Privacy Policy

1. Who we are

LexNZ is a New Zealand legal information platform operated by LexNZ Limited (“LexNZ”, “we”, “us”). We provide AI-assisted legal information based on New Zealand legislation. We are not a law firm and do not provide legal advice.

Privacy enquiries: privacy@lexnz.ai

2. What we collect

• Anonymous usage identifier: A random UUID stored in a cookie (lexnz_uid) to track your query quota. This is not linked to your name or email unless you sign in.
• Query text: The legal questions you submit. These are processed to generate responses and may be logged for service improvement.
• Usage logs: Timestamps, query counts, and response metadata stored to enforce fair-use quotas and improve accuracy.
• Account information (if signed in): Email address and name provided via Clerk authentication, used only for account management.
• Uploaded documents: Files you upload for analysis are processed in memory and not permanently stored after your session.

3. How we use your information

• To generate AI-assisted legal information responses
• To enforce per-user query quotas and rate limits
• To improve the accuracy and relevance of our legal information service
• To maintain service security and prevent abuse

We do not sell your personal information to third parties. We do not use your data for advertising.

4. Third-party processors

To provide our service, your query text may be processed by the following categories of third-party service providers, each bound by their own privacy obligations:

• AI processing services — query text is sent to AI providers to generate legal information responses. Query text is not linked to your name or email before transmission.
• Authentication provider — manages secure sign-in and account information if you create an account.
• Hosting and content delivery — the platform infrastructure and delivery network.

We do not sell your personal information to any third party. We only share what is necessary to operate the service. For a full list of our sub-processors, contact privacy@lexnz.ai.

5. Data retention

• Query logs and usage records: retained for 90 days, then deleted
• Account information: retained while your account is active
• Billing records (if applicable): retained for 7 years as required by NZ law
• Uploaded documents: not permanently stored; processed in-session only

6. Your rights (Privacy Act 2020)

Under the New Zealand Privacy Act 2020, you have the right to:

• Access personal information we hold about you
• Correct inaccurate personal information
• Request deletion of your data (subject to lawful retention requirements)
• Object to processing of your personal information

To exercise these rights, email privacy@lexnz.ai. We will respond within 20 working days as required by the Privacy Act 2020.

7. Security

We use HTTPS encryption for all data transmission, access controls on all data stores, and industry-standard security practices. In the event of a privacy breach that poses serious harm, we will notify affected individuals and the Office of the Privacy Commissioner (OPC) as required by the Privacy Act 2020.

8. Cookies

We use a single first-party cookie (lexnz_uid) to maintain your anonymous session and enforce query quotas. This cookie does not track you across other websites and contains only a random identifier. You can delete this cookie at any time via your browser settings.

9. Complaints

If you believe we have breached the Privacy Act 2020, please contact us at privacy@lexnz.ai first. If unresolved, you may complain to the Office of the Privacy Commissioner at privacy.org.nz.

10. Changes to this policy

We may update this policy. Material changes will be notified via the platform. Continued use after notification constitutes acceptance.