Privacy Policy

Last Updated: January 2025

Last Reviewed: January 3, 2025

Amplimit Inc. ("Company," "we," "us," or "our") operates the LexAmp platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Service.

BY ACCESSING OR USING THE SERVICE, YOU CONSENT TO THE COLLECTION, USE, AND DISCLOSURE OF YOUR INFORMATION AS DESCRIBED IN THIS PRIVACY POLICY.

If you do not agree with this Privacy Policy, please do not access or use the Service.

1. Introduction

We are committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy applies to all users of the Service, including visitors to our website and registered users.

We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable Canadian privacy laws. If you are located outside Canada, please be aware that your information may be transferred to, stored, and processed in Canada and the United States.

2. Information We Collect

We collect information in the following ways:

2.1 Information You Provide

Account Information

• Name
• Email address
• Password (stored in encrypted form)
• Profile information you choose to provide

Communication Data

• Messages you send through the AI ChatBox
• Conversations and chat history
• Support requests and correspondence with us

LexCraft Data

• Information you input into document templates
• Generated documents and their contents
• Session data and document history

Payment Information

• Billing address
• Payment method details (processed and stored by Stripe; we do not store complete card numbers)
• Transaction history

Lawyer Consultation Data

• Booking information
• Messages exchanged with lawyers through our platform
• Consultation preferences and history

2.2 Information Collected Automatically

Usage Data

• Features and pages you access
• Time spent on the Service
• Actions taken within the Service
• Message counts and usage patterns

Device and Technical Data

• IP address
• Browser type and version
• Operating system
• Device identifiers
• Referring URLs

Cookies and Similar Technologies

• Session cookies (to maintain your login session)
• Preference cookies (to remember your settings)
• Analytics cookies (to understand how you use the Service)

2.3 Information from Third Parties

We may receive information about you from third parties, including:

• Identity verification services
• Payment processors (transaction confirmations)
• Social login providers (if you choose to sign in with Google)

3. How We Use Your Information

We use your information for the following purposes:

3.1 Providing the Service

• Creating and managing your Account
• Processing your subscriptions and payments
• Enabling AI ChatBox conversations
• Generating documents through LexCraft
• Facilitating lawyer consultation bookings
• Providing customer support

3.2 Improving the Service

• Analyzing usage patterns to improve features
• Identifying and fixing bugs and technical issues
• Developing new features and services
• Conducting internal research and analytics

3.3 Communication

• Sending transactional emails (account verification, password resets, booking confirmations)
• Sending service-related notifications
• Responding to your inquiries and support requests
• Sending marketing communications (with your consent, where required)

3.4 Security and Compliance

• Protecting against fraud and unauthorized access
• Enforcing our Terms of Service
• Complying with legal obligations
• Responding to legal requests and preventing harm

4. Third-Party Service Providers

We share your information with the following third-party service providers who assist us in operating the Service:

4.1 OpenAI (United States)

Purpose: AI processing for the ChatBox feature

Your conversations with the AI ChatBox are processed through OpenAI's API. OpenAI has committed not to use data submitted via API for training their models. However, your data is transmitted to and processed by OpenAI's systems in the United States.

For more information, see OpenAI's privacy policy at https://openai.com/policies/privacy-policy

4.2 Stripe (United States)

Purpose: Payment processing

All payment transactions are processed by Stripe. When you make a payment, your payment information is transmitted directly to Stripe. We do not store your complete credit card number.

For more information, see Stripe's privacy policy at https://stripe.com/privacy

4.3 Amazon Web Services (AWS)

Purpose: Email services (AWS SES) and infrastructure

We use AWS Simple Email Service (SES) to send transactional emails. Our primary infrastructure is hosted on AWS servers in Calgary, Canada.

For more information, see AWS's privacy policy at https://aws.amazon.com/privacy/

4.4 Tencent Cloud (United States)

Purpose: Server hosting

Certain components of our Service are hosted on Tencent Cloud servers located in Silicon Valley, United States.

