Last updated: August 27, 2026
This notice explains how Esheria ("Esheria", "we", "us") handles information when you use LexChat. It replaces the April 15, 2024 notice. The service uses external infrastructure and AI service providers, so the former statement that conversations were never transferred to outside parties was not accurate for the current product architecture.
Information we process
- Account information, such as your name, email address, authentication method, selected legal jurisdiction, billing country and communication preferences.
- Legal-work content you choose to submit, including questions, conversation context, feedback and files.
- Service and security information, such as session records, timestamps, error records and security events.
- Billing information supplied by payment providers, including payment references, status, amount, currency, billing country, Stripe subscription identifiers, Paystack prepaid-access periods, refunds and disputes. Esheria does not receive or store complete card numbers from Stripe or Paystack checkout.
- First-party product analytics containing opaque account or session-derived identifiers and allow-listed event dimensions. These analytics exclude names, email addresses, IP addresses, user-agent strings, questions, answers, document names, source URLs and raw page URLs.
- Support and team-access information you deliberately submit, including the contact details and consent captured by those forms.
Why we process information
We process information to:
- provide, secure and support LexChat;
- generate answers, retrieve sources and perform features you request;
- maintain conversation history and account settings;
- process Stripe subscriptions and invoices, Paystack prepaid purchases and repurchases, refunds and payment failures;
- send account, security, verification and billing messages;
- measure whether the product works and improve it using minimized first-party events;
- respond to a team-access or support request that you explicitly submit; and
- comply with legal, tax, accounting, fraud-prevention and dispute obligations.
Marketing messages require the applicable consent or other lawful basis. Service messages are kept separate from marketing preferences.
AI processing and external services
To answer a request, LexChat may send the prompt, selected conversation context, retrieved material and files needed for that request to the configured AI provider. The current application supports OpenAI and Azure OpenAI-compatible processing and may route requests through an approved observability gateway. When web research is used, a search provider may receive the generated search query. Do not submit information you are not authorized to disclose.
Esheria does not use customer legal-work content to train a general-purpose Esheria model unless a separate, explicit written agreement says otherwise. Each external provider handles data under its own contract and configured retention controls. The current subprocessor and deployment-specific data-location register must be reviewed before enterprise pilots or promotion of document upload.
Payment processing is performed by Stripe or Paystack according to billing country. Stripe is used for recurring card subscriptions outside Kenya; Paystack is used for M-Pesa-only prepaid KES access in Kenya and does not automatically renew. Transaction records are returned to Esheria so access, accounting, refunds and disputes can be administered. Transactional email may be delivered through Amazon Simple Email Service. User-requested support may use Chatwoot. Other customer-success destinations must remain disabled for ordinary users until their privacy purpose, lawful basis and configuration are approved.
Product analytics
When explicitly enabled after privacy approval and production-index verification, LexChat uses a first-party revenue measurement endpoint. It records events such as a qualified public-page visit, pricing view, paywall exposure, checkout state, verification state and a validated meaningful workflow. It does not store legal-work content or a raw browsing history. The checked-in production configuration leaves this capture disabled by default.
For public legal pages, LexChat may store a keyed, non-reversible page identifier so aggregate entry-page performance can be measured without retaining the pathname or query string. Campaign parameters are restricted to allow-listed source, medium and campaign values. Third-party advertising pixels and browser session-replay scripts are not part of this measurement design.
Retention and deletion
- Authentication sessions expire according to the service's session policy and are not used as analytics records.
- Verification codes expire after 24 hours.
- Transactional email operational records are retained for the configured period, currently limited by the application to between 7 and 365 days.
- Raw first-party revenue events expire after 400 days.
- Conversations and uploaded content remain available until deleted by the user or removed through an approved account-deletion process, subject to backup rotation, legal hold and legal obligations.
- Payment, invoice, refund and dispute records are retained for the period required for accounting, tax, fraud and dispute purposes.
- Customer-success records follow the approved retention schedule and are anonymized or deleted when their purpose expires, subject to legal hold.
Esheria must not promise an exact backup-deletion time, data-residency location or statutory retention term until the responsible legal, security and infrastructure owners have documented and approved it.
Sharing
We do not sell personal information. We disclose information only as needed to operate the service, follow your instructions, process payments, provide support, comply with law, protect the service or complete a corporate transaction subject to appropriate safeguards. Service providers are limited by contract and access controls appropriate to their role.
Conversation sharing for product improvement is off by default and requires a current, explicit opt-in recorded from the settings control. A historical true flag without the current consent version and timestamp is not treated as permission and is excluded from export. Existing records must be audited; where explicit consent cannot be demonstrated, the flag must be reset and the user asked to opt in again.
Security
Esheria uses technical and organizational safeguards intended to protect information, including access controls, transport encryption, scoped service credentials, webhook signature verification and minimized analytics. No service can guarantee absolute security. Enterprise security statements must be supported by current evidence and the approved security pack.
Your choices and rights
You can manage marketing preferences separately from service messages and delete individual conversations in the product. Depending on applicable law, you may also request access, correction, deletion, restriction, objection, portability or withdrawal of consent. Use Esheria's in-product support channel or the current contact details published on Esheria's official website. Identity verification may be required before completing a request.
International processing
Providers may process information outside your country. Esheria will use the contractual and legal transfer safeguards required for the applicable deployment and customer. Data-location commitments for an enterprise customer must be written into the applicable order form or data processing agreement; they must not be inferred from marketing copy.
Children
LexChat is intended for adults and authorized professional or educational use. It is not directed to children, and Esheria does not knowingly collect children's personal information without the authorization required by applicable law.
Changes
We may update this notice as the service, providers or legal requirements change. Material changes will be dated and communicated as required. This implementation-aligned notice and the related Terms and Data Processing Agreement must receive legal approval before a production commercial launch or enterprise pilot.