Privacy Policy

Last updated: 16 March 2026

LexUnits ("we", "us", "our") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at lexunits.com (the "Service").

This policy complies with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Information we collect

1.1 Account information

When you create an account, we collect:

• Email address
• Name (if provided)
• Password (stored in hashed form only)
• Billing information (processed by our payment provider, Stripe)

1.2 Content you provide

When you use the Service, you may upload or input:

• Audio and video recordings
• Meeting transcripts and notes
• Email and document content
• Instructions for letter drafting or document generation

This content is processed transiently to generate billing entries or other outputs. We do not store your uploaded content after processing is complete. Audio files are deleted from our server immediately after transcription. Text content is held in memory only for the duration of the API request.

1.3 Usage data

We automatically collect certain technical information:

• IP address and approximate location
• Browser type and operating system
• Pages visited and features used
• API call counts (for usage tracking and billing purposes)
• Error logs (which do not contain the substance of your content)

1.4 Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies.

2. How we use your information

We use the information we collect to:

• Provide, operate, and improve the Service
• Process your content to generate time billing entries, draft correspondence, summarise documents, and provide other AI-powered outputs
• Manage your account and process payments
• Communicate with you about the Service (updates, security alerts, support)
• Monitor and analyse usage patterns to improve the Service
• Detect, prevent, and address technical issues and abuse

3. Third-party services and data transfers

3.1 Anthropic (Claude API)

We use Anthropic's Claude API to generate billing entries, polish descriptions, draft correspondence, and perform other text-based AI tasks. Your content is sent to Anthropic's servers (located in the United States) via their commercial API. Under Anthropic's Commercial Terms of Service, Anthropic does not use commercial API customer content to train its AI models.

3.2 Google (Gemini API)

We use Google's Gemini API to transcribe audio recordings. Your audio files are sent to Google's servers for transcription. We use the paid commercial API, under which Google's data handling is governed by their Cloud terms of service.

3.3 Stripe

We use Stripe to process payments. Your payment information is handled directly by Stripe and is not stored on our servers. Stripe's privacy practices are governed by Stripe's Privacy Policy.

3.4 Hosting

Our servers are hosted by Tencent Cloud in Singapore. Your data is processed and stored (to the extent described in this policy) on servers located in Singapore.

4. Use of automated decision-making

The Service uses artificial intelligence to generate time billing entries, draft correspondence, and analyse documents. These AI-generated outputs are provided as suggestions and drafts only. All AI-generated content should be reviewed by the user before being relied upon or submitted. The Service does not make any decisions that have legal effect on individuals without human review.

5. Data retention

• Uploaded content (audio, text, documents): Deleted immediately after processing. Not stored.
• Generated outputs (billing entries, drafts): Held in your browser session only. Not stored on our servers unless you explicitly save them to your account.
• Account information: Retained for as long as your account is active. Deleted within 30 days of account closure upon request.
• Usage logs: Retained for up to 12 months for operational and security purposes, then deleted.
• Payment records: Retained as required by Australian tax law (generally 5 years).

6. Data security

We implement reasonable technical and organisational measures to protect your information, including:

• Encryption in transit (TLS/HTTPS for all connections)
• API keys stored as environment variables, not in code
• Uploaded files deleted immediately after processing
• Access to servers restricted to authorised personnel
• Regular security updates applied to server software

7. Your rights

Under the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you (APP 12)
• Request correction of inaccurate or outdated information (APP 13)
• Request deletion of your account and associated personal information
• Withdraw consent to the collection or use of your information at any time
• Make a complaint if you believe your privacy has been breached

To exercise any of these rights, contact us at the address below.

8. Notifiable Data Breaches

In accordance with Part IIIC of the Privacy Act 1988, if we become aware of an eligible data breach that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as soon as practicable.

9. Children's privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on the Service or by email. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

11. Contact us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or wish to make a complaint, please contact us at:

Email:

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).