LEXSGO LIMITED PRIVACY POLICY

Last Updated: December 20, 2025

1. INTRODUCTION

Welcome to Lexsgo Limited ("Lexsgo," "we," "us," or "our"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our legal technology platform and services (collectively, the "Services").

Lexsgo Limited is a private limited company incorporated in Kenya (Company Number: PVT-9L1QKQ2Y).

By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Services.

2. DEFINITIONS

For purposes of this Privacy Policy:

"Personal Data" means any information relating to an identified or identifiable natural person as defined under the Data Protection Act, 2019 of Kenya and other applicable data protection laws.
"Processing" means any operation performed on Personal Data, including collection, recording, organization, storage, adaptation, retrieval, use, disclosure, or erasure.
"Services" means our web-based legal technology platform, mobile applications, and all related services provided by Lexsgo.
"User" or "you" means any individual who accesses or uses our Services.
"Client" means any organization that subscribes to our Services.
"Authorized User" means individuals authorized by a Client to access and use the Services.

3. INFORMATION WE COLLECT

3.1 Information You Provide to Us

We collect information that you provide directly to us, including:

Account Information:

Name and contact details (email address, phone number, postal address)
Company or organization name and details
Job title and professional information
Username and password
Billing and payment information

Professional and Legal Documents:

Legal documents, contracts, agreements, and related materials uploaded to the platform
Case files, matter details, and related documentation
Communications and correspondence related to legal matters
Metadata associated with uploaded documents

Communications:

Information contained in messages, comments, or feedback you send to us
Customer support inquiries and communications
Survey responses and feedback

3.2 Information We Collect Automatically

When you access or use our Services, we automatically collect certain information:

Usage Information:

Log data (IP address, browser type, operating system)
Device information (device type, unique device identifiers)
Access times and dates
Pages viewed and features used
Search queries and interactions with the Services

Cookies and Similar Technologies:

We use cookies, web beacons, and similar tracking technologies to collect information about your browsing activities
You can control cookie preferences through your browser settings

3.3 Information from Third Parties

We may receive information about you from third parties, including:

Identity verification services
Payment processors
Professional reference databases
Third-party integrations you authorize

4. HOW WE USE YOUR INFORMATION

We process your Personal Data for the following purposes:

4.1 Service Provision and Performance

To provide, maintain, and improve our Services
To process and complete transactions
To manage user accounts and authentication
To enable document storage, management, and collaboration features
To provide customer support and respond to inquiries

4.2 Legal and Compliance Obligations

To comply with legal obligations under Kenyan law and other applicable jurisdictions
To enforce our Terms of Use and other agreements
To protect our rights, property, and safety, and that of our users
To prevent fraud, abuse, and unauthorized access
To respond to lawful requests from public authorities

4.3 Communication and Marketing

To send administrative information, updates, and security alerts
To provide information about new features, products, or services (with your consent where required)
To conduct surveys and gather feedback
To send newsletters and promotional materials (you may opt-out at any time)

4.4 Analytics and Improvement

To analyze usage patterns and trends
To develop new features and improve existing Services
To conduct research and data analysis
To generate anonymized and aggregated statistics

5. LEGAL BASIS FOR PROCESSING

Under the Data Protection Act, 2019 and other applicable laws, we process your Personal Data based on one or more of the following legal grounds:

Consent: Where you have given explicit consent for specific processing activities
Contract Performance: Where processing is necessary to perform our contractual obligations to you
Legal Obligation: Where processing is required to comply with legal obligations
Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these are not overridden by your fundamental rights and freedoms
Vital Interests: Where processing is necessary to protect vital interests

6. DATA SHARING AND DISCLOSURE

6.1 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

6.2 Service Providers

We may share information with trusted third-party service providers who perform services on our behalf, including:

Cloud hosting and storage providers
Payment processors
Analytics providers
Customer support platforms
Email and communication services

These service providers are contractually obligated to protect your information and use it only for the purposes for which it was disclosed.

6.3 Within Client Organizations

If you are an Authorized User accessing the Services on behalf of a Client organization, we may share your information with other Authorized Users within that organization as necessary to provide the Services.

