Privacy Policy

Lexvera provides cloud software for law-firm operations. Pinnora develops and operates Lexvera.

This policy covers: (a) the public website and demo request forms at lexvera.si; (b) the Lexvera application and related support; (c) communications with our team about the service.

Where you use Lexvera to store client and case data, your firm is generally the data controller for that content and Lexvera acts as a data processor on your documented instructions, including any signed subscription agreement or data-processing terms.

• Website and demo: name, firm name, work email, phone, team size, language preference, and technical data (IP address, browser type) needed to secure the form and send verification codes.
• Platform use: account and profile details, firm configuration, cases, parties, documents, financial records, audit logs, and support tickets you or your users submit.
• We do not sell personal data and we do not use your matter files to train public AI models.

• Provide, secure, and improve the Lexvera service.
• Respond to demo requests, onboarding, billing, and support.
• Send service, security, and product notices (you may opt out of non-essential marketing where applicable).
• Meet legal, regulatory, and professional obligations.
• Detect abuse, fraud, and unauthorized access.

We protect data using administrative, technical, and organizational measures appropriate for legal-practice software.

• Encryption in transit (TLS) for connections to our website and platform.
• Encryption at rest for stored databases, files, and backups where supported by our infrastructure.
• Role-based access controls, least-privilege accounts, and authentication safeguards for staff and customer workspaces.
• Audit trails and logging for sensitive actions inside the platform.
• Regular backups and monitored hosting designed to support availability and recovery.

No online service can guarantee absolute security. We notify customers without undue delay when we become aware of a personal-data breach affecting your workspace, as required by applicable law and your agreement.

We treat firm and client information as confidential. For paid deployments we can execute a mutual non-disclosure agreement (NDA) or align with confidentiality terms in your order form.

Our personnel and subprocessors with access to production systems are bound by confidentiality obligations. Access is limited to what is needed to operate, support, or secure the service.

Some Lexvera features may connect to third-party AI providers to assist with drafting, summarization, or analysis. Output is assistive only; your lawyers remain responsible for professional review.

Lexvera is not an AI-credits reseller. We do not sell or bundle third-party AI credits as our own product. Where AI usage requires prepaid credits or a separate provider account, your firm purchases or tops up those credits directly with the relevant provider (or through a billing flow clearly identified as third-party). Fees paid to Lexvera cover the Lexvera platform unless your contract explicitly states otherwise.

When AI is enabled, only the minimum necessary content is sent to the configured provider under your firm’s settings. You can disable or limit AI features where the product allows.

We share data only with: (a) infrastructure and email providers that host or deliver the service; (b) professional advisers under confidentiality; (c) authorities when required by law.

A current list of key subprocessors is available on request at info@lexvera.si. We require subprocessors that process personal data to implement appropriate security and confidentiality commitments.

While your subscription is active, your firm controls its workspace data through the platform.

If you cancel or do not renew, you may request an export of your firm’s data in a standard machine-readable format (for example structured exports of cases, parties, documents metadata, and related records available in the product). We provide reasonable assistance and a defined export window stated in your agreement or onboarding materials.

After the export window, we delete or anonymize customer workspace data from production systems within the timelines in your agreement, except where we must retain limited records for legal, tax, accounting, or dispute-resolution purposes.

Demo and marketing contact data is kept only as long as needed for the demo, follow-up, or your request to delete it.

• Request access to personal data we hold about you as a contact or user.
• Request correction of inaccurate data.
• Request deletion where applicable law allows and where we have no overriding legal retention duty.
• Object to or restrict certain processing where applicable (for example direct marketing).
• Where processing is based on consent, withdraw consent without affecting prior lawful processing.

Because your firm may be the controller of client matter data, end-client requests may need to be handled by your firm; we assist you as processor where required.

Data may be processed in countries where we or our subprocessors operate. Where required, we use appropriate safeguards (such as contractual clauses) for cross-border transfers.

The marketing site uses essential cookies and local storage needed for language, security, and form function. We do not use third-party advertising trackers on lexvera.si.

The Lexvera application may use session cookies and similar technologies required for sign-in and security.

Lexvera is a business service for law firms and is not directed at children under 16.

We may update this policy to reflect product, legal, or security changes. We will post the new date at the top and, for material changes to platform processing, provide notice through the product or by email where appropriate.