Your firm’s data.
Protected by design.

1. Overview

Lexora is a multi-tenant billing and practice-operations service for law firms, primarily serving Canada and the United Arab Emirates. This Privacy Policy explains what information we collect, why we collect it, and the choices available to firm administrators and end users.

Your firm remains the controller of client and matter records entered into Lexora. RavelUp processes that data to provide the hosted service, security, and support.

2. Information we collect

Account & identity

• Name, email address, role, and authentication credentials
• Organization membership and firm-unit associations
• Optional profile details provided during registration or setup

Firm & billing content

• Firm profile, branding, tax identifiers, and bank details you configure
• Client, matter, time, expense, invoice, payment, and retainer records
• Advocate assignments, notes, and operational settings

Technical & usage data

• IP address, browser type, device signals, and approximate location derived from IP
• Application logs, audit events, and diagnostics for reliability and abuse prevention
• Cookies or similar technologies required for sign-in sessions and security

3. How we use information

• Provide authentication, role-based access, and firm-scoped workspaces
• Generate invoices, PDFs, reminders, reports, and related billing workflows
• Deliver product emails you request (for example confirmation codes or invoice sends)
• Maintain security, investigate incidents, and meet legal obligations
• Improve reliability and support when you contact us

We do not sell personal information.

4. Sharing & processors

We share information only as needed to operate Lexora, including:

• Within your firm — users you authorize can access data in their firm unit
• Infrastructure providers — hosting, email delivery, storage, and monitoring vendors under contract
• Legal requirements — when disclosure is required by law or to protect rights and safety

Processors are engaged to provide services on our instructions and are not permitted to use firm data for their own marketing.

5. Security

We apply administrative, technical, and organizational measures appropriate to a multi-tenant billing platform, including authenticated access, organization scoping, transport encryption, and audit logging of sensitive actions. No method of transmission or storage is perfectly secure; please protect account credentials and use strong passwords.

6. Retention

We retain account and service data for as long as your organization maintains an active Lexora subscription and for a reasonable period afterward to meet legal, accounting, dispute, and security requirements. Firm administrators control day-to-day records inside the product (including soft-deleted client or matter records where available).

7. Your rights

Depending on your location (including Canada and the UAE) and your role, you may have rights to access, correct, delete, or export personal information, or to object to certain processing. End users should first contact their firm administrator. Firm administrators may contact Lexora support for platform-level requests.

8. International transfers

Lexora may be hosted in regions selected for service delivery (including Canada-central cloud regions). If data is transferred internationally, we use appropriate safeguards consistent with applicable law and our vendor contracts.

9. Contact

For privacy questions about the Lexora platform, contact Lexora support or email admin@ravelup.com. For requests about client or matter data stored by your firm, contact your firm administrator first.

This policy may be updated as Lexora evolves. Material changes will be reflected by revising the effective date above. Continued use of the service after an update constitutes acceptance of the revised policy.