For more information, see Tencent Cloud's privacy policy at https://www.tencentcloud.com/document/product/301/17345

5. Data Storage and Cross-Border Transfer

5.1 Data Storage Locations

Your data may be stored on servers located in:

• Canada: AWS data center in Calgary, Alberta
• United States: Tencent Cloud data center in Silicon Valley, California; OpenAI and Stripe servers

5.2 Cross-Border Data Transfer

By using the Service, you consent to the transfer of your personal information to Canada, the United States, and any other country where our service providers operate. We take reasonable steps to ensure that your information receives an adequate level of protection in the jurisdictions in which we process it.

When we transfer personal information outside of Canada, we rely on:

• Contractual protections with our service providers
• The service provider's privacy policies and security practices
• Applicable legal frameworks for international data transfers

6. Data Retention

6.1 General Retention Policy

We retain your personal information for as long as your Account remains active and for a reasonable period thereafter. Specifically:

6.2 Retention After Account Deletion

When you delete your Account, we will delete or anonymize your personal information within a reasonable timeframe, except for:

• Information we are required to retain by law
• Payment and transaction records (retained for 7 years for tax compliance)
• Anonymized or aggregated data that cannot identify you
• Information necessary to protect our legal interests

7. Data Sharing

We do not sell your personal information. We may share your information only in the following circumstances:

7.1 With Lawyers and Law Firms (for Consultation Bookings)

When you book a consultation with a lawyer through our platform, we share relevant information with that lawyer to facilitate the consultation, including:

• Your name and contact information
• Your booking details and preferences
• Messages you have exchanged through our platform
• Relevant information from your AI ChatBox conversations (if you choose to share)

7.2 With Service Providers

We share information with third-party service providers who perform services on our behalf, as described in Section 4. These providers are contractually obligated to use your information only for the purposes of providing services to us.

7.3 For Legal Reasons

We may disclose your information if required to do so by law or in response to valid requests by public authorities, including:

• Court orders or subpoenas
• Government agency requests
• Law enforcement requests
• Regulatory requirements

7.4 Business Transfers

If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on the Service of any change in ownership or uses of your personal information.

7.5 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

8. Internal Use of Anonymized Data

We may use anonymized and aggregated data for internal analytics and business purposes, including:

• Understanding usage patterns and trends
• Improving Service features and performance
• Generating aggregate statistics and reports
• Conducting research and analysis

We do not use your personal data to train AI models. Anonymized data is stripped of all personally identifiable information and cannot be used to identify you.

9. Your Rights Under PIPEDA

Under the Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable privacy laws, you have the following rights:

9.1 Right to Access

You have the right to request access to the personal information we hold about you. We will provide you with a copy of your information within 30 days of receiving your request.

9.2 Right to Correction

You have the right to request that we correct any inaccurate or incomplete personal information we hold about you. You can update most of your information directly through your Account settings.

9.3 Right to Deletion

You have the right to request deletion of your personal information. You can delete your Account through your Account settings, or by contacting us. Please note that we may retain certain information as required by law or for legitimate business purposes.

9.4 Right to Data Portability

You have the right to request a copy of your personal information in a commonly used, machine-readable format.

9.5 Right to Withdraw Consent

Where we rely on your consent to process your personal information, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

9.6 How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected]. We may need to verify your identity before processing your request. We will respond to your request within 30 days.

9.7 Complaints

If you are not satisfied with our response to your privacy concerns, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada:

Office of the Privacy Commissioner of Canada 30 Victoria Street Gatineau, Quebec K1A 1H3 Toll-free: 1-800-282-1376 Website: https://www.priv.gc.ca/en/

10. Account Deletion Process

10.1 How to Delete Your Account

You can request deletion of your Account through your Account settings by following these steps:

1. Go to Account Settings
2. Click "Delete Account"
3. Enter your password to verify your identity
4. Complete two-factor authentication (if enabled)
5. Confirm deletion via email (link valid for 24 hours)

10.2 Pre-Deletion Requirements

Before your Account can be deleted, you must:

• Cancel or complete any pending lawyer consultation bookings
• Resolve any outstanding payment issues

10.3 Effect of Deletion

Upon successful deletion:

• Your Account will be deactivated immediately
• All active sessions will be terminated
• Any active subscription will be automatically canceled
• Your email address will be released for potential re-registration
• Your personal data will be deleted or anonymized in accordance with Section 6

11. Cookies and Tracking Technologies

11.1 Types of Cookies We Use

11.2 Cookie Consent

When you first visit our Service, we will display a cookie consent banner that allows you to:

• Accept All Cookies: Enable all cookies including analytics cookies;
• Accept Essential Only: Enable only cookies strictly necessary for the Service to function;
• Manage Preferences: Choose which categories of cookies you wish to enable or disable.

