Privacy Policy

Lex Civis Inc (“Lex Civis,” “we”) builds the Lex Civis Workspace for federal capture teams. This policy explains what data we collect on the marketing site (lexcivis.ai) and inside the workspace, how we use it, and how we protect it. Workspace access is by invitation only — we do not run a self-serve sign-up.

What we collect

On the marketing site, we collect only what you submit through a form (demo request, access request, contact) and a minimal amount of aggregate usage data:

• Form data: name, company, work email, role, NAICS codes or agency targets, and any free-text message you choose to provide.
• Site analytics: Vercel Web Analytics measures page views and Core Web Vitals. The script does not use cookies and does not fingerprint individual visitors.
• Authentication: if you sign in to the workspace, our identity provider (Clerk) stores your authentication identity (email, optional phone, OAuth handles) and issues session cookies scoped to our auth host.
• Workspace data: if your firm is provisioned, the workspace stores capture material you upload or generate (opportunities, capture plans, proposals, uploads, decisions, AI interaction logs).

What we don't collect

• No advertising or third-party marketing trackers.
• No session replay, mouse-movement tracking, or heatmaps.
• No selling or sharing of personal information with marketing partners.
• No biometric data. No precise geolocation beyond IP-level region.

How we use it

We use form data only to respond to your inquiry, send the materials you requested (capability statement, demo recording, etc.), and — if you become a customer — provision and operate your workspace tenant. Workspace data is used to deliver the product to you and your team. We do not use workspace data to train cross-tenant models. Per-firm isolation is a load-bearing design constraint, not a marketing claim.

Where it lives

• Hosting: Vercel (United States).
• Database & object storage: Supabase (United States).
• Authentication: Clerk (United States).
• Transactional email: Resend (United States).
• AI inference:Anthropic and OpenRouter (United States). Workspace prompts and responses are subject to those providers' commercial data-use terms; we do not enable training-data sharing on enterprise endpoints where the option exists.

How long we keep it

• Form submissions:retained while we're in active conversation with you, then 24 months or until you ask us to delete.
• Workspace data:retained for the life of your subscription. On termination, we run a dual-custody escrow workflow (7-day cooling-off, then cryptographic purge of your tenant's operational data; minimal audit metadata persists for federal-contract retention requirements).
• Authentication identity:per Clerk's policies; on workspace termination we revoke your access at the application layer.

Your rights

If you submitted a form or operate inside a workspace, you can ask for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Email kyle@lexcivis.ai with the subject line “Privacy request.” We respond within 30 days, or sooner if your jurisdiction's law requires it (CCPA, CPRA, GDPR, and similar).

Children

Lex Civis is built for adult business users. We do not knowingly collect personal information from anyone under 16. If you believe a minor submitted information to us, contact us and we will delete it.

Changes

We will revise this policy as the product changes and as our obligations under federal-contracting and state-privacy law evolve. Material changes get a notice at the top of this page and, for workspace customers, an in-product notification before the change takes effect.

Contact

Privacy questions or requests: kyle@lexcivis.ai.