Privacy & Cookie Policy
How we handle your information, protect your privacy, and use cookies.
Last reviewed 21 October 2026
Privacy Policy
1. About this policy
Lexa AI by LexaBase is an AI-assisted platform for Indian legal research, statutory analysis, drafting, and related tools. This policy explains how we handle personal information when you visit our website, create an account, use our services, or purchase a subscription.
The service is operated by ALLMR Online, at 3, Little Gift, 19th Road, Khar (W), Mumbai 400052 ("LexaBase", "we", "us", or "our").
We handle personal information in accordance with applicable Indian law, including the Information Technology Act, 2000 and its applicable rules, and the Digital Personal Data Protection Act, 2023 (DPDP Act) and its rules as their relevant provisions take effect.
2. Information we collect
- Account details: your mobile number, authentication information, and account status.
- Content you provide: legal questions, chat history, matter details, statutory form entries, translation requests, and related saved work.
- Payment records: subscription details, transaction references, amounts, and payment status.
- Technical information: browser and device information, IP address, usage information, and error or security logs, where collected by our systems or providers.
- Communications: information you provide when contacting us.
Only provide personal or client information that you are authorised to share. Avoid unnecessary sensitive details or restricted material.
3. How we use your information
We use your information to operate your account, answer questions, save your work, process subscriptions, respond to support requests, troubleshoot problems, prevent misuse, and meet legal obligations.
Where consent is required, we will request it for the stated purpose. You may withdraw consent by contacting us. Withdrawal may affect features that require the information, but does not invalidate earlier lawful processing or prevent legally required retention. Reading this policy alone does not constitute consent to unrelated processing.
Google Analytics: Where enabled, we use Google Analytics to understand how visitors use LexaBase.com and improve our website and services. Google Analytics may use cookies and similar identifiers to collect information such as pages visited, interactions, browser and device details, and approximate location. This information is processed by Google and may be processed outside India. See how Google uses information from sites and apps that use its services and Google's Privacy Policy. Where required by applicable law, we obtain consent before enabling analytics cookies. You can manage cookies through your browser and opt out of supported browser-based Google Analytics collection using Google's opt-out browser add-on.
4. AI processing and sharing
We use AI models through OpenRouter to generate answers, summaries, analysis, and translations. Our policy is to use only inference endpoints covered by OpenRouter's Zero Data Retention (ZDR) policy. Relevant questions and conversation context are sent for processing under that policy. See OpenRouter's ZDR documentation for its scope and conditions.
ZDR applies to AI inference processing; it does not mean that your LexaBase account or saved conversations are never stored. Those records are handled as described in this policy.
OpenRouter and its model providers operate their own infrastructure under their own applicable terms. To the extent permitted by law, LexaBase does not assume liability for their independent conduct outside our control. This does not exclude our responsibility as a Data Fiduciary for processing on our behalf, or any other obligation or liability that cannot lawfully be excluded.
We may share necessary information with hosting and operational providers, payment providers, authorised support personnel, and advisers. Information may also be disclosed where required by law or valid legal process, or as part of a lawful business transfer with appropriate safeguards.
Our providers may process information outside India, subject to applicable transfer restrictions. External websites linked through research results have their own privacy policies.
Legal sources may contain personal information from public records. Requests to remove names or restrict access to judgments are addressed in section 10 below.
5. Payment gateways and processors
Payments are handled by the payment gateway shown at checkout. Depending on the provider and payment method, the gateway and participating banks or payment networks may process contact, payment, transaction, and device information. We receive the information needed to verify payments, activate subscriptions or credits, handle refunds and disputes, and maintain records.
Razorpay: Where your payment is routed through Razorpay, its Privacy Policy and Buyer Privacy Notice explain its handling of your payment information.
Easebuzz: Where Easebuzz is offered and used at checkout, Easebuzz Private Limited processes the relevant payment information under its Privacy Policy. This clause does not mean that both gateways process every payment.