You can change your cookie preferences at any time through the "Cookie Settings" link in the footer of our website or in your Account settings.

11.3 Managing Cookies Through Your Browser

You can also control cookies through your browser settings. Most browsers allow you to:

• View what cookies are stored on your device
• Delete all or specific cookies
• Block cookies from all or specific websites
• Block third-party cookies

Please note that disabling certain cookies may affect the functionality of the Service.

11.4 Opting Out of Analytics

If you wish to opt out of analytics cookies specifically, you may:

• Adjust your preferences through our cookie consent banner;
• Use browser extensions such as "Google Analytics Opt-out Browser Add-on";
• Enable "Do Not Track" in your browser (see below).

11.5 Do Not Track

Some browsers have a "Do Not Track" feature that signals to websites that you do not want your online activity tracked. We currently do not respond to "Do Not Track" signals by default, but you may opt out of analytics through the methods described above.

12. Data Security

12.1 Security Measures

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit using TLS (Transport Layer Security)
• Encryption of sensitive data at rest using AES-256 encryption
• Secure password hashing using industry-standard algorithms
• Two-factor authentication options for Account security
• Regular security audits and vulnerability assessments
• Access controls and authentication for our systems
• Employee training on data protection and security

12.2 Security Limitations

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security. You are responsible for maintaining the security of your Account credentials and for any activity that occurs under your Account.

12.3 Security Incidents

In the event of a security breach that affects your personal information, we will notify you and the appropriate regulatory authorities as required by applicable law. We will take steps to mitigate the breach and prevent future incidents.

13. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly.

If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at [email protected].

14. Notice to Quebec Residents

IMPORTANT NOTICE FOR USERS IN QUEBEC: Quebec's Act Respecting the Protection of Personal Information in the Private Sector (Quebec Law 25) provides additional privacy rights to Quebec residents. If you are a resident of Quebec, you have the following additional rights:

14.1 Right to Information About Automated Decision-Making

You have the right to be informed when a decision affecting you is made exclusively by automated processing, including the AI ChatBox. Upon request, we will provide you with:

• The personal information used to make the decision;
• The reasons and principal factors that led to the decision;
• Your right to have the information corrected.

14.2 Right to De-Indexing

You may request that we cease disseminating your personal information or de-index any hyperlink attached to your name that provides access to your information, if such dissemination contravenes the law or a court order.

14.3 Data Portability

You have the right to receive your personal information in a structured, commonly used, technological format, and to have it transferred to another organization where technically feasible.

14.4 Automated Decision-Making Disclosure

The AI ChatBox uses automated processing to generate responses to your queries. This automated system:

• Uses artificial intelligence to analyze your questions and provide legal information;
• Does not make binding legal decisions on your behalf;
• Provides information for reference purposes only;
• May be supplemented by human review upon your request.

14.5 Exercising Quebec-Specific Rights

To exercise any rights specific to Quebec Law 25, please contact our Privacy Officer at [email protected] with "Quebec Privacy Request" in the subject line. We will respond within 30 days.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of material changes by:

• Sending an email to the address associated with your Account; and/or
• Posting a notice on the Service

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

16. Language

This Privacy Policy is drafted in English. If this Privacy Policy is translated into any other language, the English version shall prevail in the event of any conflict or inconsistency. Translations are provided for convenience only and are not legally binding.

17. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

Amplimit Inc.

Privacy Officer: Email: [email protected]

Legal Inquiries: Email: [email protected]

General Support: Email: [email protected]

Website: https://legal.amplimit.com

BY USING THE SERVICE, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND CONSENT TO THE COLLECTION, USE, AND DISCLOSURE OF YOUR INFORMATION AS DESCRIBED IN THIS PRIVACY POLICY.