Privacy Policy

Last updated: 1 February 2026

1. About This Policy

LexiCheck Pty Ltd (ABN pending) ("LexiCheck", "we", "us", "our") operates the LexiCheck compliance checking platform. This Privacy Policy explains how we collect, use, disclose, and protect your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Information We Collect

We collect the following types of information:

• Account information: email address, company name, and password (stored as a salted hash) when you register for an account.
• Website data: URLs and content of websites you submit for compliance scanning. This content is processed in real time and not retained beyond the scan results.
• Document data: documents you upload for compliance checking, including extracted text content.
• Scan results: compliance analysis results, scores, and identified issues generated by our platform.
• Usage data: server logs including IP addresses, browser type, pages visited, and timestamps for security and service improvement purposes.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the LexiCheck platform and its features.
• Perform ACCC/Australian Consumer Law compliance analysis on submitted content.
• Authenticate your identity and manage your account.
• Communicate with you about your account, service updates, or support requests.
• Detect, prevent, and address security issues or technical problems.
• Comply with our legal obligations.

4. AI and Automated Processing

LexiCheck uses artificial intelligence (large language models) and retrieval-augmented generation (RAG) to analyse content for compliance issues. Your submitted content is processed by locally hosted AI models and is not sent to third-party AI providers. The AI-generated analysis is an automated preliminary assessment and does not constitute legal advice.

5. Data Storage and Security

Your data is stored on servers located in Australia. We implement appropriate technical and organisational measures to protect your personal information, including:

• Encryption of data in transit (TLS/HTTPS).
• Secure password hashing using industry-standard algorithms (bcrypt).
• JWT-based authentication with token expiry and refresh mechanisms.
• Access controls restricting data access to authorised users only.
• Regular security reviews and updates.

6. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may disclose your information only in the following circumstances:

• Where required by Australian law, regulation, or court order.
• To protect the rights, property, or safety of LexiCheck, our users, or the public.
• With your explicit consent.

7. Data Retention

We retain your account information for as long as your account is active. Scan results and uploaded documents are retained until you delete them or close your account. Server logs are retained for up to 90 days. You may request deletion of your data at any time by contacting us.

8. Your Rights

Under the Australian Privacy Act, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete personal information.
• Request deletion of your personal information.
• Complain to the Office of the Australian Information Commissioner (OAIC) if you believe your privacy has been breached.

9. Cookies

LexiCheck uses browser local storage (not cookies) to maintain your authentication session. We do not use third-party tracking cookies or analytics services.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via the platform or email. Your continued use of LexiCheck after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:

LexiCheck Pty Ltd
Email: enquiries@lexicheck.com.au