicators, readiness scores, classifications, and recommended actions assist the user or professional; they are not government decisions, legal advice, or guaranteed outcomes.

LexHelps may review limited interactions for security, support, quality assurance, and system improvement. Where practicable, we use minimization, pseudonymization, sampling, and access restrictions. We do not use private case content for unrelated advertising.

8. Collaboration and LexSpace

When you invite a lawyer, employer, adviser, family member, or other participant to a case, the participant can access information according to the permissions shown in the Service. You are responsible for choosing participants and removing access when it is no longer appropriate.

LexSpace can contain public or shared procedures, posts, ratings, comments, contributor profiles, and verification information. Content you intentionally publish may be visible to other users and may be copied or adapted through enabled features. Do not publish confidential documents, privileged communications, or another person's personal data without authority.

Experts and professionals are independent controllers for personal data they process for their own professional purposes unless a written agreement states otherwise. Their privacy notices and professional duties may also apply.

9. How We Disclose Personal Data

LexHelps may disclose personal data to the following recipients for the stated purposes. We do not disclose every category to every recipient.

RecipientExamples / purpose
Infrastructure and storageHetzner and supporting data systems used to host, secure, back up, and operate the Services
AI providersOpenAI and approved alternatives used for requested AI-assisted functions
Identity providersGoogle or Apple when you choose their sign-in service
App stores and payment providersApple, Google, or other processors for purchases, subscription status, payment operations, and fraud prevention
Operational and support providersDiagnostics, communications, security, support, and restricted infrastructure notifications, including Telegram where configured for operational alerts
People and organizations you chooseInvited case participants, professionals, employers, advisers, or recipients of content you share
Public and LexSpace usersInformation you intentionally publish or make publicly visible
Professional advisers and authoritiesLawyers, auditors, insurers, regulators, courts, law enforcement, or government bodies when lawful and necessary
Corporate transaction partiesPotential or actual investors, buyers, successors, or advisers subject to appropriate safeguards

Service providers process data under contracts and instructions appropriate to their roles. Some providers act as independent controllers for their own account, payment, or legal obligations.

10. Sales, Advertising, and Profiling

LexHelps does not sell personal data for money and does not share personal data for cross-context behavioral advertising. We do not use private case documents, chats, or workflow state to serve targeted advertisements.

We may use contextual communications about LexHelps features and measure our own service performance. If our practices change in a way that creates a legal opt-out right, we will update this Policy and provide the required control before or when the change takes effect.

LexHelps does not knowingly sell or share the personal data of individuals under 16.

11. International Transfers

LexHelps is a U.S. company and provides Services internationally. Primary application infrastructure is hosted in Germany, but personal data may also be processed in the United States and other countries where LexHelps, service providers (including AI providers), enterprise customers, or invited participants operate.

When EEA, UK, or Swiss personal data is transferred to a country not recognized as providing adequate protection, LexHelps uses an available legal mechanism as required, such as approved Standard Contractual Clauses, the UK International Data Transfer Addendum or agreement, an applicable adequacy framework, or another lawful safeguard. Supplementary technical, contractual, and organizational measures are used where appropriate.

You may request information about applicable transfer safeguards by contacting support@lexhelps.com. International transfer is not based merely on acceptance of this Policy.

12. Retention and Deletion

We keep personal data only for as long as reasonably necessary for the purpose collected, subject to legal, security, contractual, and technical requirements. Because retention depends on the feature and procedure, the criteria below apply unless a shorter period is stated in the Service or an enterprise agreement.

DataRetention criteria
Account and profileWhile the account is active and for a limited period after closure for recovery, security, disputes, or law; then deleted or de-identified
Cases, documents, chats, and embeddingsWhile needed for the user's workspace, requested service, or enterprise instruction; removed from active systems after valid deletion, subject to exceptions
AI inputs and outputsGenerally linked to the relevant case or interaction; provider-side retention follows the configured service and applicable contract
LexSpace contentUntil removed, account closure, moderation, or loss of purpose; limited copies may persist in adaptations, records, or backups
Security and technical logsFor a period proportionate to security, reliability, abuse prevention, investigation, and legal needs
Transactions and tax recordsFor the period required by accounting, tax, chargeback, and consumer law
Support and rights requestsUntil resolved and for a proportionate period needed to document the response and protect legal rights
Encrypted backupsUntil they expire under backup retention schedules; not restored for ordinary use, and deletion controls are reapplied after restoration where required

We may retain limited data longer when required by law, to protect users and systems, investigate fraud or abuse, enforce agreements, or establish, exercise, or defend legal claims. When feasible, retained data is restricted or de-identified.

13. Security

LexHelps uses administrative, technical, and organizational safeguards designed for the sensitivity and risk of the data processed. These include HTTPS/TLS, authorization checks for private resources, role separation, restricted administrative access, monitoring, and encrypted backups stored separately from production systems.

