Privacy Policy

Last Updated: November 13, 2025

Your privacy is critically important to us. This policy outlines how Copalexi collects, uses, and protects your information.

Quick Summary

  • ✓ We never sell your data
  • ✓ Your legal documents are encrypted end-to-end
  • ✓ You control your data and can delete it anytime
  • ✓ We're SOC 2 Type II certified
  • ✓ GDPR and CCPA compliant

1. Information We Collect

Account Information

When you create an account, we collect:

  • Name and email address
  • Company name and role
  • Password (encrypted)
  • Billing information (processed securely via Stripe)

Usage Data

We automatically collect:

  • Log data (IP address, browser type, pages visited)
  • Device information
  • Usage patterns and feature interactions
  • Performance metrics

Legal Documents

Documents you upload are:

  • Encrypted at rest using AES-256
  • Encrypted in transit using TLS 1.3
  • Processed only for the services you request
  • Never used to train our AI models without explicit consent

2. How We Use Your Information

We use your information to:

  • Provide Services: Process documents, generate insights, and deliver AI-powered analysis
  • Improve Platform: Enhance features, fix bugs, and optimize performance
  • Communication: Send service updates, security alerts, and support responses
  • Security: Detect fraud, prevent abuse, and protect your account
  • Compliance: Meet legal obligations and regulatory requirements

3. Data Security

We implement industry-leading security measures:

  • Encryption: AES-256 at rest, TLS 1.3 in transit
  • Access Controls: Role-based access, multi-factor authentication
  • Infrastructure: SOC 2 Type II certified data centers
  • Monitoring: 24/7 security monitoring and threat detection
  • Audits: Regular third-party security audits
  • Backups: Encrypted, geographically distributed backups

4. Data Sharing

We never sell your data. We only share information in these limited circumstances:

  • Service Providers: Trusted partners who help us operate (e.g., AWS, Stripe) under strict confidentiality agreements
  • Legal Requirements: When required by law or to protect rights and safety
  • Business Transfers: In case of merger or acquisition (with notice to you)
  • With Your Consent: When you explicitly authorize sharing

5. Your Rights

You have the right to:

  • Access: Request a copy of your data
  • Correction: Update inaccurate information
  • Deletion: Request deletion of your data
  • Portability: Export your data in a standard format
  • Opt-Out: Unsubscribe from marketing communications
  • Restriction: Limit how we process your data

To exercise these rights, contact us at privacy@afromam.com

6. Cookies and Tracking

We use cookies and similar technologies for:

  • Authentication and security
  • Preferences and settings
  • Analytics and performance monitoring
  • Feature optimization

You can control cookies through your browser settings.

7. International Data Transfers

Your data may be processed in the United States and other countries where we operate. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

8. Children's Privacy

Copalexi is not intended for users under 18. We do not knowingly collect information from children. If you believe we have collected information from a child, please contact us immediately.

9. Changes to This Policy

We may update this policy periodically. We'll notify you of significant changes via email or through the platform. Continued use after changes constitutes acceptance.

10. Contact Us

Questions about this Privacy Policy? Contact us: