1. Who we are
LexSpeakAI™ is a trading name of LexTalkAI Intelligence Ltd, registered in England and Wales.
- Company number: 17024893
- Registered office: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ
- Website: lexspeakai.com
- Data controller contact: privacy@lexspeakai.com
LexTalkAI Intelligence Ltd is the data controller for all personal data collected through LexSpeakAI™ services. We are a technology service provider, not a law firm. We are not regulated by the Solicitors Regulation Authority.
2. What this policy covers
This privacy policy explains what personal data we collect and why, how we use and protect it, who we share it with, how long we keep it, your rights under UK GDPR and the Data Protection Act 2018, and how to contact us.
This policy applies to all users of LexSpeakAI™ services including our website, voice AI service (LexSpeak Voice™), document services, and all related products.
3. What data we collect
3.1 Data you provide directly
- Identity data: Your first name and last name
- Contact data: Email address
- Matter data: Details of your legal situation as described during a voice call — this may include employment details, tenancy information, dispute facts, and other personal circumstances
- Document data: Any documents you upload to our platform for organisation, which may contain personal, financial, or sensitive information
- Communication data: Transcripts of voice calls with Lex
- Payment data: Payment card details and transaction information, processed by our payment processor Stripe. We do not store full card details.
3.2 Data we collect automatically
- Technical data: IP address, browser type, device type, operating system
- Usage data: Pages visited, time spent, referring URL
We do not currently use cookies for tracking or analytics beyond those strictly necessary for the website to function.
3.3 Special category data
Some information you share during a legal triage may constitute special category data under UK GDPR — for example, health information, immigration status, or details relating to criminal proceedings. We only process this where you have explicitly provided it as part of describing your legal matter, and only to the extent necessary to provide the service requested. Enhanced security measures apply.
4. How we use your data
| Purpose | Legal basis |
|---|---|
| Providing the LexSpeakAI™ service — triage calls, document drafting, evidence organisation | Performance of contract (Article 6(1)(b) UK GDPR) |
| Generating and delivering your Case ID, triage transcript, and case summary | Performance of contract |
| Processing payments for paid services | Performance of contract |
| Sending documents and service communications by email | Performance of contract |
| Maintaining records of your matters for continuity of service | Legitimate interests — enabling you to reference prior matters |
| Complying with legal and regulatory obligations | Legal obligation (Article 6(1)(c)) |
| Improving our services through aggregated, anonymised analysis (with your consent) | Consent (Article 6(1)(a)) — you are asked during your triage call |
| Responding to your queries and complaints | Legitimate interests |
We will never sell your personal data to third parties. We will never use your data for advertising purposes.
5. Who we share your data with
5.1 Technology service providers
| Provider | Purpose | Location |
|---|---|---|
| Voiceflow | Conversational AI platform — powers Lex's conversation logic | Canada (adequacy decision applies) |
| Anthropic | Large language model API — powers Lex's intelligence | USA (Standard Contractual Clauses apply) |
| Make.com | Workflow automation — transcript and email delivery | EU (GDPR compliant) |
| Stripe | Payment processing | USA/EU (Privacy Shield successor applies) |
| Krystal | Website hosting and email infrastructure | UK (UK GDPR applies) |
| Workspace email and data storage | USA/EU (Standard Contractual Clauses apply) |
5.2 LexSpeak Bridge™ referrals
If you use our Bridge™ solicitor referral service, we will share your case summary with the solicitor or law firm you are referred to. This only happens with your explicit consent, given at the time of referral, after full disclosure of the referral arrangement in accordance with SRA transparency guidelines.
5.3 Legal requirements
We may disclose your data to law enforcement, regulatory authorities, or courts where legally required.
6. How long we keep your data
| Data type | Retention period | Reason |
|---|---|---|
| Call transcripts and case summaries | 24 months from date of call | Enables reference during ongoing proceedings |
| Documents uploaded or produced | 24 months from date | As above |
| Identity and contact data | 24 months from last interaction | Service continuity |
| Payment records | 7 years | HMRC legal requirement |
| Following deletion request | 30 days then permanently purged | Allows reversal of accidental deletion |
7. How we protect your data
- Encryption in transit: TLS 1.2 or higher on all data transmission
- Encryption at rest: AES-256 encryption on stored data
- Access controls: Personal data restricted to authorised personnel on a need-to-know basis
- PCI-DSS compliance: Payment data handled exclusively by Stripe — we never store full card details
- Regular security reviews: We review and update our security practices regularly
In the event of a personal data breach posing risk to your rights, we will notify the ICO within 72 hours and affected individuals without undue delay.
8. International data transfers
Some of our technology providers are located outside the UK. Where we transfer data internationally, we ensure appropriate safeguards are in place — Standard Contractual Clauses, adequacy decisions, or Binding Corporate Rules as applicable. Contact privacy@lexspeakai.com for details of specific safeguards.
9. Your rights under UK GDPR
- Right of access — Request a copy of the personal data we hold about you. We respond within 30 days.
- Right to rectification — Ask us to correct inaccurate or incomplete data.
- Right to erasure — Ask us to delete your personal data, subject to legal retention requirements.
- Right to restrict processing — Ask us to stop processing your data in certain circumstances.
- Right to data portability — Request your data in a structured, machine-readable format.
- Right to object — Object to processing based on legitimate interests.
- Rights relating to automated decisions — LexSpeakAI™ uses AI to generate outputs. These are informational only and not automated decisions with legal effects. Human review is always available — contact privacy@lexspeakai.com.
To exercise any right: privacy@lexspeakai.com or by post to our registered address. We respond within 30 days and may ask you to verify your identity.
To complain to the regulator: Information Commissioner's Office — ico.org.uk — 0303 123 1113
10. Children's data
Our services are not directed at children under 18. We do not knowingly collect data from children. Contact privacy@lexspeakai.com if you believe a child has provided us with personal data.
11. Changes to this policy
We may update this policy from time to time. We will update the effective date, notify users of material changes by email where we hold your address, and post the updated policy on our website. Continued use of our services after notification constitutes acceptance.
12. Contact us
LexTalkAI Intelligence Ltd — Data Controller
71-75 Shelton Street, Covent Garden, London WC2H 9JQ
Email: privacy@lexspeakai.com
Website: lexspeakai.com