Tesatech Corporation Private Limited, a private company limited by shares and incorporated under the laws of India, together with its affiliates (“TCPL”, “we”, “us” or “our”), is engaged in the business of providing legal technology software as a service solutions, including digital tools for legal workflow management, matter and case management, document management, contract support, compliance tracking and related legal operations support (collectively, the “Services”). We also manage and operate the website https://lexodesk.com/, the domain name, and any other linked pages, features, content, mobile applications, or any other services that TCPL may offer from time to time in connection therewith (collectively, the “Platform”), which serves as an online platform enabling Users (as defined hereunder) to access and avail the Services.
This Privacy Policy, as amended from time to time (“Privacy Policy”), applies to all individuals who access, use, or otherwise interact with our Platform or Services (“Users”). It describes how TCPL collects, uses, stores, processes, and discloses personal information and other data (together, “Information”), whether through the Platform or, in limited circumstances, via offline interactions.
This Privacy Policy is to be read together with our Terms of Service (“Terms”) and our Cookie Policy (together, the “Policies”), and governs your relationship with TCPL in respect of the Information you provide to us.
All Users are advised to read and understand this Privacy Policy and the Terms carefully before registering, accessing, or using the Platform or Services. By browsing, accessing, or using the Platform (whether as a visitor, registered User, or in any offline interaction), you (“you”, “your” or “User”) expressly and voluntarily consent to the collection, use, storage, processing, and disclosure of your Information by TCPL in accordance with this Privacy Policy. By continuing to use the Platform or Services, you acknowledge that you are bound by this Privacy Policy.
In the event of any inconsistency between the Terms and this Privacy Policy, the provisions of this Privacy Policy shall prevail solely with respect to the treatment of Information.
For Users located in the European Union (“EU”), we comply with the General Data Protection Regulation (EU) 2016/679 (“GDPR”); for Users in the United Kingdom (“UK”), we comply with the UK Data Protection Act 2018 and the UK GDPR; and for Users in United States of America (“USA”) we endeavour to stay in compliance with USA data protections. These frameworks set out specific rights and obligations regarding the collection and processing of personal data. This Privacy Policy is intended to inform you about the type of Information we collect, how we use it, and your rights in relation to such Information.
This document, when published on the Platform, constitutes an electronic record under applicable laws including, without limitation, the Indian Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023, as amended from time to time. It is generated by a computer system and does not require any physical or digital signatures.
1. Information Which May Be Collected
With your consent, or to fulfil a contract for the purposes agreed with you (including provision of Services), or where another legal basis exists under applicable laws, TCPL may collect, process, and use the following categories of information (“Information”):
Personal Information
Personally identifiable information which shall include all information that can be linked to a specific individual or to identify any individual, including the following (“Personal Information”):
- First name and last name (including name of the entity and/or its representative, if applicable);
- Primary and Alternate email address;
- Contact and mobile phone number;
- Address and postal code;
- Demographic profile (like your age, gender, occupation, nationality, resident city, and country etc.);
- Educational qualifications;
- Government identifications (which includes but is not limited to national identification number, passport, driving license details etc.);
- Financial information (such as payment instrument details, billing information, account numbers, or payment card details) limited to what is necessary for transactions;
- Emergency contact details and their phone numbers;
- Unique identifiers such as customer number, account number, subscription number, rewards program number, device advertisers, advertising IDs;
- Transactional and commercial information (such as account activity, hiring workflow data, purchase history, interview scheduling records, customer service interactions, and authentication credentials like encrypted passwords or security questions);
- if you use our Platform, you may have to upload documents and any such other ancillary data provided including but not limited to legal, financial, commercial, statistical, educational, research material, engagements, memorandums, legal filings, pleadings, court orders any other legal, jurisdictional or statutory documents, and related metadata, which the User will upload for the purpose of desired outputs from the Platform;
- Inferred or derived information generated from your use of the Platform, including insights from communications, preferences, and transactional data;
- Sensitive personal data or commercial data such as confidential documents utilised for the purpose of business, transactions, commerce or any other legal or commercial usage which the User may require on a case-to-case basis and permitted under the applicable law; and
- Any personal information as may be required to be provided under the Terms.
Please note that the above list is illustrative and may be updated depending on the Services availed. We will only collect such Personal Information as is necessary for lawful purposes, in accordance with applicable laws.
- Any Personal Information provided by you will not be considered sensitive if it is freely available and/or accessible in public domain. Any comments, messages, blogs, etc., posted or communicated by you on the public comments sections of any platform, being published, is not considered Personal Information per this Privacy Policy.
- We will not be responsible for the accuracy or filtration of any of the content posted by any User. However, we will be entitled to remove any content posted by any User on our Platform which we, in our sole discretion consider offensive, discriminatory, racist, defamatory, or inappropriate in nature.
- While browsing our Platform and/or having discussion with us, you are not required to provide any Personal Information unless and until you choose to avail any of our Services or sign up for any Services available on the Platform.
Non-Personal Information
- When you visit the Platform or propose to avail our Services, we may collect certain non-personal Information such as your Internet Protocol (“IP”) address, operating system, browser type, internet service provider, information about the pages on the Platform you visit/access, the links you click on the Platform, the number of times you access the page, MAC address, SSIDs or other device identifiers or persistent identifiers, online user ID, encrypted password, device characteristics (such as browser information), web server logs, application logs, browsing data, viewing data, website and app usage, cookies, web beacons, clear gifs and pixel tags and any such browsing or other information. This type of information does not identify you personally.
- We may also collect information about the Services that you use and how you use them, including log-in information and location information, when you use any of the Services.
Automatic Information
- To improve the responsiveness of the Platform for you, we automatically collect certain information when you visit, use, or navigate through the Platform.
- We may use online identifiers like ‘cookies’ and/or similar electronic tools to collect information to understand your individual interests for analytics and marketing. These server logs may include information such as your web request, internet protocol address, browser type, browser language, the date and time of your request and one or more cookies that may uniquely identify your browser. Refer to our Cookie Policy to read more about our Cookie terms of use.
- We use cookies primarily for User authentication but may also use them to improve the quality of our Services by storing User preferences and tracking User trends.
- Mobile phone: When you use the Platform through your mobile phone, we may receive information about your location and your mobile device, including a unique identifier number for your device. We may use this information to provide you with suggestions in respect of services if required. We may automatically collect device information (such as your mobile device ID, model, and manufacturer), operating system, version information, and IP address.
- User communications: When you send e-mails or other physical or online communications to us, we may retain those communications in order to process your inquiries, respond to your requests and improve our Services provided. To the extent permitted by law, we may record and monitor your communications with us to ensure compliance with our legal and regulatory obligations and our internal policies. This may include communications through telephone, by email, via the contact form, via a link contained in an email sent by us or via some other electronic message offered to you, via the chat function, web care, surveys or (panel) surveys, the (mobile) website, if you sign up for newsletters or via social media. This may also include recording of telephone conversations.
- Collection of anonymized data: We may also collect and/or generate anonymized and aggregated information from your use of the Platform. The anonymized or aggregated information is not personal data since we are not able to re-identify you using any means available to us from that anonymized or aggregated information. The anonymized and aggregated information is used for a variety of functions, including to help us identify and remediate any bugs, and to improve the performance of Our Platform. We may share this information with third parties for Our or their purposes in an anonymized or aggregated form that is designed to prevent anyone from identifying you.
Information on behalf of minor children
- Our Services or the Platform and its contents are not targeted to minors (those under the age of eighteen years of age). However, TCPL has no way of distinguishing the age of individuals who can access our Platform. Any information that you provide, as the legal guardian of the minor child, while using the Platform or Service on behalf of your minor child will be treated as Personal Information, unless otherwise provided herein.
- If you have reason to believe that a minor child has provided Personal Information to us through the usage of our Platform, please contact us at contact@lexodesk.com and we will endeavour to delete that information and terminate the minor’s account from our databases.
Push Notifications: We may request to send you push notifications regarding your account or the mobile application. If you wish to opt out from receiving these types of communications, you may disable them in your device’s settings.
2. Why and How Information Is Processed
TCPL collects and processes personally identifiable information about you (i) as part of a voluntary registration or onboarding flow, (ii) as necessary to execute and provide the Services you request (including trials/pilots), and/or (iii) where another lawful basis exists under applicable laws.
The manner in which TCPL uses your Information depends on the purpose for which you interact with the Platform and Services. Without limitation, we may process Information for the following purposes:
- Account creation, authentication, profile setup, and administering your access/roles;
- Facilitation of payments and billing for chargeable Services, where applicable;
- Operating AI-assisted product modules (e.g., generating any such documents the User may require including but not limited to court pleadings, legal documents, contracts, agreements) to provide the Services;
- Enhancing, troubleshooting, and optimizing the Platform and Services, improving user experience and quality;
- Handling support requests, complaints, questions, feedback, disputes, or safety reports;
- Scheduling and workflow coordination (e.g., interview scheduling, reminders, status updates);
- Verification of user or candidate claims (e.g., credentials/evidence) where you or your organization elect to use such features;
- Security, fraud prevention, abuse detection, incident response, audit logging, and enforcing the Terms;
- Service communications (transactional emails, policy updates, and critical notices).
Further, TCPL may also use Information for the purpose of the following:
- Research and analytics (including market analysis, product research, and service improvement), preferably using anonymized or aggregated data;
- Marketing and promotional communications about our products and Services (including via email, web, or permitted third-party channels). You may opt out of marketing at any time via the unsubscribe link or by contacting us at contact@lexodesk.com;
- Establishing, exercising, or defending legal claims, and obtaining professional advice in connection with actual or prospective proceedings;
- Compliance with applicable law, regulation, legal process, or enforceable governmental requests.
