Privacy Policy.

1. Introduction

NobleLex AI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our legal intelligence platform, including our website, API, and associated services (collectively, the "Service").

By accessing or using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you register, we collect your email address, display name, and authentication credentials provided via Google Sign-In or email authentication.
• Legal Content: Documents, judgments, case files, citations, and legal queries you upload or submit for analysis, translation, chat, or other processing.
• Usage Data: Information about how you interact with the Service, including features used, session duration, and performance metrics.
• Communications: If you contact us via the contact form or support channels, we collect your message and contact details.

2.2 Information Collected Automatically

• Log Data: IP address, browser type, operating system, referring URLs, and timestamps.
• Device Information: Device type, screen resolution, and similar technical data.
• Cookies & Local Storage: We use local storage and session storage to remember your preferences, authentication state, and theme selection. We do not use third-party tracking cookies.

3. How We Use Your Information

We use the collected information for the following purposes:

• To Provide & Maintain the Service: Process your documents, generate analyses, power chat conversations, and deliver results.
• To Improve the Service: Analyze usage patterns to enhance AI models, refine features, and optimize performance.
• To Communicate: Send service updates, respond to support inquiries, and notify you of policy changes.
• To Ensure Security: Monitor for unauthorized access, prevent abuse, and enforce our Terms of Service.
• To Comply with Legal Obligations: When required by law or valid legal process.

4. Data Sharing & Disclosure

We do not sell your personal data. We may share information in the following circumstances:

• Service Providers: With third-party AI model providers (Google Gemini, OpenRouter) and hosting infrastructure solely to process your requests. These providers are bound by data processing agreements.
• Legal Compliance: To comply with applicable laws, court orders, or governmental requests.
• Protection of Rights: To enforce our Terms, protect our rights, property, or safety, and that of our users.
• Business Transfers: In connection with a merger, acquisition, or sale of assets — with notice to you.

Important: Legal documents you upload are transmitted to our AI processing partners solely for the purpose of generating results. We do not retain your documents beyond what is necessary to provide the Service.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time by contacting us. Usage logs and analytics data are retained for up to 12 months for security and improvement purposes.

6. Data Security

We implement industry-standard security measures, including:

• Encryption in transit (TLS 1.3) for all communications
• Firebase Authentication for secure identity management
• Rate limiting and abuse monitoring to prevent unauthorized access
• Regular security reviews and updates

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your account and associated data.
• Portability: Request a machine-readable copy of your data.
• Objection: Object to processing for certain purposes.

To exercise these rights, contact us at legal@noblelex.in. We will respond within 30 days.

8. Third-Party Services

The Service uses the following third-party services:

• Google Gemini AI — for AI-powered analysis and generation
• OpenRouter — as a fallback AI provider
• Firebase Authentication — for user authentication
• Google Fonts — for typography

Each third party operates under its own privacy policy. We encourage you to review their policies.

9. Children's Privacy

The Service is not directed at individuals under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Effective Date" at the top. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please reach out:

• Email: legal@noblelex.in