Our checkout integration does not collect or store your full card number, CVV, UPI PIN, or banking password on LexaBase. Enter payment credentials only in the authorised payment interface. We obtain any consent required before sharing customer information for payment processing.
Payment and refund conditions are set out in the Payment and Refund Policy. Contact LexaBase for subscription cancellation or refund requests; for a gateway's own processing of your information, its privacy notice provides its contact and grievance channels.
6. Retention and security
We retain personal information only while needed for the stated purpose or an applicable legal retention obligation, and erase it when the purpose is no longer served or consent is withdrawn unless lawful retention is necessary. We require relevant processors to follow applicable deletion instructions. Razorpay's published merchant terms require transaction records for 10 years from the order date where those terms apply; this does not extend to all chat content.
Deleting a conversation from your history does not necessarily permanently erase all copies. Contact us to request personal-data erasure or account closure. Some records may remain where lawful retention is necessary, including in backups until their deletion cycle is completed.
We use authentication and access controls to protect information. No online service is completely secure. We will investigate personal-data breaches and provide notifications required by applicable law.
7. Children
Lexa AI is intended for users aged 18 or older. If you believe a child has provided personal information through the service, contact us so we can review and take appropriate action.
8. Your rights and contact
You may contact us to request information about your personal data, correction, erasure, account closure, withdrawal of consent, or resolution of a privacy complaint. Under the DPDP Act, as the relevant provisions take effect, rights also include specified processing and sharing information, grievance redressal, and nomination of another person in the event of death or incapacity.
We may verify your identity before acting on a request and will respond within applicable legal timelines. Where the DPDP complaint process applies, first raise your grievance with us before approaching the Data Protection Board of India.
Exercising privacy rights is not conditional on a paid subscription or refund eligibility. Where required, notices and consent requests will be available in English or a language specified in the Eighth Schedule to the Constitution.
- Privacy / Grievance Officer: Mr. Santosh Bavkar
- Email: allmronline@gmail.com
- Phone and support hours: +91-08767247573 and +91-08169822945 (11 am to 6 pm IST, Monday to Saturday)
- Address: 3, Little Gift, 19th Road, Khar (W), Mumbai 400052
Do not include passwords, OTPs, or payment credentials in your request.
9. Policy updates
We may update this policy as our services or legal requirements change. We will revise the date and provide additional notice or seek fresh consent where required.
10. Removal of names from judgments
Our judgment database reproduces court records for legal research. To request removal, anonymisation, or suppression of your name from a lawfully published judgment, please provide an order from a court of competent jurisdiction directing the relevant relief. We do not ordinarily alter or remove names from such judgments solely on an individual's request without an applicable court order.
Send the order, judgment link or case citation, and details of the required action to allmronline@gmail.com. We will verify the order and act in accordance with its scope and applicable legal requirements. Changes to our database do not change the court's original record or copies held by other websites.
Legal exceptions: A fresh court order is not required where applicable law or an existing binding direction already requires identity protection, redaction, or removal, including protection of children or victims whose identities must not be disclosed. Report such material to the same email for review. This policy does not limit statutory privacy rights or requests concerning your account data.
11. User Account cancellation and data deletion request
In the circumstances that any user or entity wants to cancel their user account and discontinue usage of Lexabase.com and any related services, any outstanding dues or subscription amounts due would be payable prior to such cancellation or deletion being accepted and approved. Post payment of all dues and subscription amounts, if the user wishes to cancel or delete his or his or their account, an email can be sent to intro@LexaBase.com from the user's registered email address with the topic mentioned in the Subject Line as "Cancellation of Account" or "Deletion of Account" with all the details, as below:
Name, Registered Email Address, Mobile Number, Reason for cancellation or deletion
Post verification of the details, which may include a verification email or phone call to confirm the request for cancellation or deletion, the process will be completed within 14 to 21 working days from the date of confirmation that no dues or subscription amounts are payable.