TCPL generally collects Information to provide the Services requested by you or to fulfil your request. Where additional, optional information is sought, you will be notified of this at the point of collection. Further, we process Information, so long as we have a ground under the law to do so. Accordingly, we process the Information based on one of the following conditions:
- When it is necessary in order to fulfil obligations set forth under a contract or for the performance of Services for you;
- In order to comply with a legal obligation, such as keeping records for tax purposes or providing information to a public body or law enforcement agency;
- For legitimate interest in running a lawful business. We will only rely on such a ground where an assessment has been performed balancing the interests and rights involved and the necessity of the processing in order to provide our Services, products, and features to you. Few examples of our legitimate interests are: (i) to offer information and/or services to individuals who visit the Platform or (ii) to prevent fraud or criminal activity and to safeguard our IT systems etc. In some cases, we will ask you for your specific permission to process your Information and we will only process your Information in this way if you agree to us doing so. You may withdraw your consent at any time by requesting us at contact@lexodesk.com.
To the extent permissible under the applicable law, we may use and disclose any non-personal data (data which does not contain any information that can be used to identify natural person) for any purpose. However, in the event we combine any non-personal data with Personal Data, then we will only use and disclose such combined information for the purposes described above while it is so combined. In case of any change in processing the Personal Information of the User, the User shall be duly notified upon the change in processing the Personal Information.
3. Sharing of Information With Third Parties
- TCPL will not use your financial information for any purpose other than to complete a transaction with you. We do not rent, sell, or share your Personal Information and will not disclose any of your personally identifiable information to third parties except (i) as required to provide the Services, (ii) with your explicit consent, or (iii) as otherwise permitted or required under applicable law.
- In cases where you request or consent to Services that require third-party integrations (for example, calendar, video conferencing, verification, or payment services), and such information is necessary to provide those Services, the relevant Information may be shared with TCPL’s trusted service providers, contractors, and business partners who are bound by contractual obligations to protect such Information and use it only for the permitted purpose.
- TCPL may share non-identifiable or aggregated information (which does not reveal an individual’s identity) with third parties for analytics, research, marketing, or product improvement purposes. For example, demographic insights or usage patterns may be shared to help improve Platform features, design better hiring workflows, or create new Services.
- TCPL may share Information with third-party processors engaged to provide operational support, including cloud hosting, data storage, analytics, communications, verification checks, or customer support. Use of Information by such processors is governed by strict contractual safeguards (including the applicable third-party processors terms of use and / or privacy policy and / or cookie policy) which can be accessed on the applicable third-party processors’ website. Specifically, Google LLC (“Google”), Anthropic and OpenAI, which individually and on a case-to-case basis provide analytics services. It is hereby clarified that analytics, cookies and any such information generated by the aforesaid third-party processors may be transmitted to and stored on servers in the United States, Europe or any other data centres from time to time.
- Additionally, in the event of audit, reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings), we may share/transfer/assign the Information we have collected to the relevant third party, after prior notification of the same to the User. In such cases, Users will be notified in advance of any material change in control or use of their Information.
- Under certain circumstances, TCPL may disclose your Personal Information if and only if required by law or in response to valid requests by public authorities (e.g., a court or a government agency).
4. Retention of Personal Information
- TCPL will retain your Personal Information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.
- TCPL will also retain usage Information for internal analysis purposes. Usage Information is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our Service, or we are legally obligated to retain this data for longer time periods.
5. Transfer of Personal Information
- Your information, including Personal Information, may be processed at our operating offices and in any other place where the parties involved in the processing are located. It means that this Information may be transferred to and maintained on computers located outside your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those from your jurisdiction.
- Your consent to this Privacy Policy, followed by your submission of your Information, represents your agreement to such transfer.
- TCPL will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Information will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.
6. Rights Available to Users
- To protect against loss, misuse, and alteration of the Information under its control, TCPL has in place appropriate physical, electronic, and managerial procedures.
- For example, TCPL’s servers are accessible only by authorized personnel and your information is shared with employees and authorized personnel on a need-to-know basis to complete the transaction and to provide the Services requested by you. Although, TCPL will endeavour to safeguard the confidentiality of your Personal Information, transmissions made cannot be made absolutely secure. You agree that TCPL will have no liability for disclosure of your information due to errors in transmission or unauthorized acts of third parties.
- We shall not use the User’s Information in any manner apart from the terms mentioned in the Terms and this Privacy Policy.
- You can at any time withdraw your consent for collection and use of your Personal Information, but you may not be eligible to visit our Platform or avail the Services we offer if you do so. It is also hereby clarified that your decision to withdraw your consent will not affect the processing of Personal Information based on your previous consent.
