Zero Collection. Zero Telemetry.
Zero Privilege Compromise.

1. Data Sovereignty: Our Core Privacy Philosophy

Most modern software privacy policies span dozens of pages designed to obscure the reality of data collection: user telemetry, diagnostic beacons, behavioral profiling, and cloud ingestion.

At Lexnight Technologies Inc. ("Lexnight", "we", "us"), we reject this paradigm entirely. In legal practice, confidentiality is not merely a preference; it is an ethical imperative enshrined in ABA Model Rule 1.6 and enforceable under state bar disciplinary standards.

Our core philosophy is simple: The only way to guarantee client confidentiality in AI legal tools is never to collect client data in the first place. We cannot lose data we do not have. We cannot be hacked for data we do not store. And we cannot be compelled by subpoena or court order to surrender data that has never touched our infrastructure.

2. The Desktop macOS Application: Absolute Zero Collection

When you download, install, and run the Lexnight desktop application on your Mac, the software operates in a completely air-gapped, isolated environment:

3. Client Matter Files & Discovery Documents

When an attorney imports PDF files, transcripts, contracts, or email dumps into Lexnight:

• 100% Local Ingestion: Files are read directly from your local filesystem using macOS native PDFKit and our compiled Rust parser (legalbrief).
• Temporary Security-Scoped Access: The application only accesses the specific folder or files selected by the user via native macOS file dialogues. It has no access to the broader filesystem.
• Transient Memory Processing: Document character buffers and embeddings are allocated in unified system RAM and purged upon completion of the review session.
• Local Output Generation: Review artifacts (such as ReviewReport.md, ReviewReport.json, manifest.json, and AuditLog.txt) are saved strictly to the local directory chosen by the user.

4. Prompts, Outputs, and AI Inferences

Unlike cloud-based generative AI systems that transmit prompts to third-party model APIs:

• On-Device Foundation Models: Lexnight utilizes Apple's built-in Foundation Models (AFM 3 Core Advanced) running directly on the Apple Silicon Neural Engine via macOS FoundationModels.framework.
• Zero Model Fine-Tuning: Client documents, queries, and extracted entities are never used to train or fine-tune any AI model. The on-device model weights are static, read-only system files managed by Apple macOS.
• Zero Remote Logging: Neither Lexnight nor Apple receives copies of your prompts, questions, or generated review summaries.

5. Telemetry, Analytics, and Crash Reporting

It is standard practice for software applications to bundle third-party telemetry tools that track user actions, feature usage, and system crashes. In legal practice, inadvertent telemetry can easily leak confidential client file names, matter IDs, or metadata.

If the application encounters an unhandled exception, macOS generates a standard local crash report stored in ~/Library/Logs/DiagnosticReports/ on your Mac. This log remains on your machine and is never transmitted to us unless you manually and voluntarily email it to our engineering team for technical support.

6. The Marketing Website (lexnight.com)

This Privacy Policy also covers visitors to our marketing website at https://lexnight.com. We hold our website to the same rigorous privacy standards:

• Static Infrastructure & Zero Tracking Cookies: The website is hosted as a static HTML/CSS site with no third-party tracking cookies, behavioral tracking pixels, or retargeting scripts (no Facebook Pixel, no LinkedIn Insight Tag).
• Server Access Logs: Like all web servers, our hosting infrastructure automatically logs basic technical request metadata (such as IP address, browser user-agent, and HTTP timestamp) solely for DDoS mitigation, load balancing, and network security. These logs are automatically rotated and deleted.
• Early Access & Contact Inquiries: If you submit an early access request or contact our team via the website form, we collect only the information you voluntarily provide (e.g., your name, work email address, and law firm name). We use this information exclusively to communicate with you about your inquiry, schedule demos, and provision software licenses. We never sell, rent, or monetize your contact information.

7. Information Sharing, Commercialization & Subpoenas

We do not sell, rent, lease, or monetize your personal information or firm data under any circumstances.

Response to Governmental Subpoenas & National Security Letters

Because Lexnight operates 100% offline and possesses zero client documents, prompts, or matter files:

8. Regulatory Classifications: GDPR, CCPA/CPRA, and HIPAA

General Data Protection Regulation (GDPR / UK GDPR)

Under Regulation (EU) 2016/679:

• Lexnight is Neither Controller nor Processor of Client Files: Because Lexnight never accesses, transmits, stores, or processes client documents on our servers, Lexnight does not act as a "Data Processor" or "Data Controller" for documents analyzed by users. The law firm maintains exclusive sovereignty and control over the data.
• Privacy by Design and by Default (Article 25): Lexnight fulfills the core mandate of Article 25 by technically eliminating data transfer mechanisms at the architecture level.

California Consumer Privacy Act (CCPA / CPRA)

Lexnight does not "sell" or "share" personal information as defined under the CCPA/CPRA. We do not use personal information for cross-context behavioral advertising.

HIPAA & HITECH (Health Insurance Portability and Accountability Act)

Litigators frequently analyze medical records, psychiatric evaluations, and billing records in personal injury, medical malpractice, and mass tort matters. Because Lexnight processes protected health information (PHI) exclusively on the law firm's local workstation, no Business Associate Agreement (BAA) with Lexnight is required. The firm’s existing HIPAA-compliant hardware and security protocols govern the matter.

9. Attorney Ethical Compliance & Model Rule 1.6 Adherence

Under ABA Model Rule 1.6(c) and ABA Formal Opinion 512 (July 2024), lawyers must make "reasonable efforts to prevent the inadvertent or unauthorized disclosure of, or unauthorized access to, information relating to the representation of a client."

Lexnight’s zero-collection design satisfies Rule 1.6 by technical impossibility. Because no data transmission occurs, using Lexnight does not constitute a "disclosure" under legal ethics rules, eliminating the ethical requirement to obtain client informed consent waivers before using generative AI tools.

10. Inquiries & Data Protection Office

If you have questions regarding this Zero-Collection Privacy Policy, or if your firm’s Risk Committee requires custom security attestations, please contact our Data Protection and Compliance team: