Privacy Policy

1. Introduction

LexMotus, LLC ("LexMotus," "we," "us," or "our") operates a legal practice management platform designed for personal injury law firms. This Privacy Policy explains how we collect, use, store, and share information about you and your users when you access or use our website and services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Information you provide directly. We collect information you submit when creating an account, configuring your firm, or contacting us — including name, firm name, email address, phone number, mailing address, and messages submitted through our website or product.

Technical and usage data. We may collect device type, browser version, referring URLs, and approximate location derived from IP address to secure and operate our systems, detect abuse, and analyze aggregate usage patterns.

Third-party integration data. When you connect third-party services to LexMotus (such as Google Workspace, Microsoft 365, Twilio, or DocuSign), we collect and process data from those services as described in Section 5 below.

Client and matter data. When you use the Service to manage cases, our platform stores the information you enter on behalf of your firm and clients, including contact records, matter details, documents, communications, and financial data. You retain ownership of this data.

3. How We Use Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Authenticate users and enforce access controls
• Process payments and manage subscriptions
• Respond to support requests and inquiries
• Send transactional communications (account setup, billing, security alerts)
• Send product updates and marketing communications where you have opted in
• Detect, investigate, and prevent fraud, abuse, and security incidents
• Comply with legal obligations

We do not sell your personal information. We do not use your data or your clients' data to train AI models.

4. Cookies and Tracking Technologies

We and our partners may use cookies, local storage, pixels, and similar technologies to maintain sessions, remember preferences, measure site and product performance, and understand how visitors use our marketing pages and product interfaces.

Some cookies are strictly necessary for security or core functionality. Others help us analyze traffic or personalize content. You can control cookies through your browser settings; disabling cookies may limit certain features or require you to re-enter information. Where required by law, we will obtain consent before using non-essential cookies and will honor your documented choices.

5. Third-Party Integrations and Google API Data

Google Workspace Integration

LexMotus offers an optional integration with Google Workspace that allows users to connect their Gmail and Google Calendar accounts. When you enable this integration, LexMotus may access:

• Gmail messages — to display and link client-related email communications to matters within the platform
• Google Calendar events — to display and link appointments and deadlines to matters within the platform

How we use this data: Gmail and Google Calendar data accessed through Google APIs is used solely to provide the matter-linking features described above. We do not use this data to serve advertisements, build user profiles, or for any purpose unrelated to the features you have explicitly enabled.

Limited Use Compliance: LexMotus's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Data retention: Synced Gmail and Calendar data is retained for the duration of your active subscription. If you disconnect the Google integration or cancel your subscription, synced Google data is deleted within 30 days, unless you request earlier deletion.

Human access: LexMotus employees and contractors do not access, read, or process your Gmail or Google Calendar data, except in the narrow circumstances of: (a) investigating a confirmed security incident affecting your account, (b) complying with applicable law or a valid legal process, or (c) at your explicit written request for troubleshooting purposes. In all such cases, access is logged and limited to the minimum data necessary.

Revoking access: You may disconnect the Google integration at any time from your account settings. Doing so will revoke LexMotus's access to your Google account and stop further data sync. You may also revoke access directly through your Google Account permissions.

Microsoft 365 Integration

LexMotus offers an optional integration with Microsoft 365 that allows users to connect their Outlook email and Microsoft Calendar accounts. When enabled, LexMotus may access email messages and calendar events to link them to matters within the platform. This data is used solely for that purpose and is subject to the same retention and access restrictions described above for Google data.

Other Integrations

LexMotus may integrate with third-party services including Twilio (SMS communications), DocuSign (electronic signatures), and Stripe (payment processing). Each integration is optional. Data exchanged through these integrations is used only to provide the features you have enabled and is governed by the respective provider's terms and privacy policies in addition to this policy.

6. Data Sharing

We do not sell your personal information or your clients' data.

We may share information with:

• Service providers who assist us in hosting, infrastructure, analytics, communications, payment processing, email delivery, or security — each subject to contractual confidentiality and data processing obligations
• Law enforcement or government agencies if required by law, regulation, valid legal process, or governmental request
• Successors in the event of a merger, acquisition, or sale of assets, in which case we will notify affected users before data is transferred and becomes subject to a different privacy policy

We require all service providers who access personal or client data to maintain appropriate technical and organizational safeguards.

7. Data Retention

We retain account and firm data for the duration of your active subscription and for up to 60 days following cancellation or termination, after which it is deleted or anonymized. You may request earlier deletion by contacting us using the information in Section 10.

Client and matter data entered into the platform is retained as described above. If your firm requires a shorter or longer retention period for compliance reasons, please contact us to discuss your options.

Synced third-party integration data (Google, Microsoft 365) is deleted within 30 days of disconnecting the integration or canceling your subscription.

Billing and transaction records may be retained longer as required by applicable tax and financial regulations.

8. Security

We implement administrative, technical, and organizational measures designed to protect personal and client information against unauthorized access, alteration, disclosure, or destruction. These measures include role-based access controls, row-level database isolation, encryption in transit (TLS), encryption at rest (AES-256), access logging, and vendor diligence.

No method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security. We encourage you to use strong passwords, enable multi-factor authentication where offered, and safeguard your credentials.

If you believe your interaction with us is no longer secure, or you discover a potential vulnerability, please notify us promptly at security@lexmotus.com.

9. Your Rights

Depending on your location, you may have rights to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your personal information (subject to our retention obligations)
• Restrict or object to certain processing
• Request portability of your data in a structured, machine-readable format

To exercise any of these rights, contact us using the information in Section 10. We will respond in accordance with applicable law. We do not discriminate against users who exercise their privacy rights.

California residents: Under the California Consumer Privacy Act (CCPA) and related regulations, you have the right to know what personal information we collect and how it is used, to request deletion, to opt out of any sale (we do not sell personal information), and to non-discrimination for exercising your rights. To submit a request, contact us at privacy@lexmotus.com.

10. Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights, or need to report a security concern, please contact us at:

Email: privacy@lexmotus.com
Security issues: security@lexmotus.com

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website with a revised effective date, and where appropriate, by email. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.