- You may be asked to provide information anytime you access or browse the Platform or avail the Services, not only during the first time.
Users have rights when it comes to how their Personal Information is handled. These rights may vary depending on applicable laws, but may include the right to:
- review the Personal Information and non-personal Information TCPL maintains about the User;
- know whom TCPL has shared the Personal Information with;
- access, review, correct or amend the Personal Information;
- request deletion of the Personal Information;
- request deletion / erasure of any Information provided by the User;
- data transportability;
- withdraw the consent given to the terms of the Privacy Policy.
You may exercise your rights of accessing, updating, and rectifying of documents, or revocation of consent by contacting us via e-mail at contact@lexodesk.com. Please note that we may ask you to verify your identity before responding to such requests. If you make a request, we will try our best to respond to you and address the issue as soon as possible.
7. Personal Sensitive Information Required
- Personal sensitive information including financial information such as bank account, credit card or debit card details and other payment gateway details may be required for payment processing for the Services availed by you.
- We may request an elaborate detail related to the Personal Information provided by you for us to provide our Services, create an account and/or give you access to your registered account on the Platform.
8. Security of Information and Disclaimers
- Although we take measures to protect your sensitive information and Personal Information that is not open to the public, you understand and acknowledge that there is no such thing as complete security. There are certain reasonable breaches beyond our control like computer hacking, unauthorized access to computer data, and breaches of security and encryption.
- We may keep records of all communications including documents, voice calls, digital messages and emails received from you, for the purpose of administrative services and may share the same with third parties when required by law or when required to provide the Services to the User.
- All financial information collected from you by third party payment gateway providers will be used only for billing and payment processes. The payment gateway is secured and encrypted, and authentication will be made by you in the payment gateway. We shall have no role to play, and we shall bear no liability in relation to it. We shall also not be able to resolve any dispute or disagreement between you and such third-party payment service providers.
- Sensitive details like credit/debit card and net banking information are primarily collected by third party payment gateways and banks and not by us. However, to the extent such information is stored on our Platform, it remains unshared and safe.
- We may, with your consent, publish your testimonials and reviews given by you in relation to the services received from us. You agree that we may edit the testimonials or reviews provided by you and republish the edited version. If you have any concern with the edited testimonial or reviews, you can contact through email to contact@lexodesk.com.
- We shall be entitled to retain your Information for our record for as long as needed or permitted in light of the purpose(s) for which it was obtained and consistent with applicable law and such Information shall be used by us only in consonance with this Privacy Policy.
9. Links to Third Party Sites
- The Platform may include links to third party applications/websites. Such third-party sites are governed by their respective privacy policies, which are beyond our control. Once you leave our Platform, use of any information you provide is governed by the privacy policy of the operator of the third-party site you are visiting. That policy may differ from ours.
- We strongly advise you to review the privacy policy of every site you visit. If you cannot find the privacy policy of any of these third-party sites, you should contact the relevant third-party site directly for more information.
- We do not provide any Personal Information or personally identifiable information to third party websites/advertisers/ad-servers without your consent.
10. Policy Updates
- TCPL reserves the right to change or update this Privacy Policy at any time without any prior notice or information. Such changes shall be effective immediately upon posting to the Platform. We strongly encourage you to go through the Privacy Policy whenever you visit the Platform and you avail our Services, to understand how we use the Information provided.
- In case of changes in processing Personal Information or other material changes, Users shall be duly notified before such change is affected. The User shall have the option to withdraw their consent to the terms of the Privacy Policy.
11. Grievance Redressal
- In the event of loss of access details, or any other issues, you can send an email to: contact@lexodesk.com
- If there are any questions regarding this Privacy Policy, please write to the Data Protection Officer or grievance office (“DPO”) below.
- Any complaints, or concerns with regards to content and or comment or breach of this Privacy Policy shall be immediately informed to the designated Grievance Officer as mentioned below, via e-mail at contact@lexodesk.com.
12. Governing Law and Jurisdiction
- This Privacy Policy, the Platform, and any disputes arising out of or in connection with the Information provided by the User shall be governed by and construed in accordance with the laws of India, including the Arbitration and Conciliation Act, 1996, as amended from time to time.
- Any dispute arising out of or in connection with this Privacy Policy, including any question regarding its existence, validity, or termination, shall be referred to and finally resolved by arbitration administered in accordance with the Arbitration and Conciliation Act, 1996.
- The seat and venue of arbitration shall be Pune, India.
- The Tribunal shall consist of one arbitrator mutually appointed by the parties.
- The language of arbitration shall be English.
- The courts at Pune, India shall have exclusive jurisdiction for the purpose of granting interim or injunctive relief, or for the enforcement of any arbitral award.