Privacy Policy

ExactaLex is the product and trading name used for the service. The service is operated by Celestial Radiance FZ-LLC, a UAE Free Zone company (FZ-LLC), licence number 45031660, with registered and service address at FDAM0184 Compass Building, Al Shohada Road, AL Hamra Industrial Zone-FZ, Ras Al Khaimah, U.A.E. (“ExactaLex”, “we”, “us”, or “our”).

For the purposes of South African privacy law, the operating entity acts as the responsible party where it determines the purposes and means of processing personal information.

Privacy contact / Information Officer contact: info@celestial-radiance.com. Phone: +971 547844033. You may also reach us through our contact page.

This policy applies when you:

• Visit the ExactaLex public website.
• Create an account or register for access.
• Use the legal research service, including submitting queries, viewing results, managing saved runs, or exporting outputs.
• Manage a billing or subscription relationship with ExactaLex.
• Contact us for support or other purposes.

This policy applies to public website visitors, account users, firm and enterprise users, and other authorised professional users of the service.

We may process the following categories of information, depending on how you use the service:

• Account details: name if provided, work email address, organisation or firm name if provided, account role, and registration date.
• Authentication and access data: identifiers used to authenticate you, session tokens, login history, and account security events, managed through our authentication provider.
• Billing and subscription records: plan type, subscription status, billing cycle, invoice information, payment status, customer identifiers, and billing history. We do not store full card numbers.
• Usage and session data: research sessions, saved runs, credit consumption, export activity, feature usage, and product activity logs.
• Research content: research queries, matter descriptions, uploaded or pasted content, saved research outputs, and related instructions you submit to generate research.
• Support and contact communications: messages, enquiries, and related correspondence.
• Technical data: IP address, device type, browser type, operating system, logs, error data, security events, and cookies or similar technologies used for authentication and service operation.

We process personal information where we have a lawful reason to do so. Our main reasons include:

• Performance of contract / providing the service: processing is necessary to create and manage your account, deliver research features, manage your subscription and billing, and provide support.
• Compliance with legal obligations: we may be required to retain certain records or disclose information under applicable law, court order, or regulatory requirement.
• Legitimate operational interests: maintaining the security, integrity, and reliability of the service; preventing misuse, fraud, and abuse; improving service quality; and enforcing our agreements.
• Consent: where required by law, for example for certain optional communications or marketing, we will seek your consent before processing.

ExactaLex is designed for professional legal research use. Research queries, uploaded or pasted content, saved research runs, and matter descriptions you submit may contain personal information or confidential legal material, including information about clients, employees, employers, third parties, proceedings, allegations, disputes, or other matter-specific facts.

You are responsible for ensuring that you have the authority and legal basis to submit information to the service. You are responsible for maintaining any applicable legal professional privilege, client confidentiality, professional conduct obligations, and compliance with POPIA and other applicable duties in respect of information you submit.

Where possible, you should minimise, anonymise, or pseudonymise personal information before submitting it. ExactaLex does not independently determine whether content you submit is legally privileged, confidential, or subject to any professional or regulatory duty.

ExactaLex treats research content as confidential within the operation of the service. We process research content only as needed to provide the service, maintain security, support users, comply with law, and enforce our agreements.

Labour-law research may involve sensitive categories of information, including information relating to:

• Health conditions or disability.
• Race or ethnic origin.
• Religion or belief.
• Trade union membership or activity.
• Disciplinary allegations or misconduct.
• Harassment or sexual harassment allegations.
• Workplace disputes or grievances.
• Criminal allegations or related proceedings.
• Information relating to minors in rare cases involving family responsibilities or related proceedings.

Some of this information may qualify as special personal information under POPIA.

You should only submit sensitive personal information where it is necessary for the legal research task and where you have a lawful basis to do so. You should minimise or anonymise such information wherever possible. ExactaLex processes sensitive information only as needed to provide the service, maintain security, support users, comply with law, and enforce our agreements.

We use the information we process for the following purposes:

• Providing, maintaining, and operating the service.
• Authenticating users and managing account access.
• Managing subscriptions, billing, and payment records.
• Providing customer support and responding to enquiries.
• Monitoring and improving service performance, reliability, and quality.
• Detecting, preventing, and responding to security threats, misuse, fraud, and abuse.
• Complying with legal obligations and enforcing our agreements.
• Communicating material changes to the service or these policies.

We may send service-related communications necessary for your account, subscription, security, billing, or use of the service. We may send marketing communications only where permitted by law or with consent where required. You may opt out of marketing communications at any time, but you may still receive essential service, billing, legal, or security notices.

To generate research outputs, ExactaLex sends research queries, matter descriptions, and related content to AI and model providers and other technical processors. These providers process content on ExactaLex's behalf as part of operating the service.

Users should not submit unnecessary personal information, highly sensitive information, or client-identifying details unless those details are necessary for the research task and the user has authority to submit them.

ExactaLex does not sell research content or personal information, and we do not use confidential research content for third-party advertising profiling. ExactaLex does not use confidential research content you submit to train publicly available or general-purpose AI models without your express agreement.