6.4 Legal Requirements

We may disclose your information if required to do so by law or in response to:

Valid legal processes (subpoenas, court orders, warrants)
Requests from government authorities or regulatory bodies
Protection of our rights, property, or safety
Investigation of fraud or security issues

6.5 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

6.6 Aggregated and De-identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you for research, analytics, marketing, or other business purposes.

7. DATA SECURITY

7.1 Security Measures

We implement appropriate technical and organizational measures to protect your Personal Data against unauthorized access, alteration, disclosure, or destruction, including:

Encryption of data in transit and at rest
Secure access controls and authentication mechanisms
Regular security assessments and penetration testing
Employee training on data protection and security
Incident response and breach notification procedures
Physical security measures for our facilities and systems

7.2 Legal Professional Privilege

We recognize the sensitive nature of legal documents and communications. We implement enhanced security measures to protect materials that may be subject to attorney-client privilege or legal professional privilege. However, you remain responsible for determining the appropriate classification and handling of such materials.

7.3 Limitations

While we strive to protect your Personal Data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information.

8. DATA RETENTION

We retain your Personal Data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Account Information: Retained for the duration of your account and for a reasonable period thereafter for legal and business purposes.
Legal Documents and Materials: Retained in accordance with your instructions, our Terms of Use, and applicable legal requirements. You may request deletion of specific documents at any time.
Usage and Log Data: Typically retained for 12-24 months unless required for longer periods for legal or security purposes.
Marketing Communications: Retained until you unsubscribe or request deletion.

When Personal Data is no longer needed, we will securely delete or anonymize it in accordance with our data retention and disposal policies.

9. YOUR RIGHTS AND CHOICES

Under the Data Protection Act, 2019 and other applicable laws, you have the following rights:

9.1 Access and Portability

Right to access your Personal Data
Right to receive a copy of your Personal Data in a structured, commonly used format
Right to data portability to another service provider

9.2 Correction and Update

Right to request correction of inaccurate or incomplete Personal Data
You can update most account information directly through your account settings

9.3 Deletion and Erasure

Right to request deletion of your Personal Data in certain circumstances
Note that we may be required to retain certain information for legal or regulatory purposes

9.4 Restriction and Objection

Right to request restriction of processing in certain circumstances
Right to object to processing based on legitimate interests
Right to object to direct marketing communications

9.5 Withdrawal of Consent

Where processing is based on consent, you have the right to withdraw consent at any time
Withdrawal does not affect the lawfulness of processing based on consent before withdrawal

10. INTERNATIONAL DATA TRANSFERS

Your Personal Data may be transferred to and processed in countries other than Kenya. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

Standard contractual clauses approved by relevant data protection authorities
Adequacy decisions recognizing equivalent data protection standards
Other legally approved transfer mechanisms

By using our Services, you consent to the transfer of your information to countries outside Kenya in accordance with this Privacy Policy.

11. CHILDREN'S PRIVACY

Our Services are not directed to individuals under the age of 18. We do not knowingly collect Personal Data from children. If you become aware that a child has provided us with Personal Data, please contact us immediately, and we will take steps to delete such information.

12. THIRD-PARTY LINKS AND SERVICES

Our Services may contain links to third-party websites, applications, or services that are not operated by us. This Privacy Policy does not apply to such third-party services. We encourage you to review the privacy policies of any third-party services you access.

13. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

Posting the updated Privacy Policy on our website
Sending email notification to your registered email address
Displaying a prominent notice within the Services

The "Last Updated" date at the top of this Privacy Policy indicates when it was last revised. Your continued use of the Services after any changes constitutes your acceptance of the updated Privacy Policy.

14. CONTACT US

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at naeem@lexsgo.com

15. SPECIFIC PROVISIONS FOR KENYAN USERS

This Privacy Policy complies with the Data Protection Act, 2019 of Kenya and regulations issued thereunder. As a data controller registered in Kenya, we are committed to protecting your Personal Data in accordance with Kenyan law.

Office of the Data Protection Commissioner Contact Information:

Website: www.odpc.go.ke
Email: info@odpc.go.ke
Physical Address: Nairobi, Kenya