Legal

Privacy Policy

Back to homepage

This Privacy Policy describes how Agent Lex ("we", "us", or "our") collects, uses, stores, and protects your personal information when you use our platform and services. We are committed to protecting your privacy and handling your data with transparency and care.

1. Who we are

Agent Lex is operated by StartupLab.ie, based in Tipperary, Ireland. We provide an AI-powered legal assistance platform that helps users generate, analyse, and manage legal documents.

For any privacy-related questions, you can contact us at hello@agentlex.ie.

2. Information we collect

We collect different types of information depending on how you interact with our platform:

2.1 Information you provide directly

  • Account information: Name, email address, and password when you create an account.
  • Profile information: Job title, organisation, and preferences you choose to add.
  • Document content: Legal documents, contracts, and text you upload or create through our platform for processing and storage.
  • Communications: Messages you send to our support team or feedback you provide.

2.2 Information collected automatically

  • Usage data: Pages visited, features used, time spent on the platform, and interaction patterns.
  • Device information: Browser type, operating system, IP address, and device identifiers.
  • Cookies and similar technologies: See our Cookie Policy for details.

2.3 Information from third parties

If you sign in using a third-party authentication provider (such as Google), we receive basic profile information from that provider in accordance with their privacy policies and your privacy settings.

Spotlight

Your uploaded documents — storage, processing & deletion

We know the documents you upload — leases, contracts, offers, policies — often contain sensitive personal and financial information. Here is exactly what happens to them.

How they are stored

  • Documents are uploaded over an encrypted TLS connection and stored in encrypted object storage hosted in the EU.
  • Files and extracted text are encrypted at rest using AES-256.
  • Each document is scoped to your account. Other users cannot access, search, or list your files.
  • We do not use your documents to train any AI model — ours or any third party's.

How they are processed

  • When you request a review, the document text is sent to our AI provider strictly to generate your risk report, answer your questions, or draft a letter.
  • Our AI provider operates under a zero-retention data processing agreement: prompts and outputs are not stored beyond the request and are not used for model training.
  • Processing happens on demand. We do not scan, index, or analyse your documents for any purpose other than the action you triggered.
  • Generated outputs (risk reports, summaries, letters) are stored alongside the source document so you can return to them later.

How they are deleted

  • Delete any time: You can permanently delete any document and its associated reports from your dashboard. Deletion is immediate and removes both the file and the extracted text from our active systems.
  • Encrypted backups: Encrypted backup snapshots are purged on a rolling 30-day cycle, after which no copy of the document remains.
  • Account closure: When you close your account, all uploaded documents, extracted text, and generated outputs are deleted within 30 days.
  • Full export: Before deleting, you can export your documents and reports in their original format at any time.

Questions about a specific document or deletion request? Email hello@agentlex.ie and we will action it within 7 days.

3. How we use your information

We use your personal information for the following purposes:

  • To provide, maintain, and improve our platform and services
  • To process and store documents you upload or create
  • To authenticate your identity and manage your account
  • To communicate with you about your account, updates, and support requests
  • To analyse usage patterns and improve user experience
  • To detect, prevent, and address technical issues, fraud, or abuse
  • To comply with legal obligations

4. Legal basis for processing

We process your personal data based on one or more of the following legal grounds:

  • Performance of a contract: Processing necessary to provide the services you have requested.
  • Consent: Where you have given explicit consent, such as for marketing communications or optional analytics cookies.
  • Legitimate interests: Processing necessary for our legitimate business interests, such as improving our platform and ensuring security, balanced against your rights and interests.
  • Legal obligation: Processing required to comply with applicable laws and regulations.

5. How we share your information

We do not sell your personal data. We may share your information in the following circumstances:

  • Service providers: We engage trusted third-party vendors to perform functions such as cloud hosting, payment processing, analytics, and customer support. These providers have access only to the data necessary to perform their services and are contractually bound to protect it.
  • AI service providers: Document content you submit may be processed by third-party AI providers (such as Anthropic) to generate responses and analyses. We use these services under strict data processing terms.
  • Legal requirements: We may disclose information if required by law, court order, or governmental authority.
  • Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

6. Data retention

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.

Specifically:

  • Account information is retained while your account is active and for up to 12 months after closure, unless longer retention is required by law.
  • Documents and content you create are retained according to your subscription plan and deletion requests.
  • Usage and analytics data is retained in aggregated or anonymised form indefinitely.

7. Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit (TLS/SSL) and at rest
  • Regular security assessments and vulnerability testing
  • Access controls and authentication mechanisms
  • Employee training on data protection practices

While we take these precautions, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

8. Your rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request that we correct inaccurate or incomplete data.
  • Deletion: Request that we delete your personal data in certain circumstances.
  • Restriction: Request that we limit the processing of your data.
  • Portability: Receive your data in a structured, commonly used format.
  • Objection: Object to processing based on legitimate interests or for direct marketing.
  • Withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at hello@agentlex.ie. We will respond within 30 days.

9. International transfers

Your personal data may be transferred to and processed in countries outside of your country of residence, including countries that may not have the same level of data protection as your jurisdiction. When we transfer data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.

10. Children's privacy

Our platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will take steps to delete the information.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. We will notify you of any material changes by posting the updated policy on our platform with a revised effective date. Your continued use of the platform after such changes constitutes acceptance of the updated policy.

12. Contact us

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

hello@agentlex.ie

Agent Lex — StartupLab.ie
Tipperary, Ireland

Last updated: 19 June 2026