Some providers may retain limited logs for their own security, abuse prevention, service operation, or legal compliance purposes. We select providers with reasonable data-handling commitments and use contractual safeguards where available.

We rely on trusted third-party providers to operate ExactaLex. These may include:

• Authentication providers: to manage account registration, login, and session security.
• Hosting and cloud infrastructure providers: to store data and operate the platform.
• AI and model providers: to generate research outputs.
• Payment providers: to process subscription payments and manage billing.
• Email and support providers: to communicate with users and manage support.
• Monitoring and analytics providers: to understand service performance and reliability, if used.

Each provider processes information only as necessary to provide their service. We use reasonable contractual, technical, and organisational safeguards where appropriate.

Some of our service providers may process or store information outside the Republic of South Africa. This may be required for hosting, authentication, AI and model processing, support, payment processing, monitoring, or security purposes.

Where cross-border processing occurs, ExactaLex takes reasonable steps to use appropriate contractual, technical, and organisational safeguards to protect personal information in accordance with applicable law, including POPIA. Where required, we rely on appropriate contractual safeguards, the necessity of the transfer for providing the service, consent, or another lawful basis permitted under POPIA.

Payments are processed by third-party payment providers. ExactaLex does not store full card numbers or primary card data. ExactaLex may receive and retain payment-related records such as customer identifiers, plan status, invoice information, billing history, subscription status, and payment status for subscription management and accounting purposes.

Where payments are processed through a third-party payment provider, that provider may process payment, billing, fraud-prevention, compliance, and transaction data in accordance with its own legal and privacy terms.

The handling of payment card data is also governed by the applicable payment provider's privacy and security policies. See our Refund & Cancellation Policy for information about subscription management.

ExactaLex uses essential cookies and similar technologies to authenticate users, maintain secure sessions, and operate the service. These are required for login and basic service function.

We may also collect technical data including IP addresses, device type, browser type, operating system, session logs, usage events, and error data to operate, secure, and improve the service.

If analytics or performance monitoring tools are used, they may collect aggregated usage information to help us understand service performance and reliability.

You may control cookies through your browser settings. Disabling essential cookies will affect login and service operation.

ExactaLex applies reasonable technical and organisational measures to protect personal information against unauthorised access, loss, destruction, or disclosure. These include access controls, encryption in transit, and security monitoring where applicable.

No method of transmission or storage is absolutely secure. You are responsible for keeping your login credentials confidential and using strong, unique credentials. You must notify us promptly at info@celestial-radiance.com if you become aware of any unauthorised access to your account.

If we have reasonable grounds to believe that personal information has been accessed or acquired by an unauthorised person, we will take reasonable steps to investigate, contain, and remediate the compromise, and notify affected users and/or the Information Regulator where required by POPIA.

We retain account, billing, usage, research, and technical records for as long as reasonably needed to provide the service, comply with legal obligations, resolve disputes, maintain security, and enforce our agreements.

Saved research runs are retained while your account is active or until you delete them, subject to backup and log retention periods and any applicable legal retention requirements.

If you close your account or delete saved content, some information may remain for a limited period in backup copies, system logs, accounting records, or compliance and dispute-resolution records. Backups and logs are typically rotated or deleted on a rolling basis.

You may request correction or deletion of your personal information by contacting info@celestial-radiance.com, subject to applicable law and legal or operational retention requirements.

Subject to applicable law and technical or operational limits, you may be able to:

• Access and update your account details from account settings.
• Manage your subscription and billing information from the billing page.
• View your usage and credit consumption.
• Delete saved research runs from within the application, if supported.
• Request access to, correction of, restriction of, or deletion of your personal information by contacting us.
• Withdraw consent for optional communications at any time, where consent was the basis for processing.

To exercise any of these rights, contact us at info@celestial-radiance.com. We will respond within a reasonable time and in accordance with applicable law.

ExactaLex is intended for professional and business use by adults. It is not designed for or directed at children or personal use by minors. You should not submit personal information about minors unless it is strictly necessary for a lawful professional legal research task and you have appropriate authority and legal basis to do so.

We may update this Privacy Policy from time to time. Material changes will be communicated through the service or by email to the address associated with your account before taking effect. Continued use of the service after the effective date of any update constitutes acceptance of the revised policy.

The current version of this policy is always available on our privacy page.

If you have a concern about how ExactaLex handles your personal information, please contact us first at info@celestial-radiance.com. We will make every reasonable effort to address your concern.

If you are not satisfied with our response, you may have the right to lodge a complaint with the Information Regulator (South Africa), which is the statutory body responsible for enforcing POPIA. Contact details for the Information Regulator (South Africa) are available on its official website.

For privacy questions, access requests, deletion requests, or other enquiries about how we handle personal information, contact us at info@celestial-radiance.com or through our contact page.

These privacy practices are part of our broader agreement with you. Please also review our Terms of Service and Refund & Cancellation Policy.