No online service is completely secure. Protect your credentials and devices, review case invitations, remove unnecessary participants, and avoid publishing sensitive information in LexSpace. Report suspected compromise or vulnerabilities to support@lexhelps.com. Additional information appears in the LexHelps Trust & Security statement.

14. Cookies and Similar Technologies

The website and applications may use local storage, SDKs, cookies, or similar technologies for authentication, security, preferences, diagnostics, analytics, and performance. Essential technologies operate because they are necessary to provide or secure the Service.

Where required, LexHelps requests consent before using non-essential analytics or similar technologies. You can use the consent interface, device settings, or browser controls to manage available choices. Blocking essential storage may prevent account or security features from working.

We honor legally required opt-out preference signals for processing activities subject to those signals. We currently do not sell personal data or use it for cross-context behavioral advertising.

15. Your Privacy Rights

Depending on your location and the processing, you may have rights to know or access personal data; correct inaccurate data; delete data; restrict or object to processing; receive portable data; withdraw consent; opt out of sale, targeted advertising, or certain profiling; appeal a denied request; and complain to a regulator.

Submit a request to support@lexhelps.com with the subject “Privacy Request”. Describe the right and account involved. We may verify identity and authority using information proportionate to the request. An authorized agent may act where law permits, but we may request proof of authority and direct verification from the individual.

Response times. We respond within the deadline set by the law that applies to your request. Under the GDPR and UK GDPR that is generally one month, which may be extended by up to two further months for complex or numerous requests. Under most U.S. state privacy laws it is generally 45 days, which may be extended once by a further 45 days where reasonably necessary. If we need more time, we will tell you why.

Rights are not absolute. We may deny or limit a request when an exception applies, including protection of another person's rights, security, fraud prevention, legal obligations, or legal claims. We will explain the basis and appeal options where required. We do not discriminate against users for exercising privacy rights.

16. EEA, UK, and Swiss Information

Individuals in the EEA or UK may have rights of access, rectification, erasure, restriction, objection, portability, withdrawal of consent, and protection concerning automated decision-making. You may lodge a complaint with the supervisory authority where you live or work or where an alleged infringement occurred.

Right to object. Where we rely on legitimate interests, you may object based on your particular situation. You may object to direct marketing at any time.

LexHelps' privacy contact is support@lexhelps.com.

17. U.S. State Privacy Notice

This section supplements the Policy for residents of U.S. states with comprehensive privacy laws, where those laws apply to LexHelps. The categories collected, purposes, sources, and recipients are described in Sections 3 through 10.

During the preceding 12 months, LexHelps may have collected identifiers and contact data; customer records; internet or electronic activity; approximate location; professional, educational, employment, immigration, family, and financial information; user content and communications; government identifiers and other sensitive data contained in submitted documents; transaction information; and inferences used to organize cases and recommend next steps.

These categories may have been disclosed for business purposes to infrastructure, AI, identity, payment, security, support, professional, enterprise, and user-selected recipients described in Section 9. LexHelps has not sold personal information or shared it for cross-context behavioral advertising during the preceding 12 months.

Where applicable, residents may request confirmation, access, correction, deletion, or portability; opt out of sale, targeted advertising, or profiling in furtherance of decisions producing legal or similarly significant effects; limit certain uses of sensitive personal information; and appeal a decision. Because LexHelps does not currently conduct sale or targeted advertising, those opt-outs may not be relevant to current processing.

California residents may also request the categories and specific pieces of personal information collected, sources, business or commercial purposes, and categories of recipients. LexHelps uses sensitive personal information only for providing requested Services, security, legal compliance, and other purposes permitted without a right to limit, unless we provide a separate notice.

Requests and appeals may be submitted to support@lexhelps.com. If an applicable law requires an additional method, LexHelps will provide it in the Service or state-specific notice.

18. Children's Privacy

The Services are intended for adults aged 18 and older and are not directed to children. LexHelps does not knowingly permit a person under 18 to create an ordinary account or knowingly collect a child's personal data through the ordinary Services.

If LexHelps later offers an authorized workflow involving a minor, it will provide appropriate notice, consent, age-assurance, and safeguards before collecting the data. If you believe a child has provided personal data without appropriate authorization, contact support@lexhelps.com.

19. Changes to This Policy

We may update this Policy to reflect changes in law, providers, technology, or the Services. The effective date will be updated. For material changes, we will provide notice through the website, application, email, or another appropriate channel before the change takes effect when required.

If a new purpose is materially incompatible with the original purpose, we will provide additional notice and obtain consent where required. Continued use does not create consent where applicable law requires an affirmative choice.

20. Contact

Questions, complaints, requests, or concerns about this Policy or personal-data processing may be sent to:

LexHelps, Inc.

651 N. Broad St., Suite 206

Middletown, DE 19709

United States

Email: support@lexhelps.com

Website: lexhelps.com

Support: lexhelps.com/support

If your data was provided through a law firm, employer, mobility provider, or other enterprise customer, you may also contact that organization directly.

© 2026 LexHelps, Inc. All rights reserved.