Privacy Policy

1. Who We Are

Savage Lex AI is operated by Savage Ventures LLC ('we,' 'us,' 'our'). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Savage Lex AI platform ('Platform').

By using the Platform, you agree to the collection and use of information as described in this policy.

2. Data Practices May Change

Data collection and retention practices described here may be updated. We will notify users of material changes by updating the effective date of this policy.

3. Information We Collect

We may collect the following categories of information:

• Account information: email address, name, county, user role (if you create an account)
• Usage data: messages, prompts, AI responses, session IDs, timestamps
• Document content: text extracted from documents you upload (after automated redaction)
• Technical data: IP address, browser type, device type, operating system, referrer URL
• Geographic data: county and state you provide; approximate location from IP address
• Consent records: records of agreements to terms, privacy policy, and data consent
• Feedback: any feedback or bug reports you submit

4. AI Redaction — What We Attempt Before AI Processing

Before sending your input to third-party AI providers, we apply automated redaction to detect and remove:

• Full names and partial names
• Street addresses and ZIP codes
• Phone numbers
• Email addresses
• Social Security numbers
• Case numbers and docket numbers
• Dates of birth
• Financial account numbers

Your original chat message is retained in a restricted Raw Vault for the period in Section 8. Routine staff views, analytics, training exports, and AI providers use the sanitized copy. Access to original text is limited to authorized administrators through a reason-required, audited reveal process.

IMPORTANT: This redaction is automated and imperfect. It is NOT guaranteed to catch all sensitive information, especially in unusual formats, embedded PDFs, or context-dependent identifiers. Do not enter real names, case numbers, or sensitive personal information.

5. How We Use Your Information

We use the information we collect to:

• Provide and operate the Savage Lex AI platform
• Process your AI chat requests and document uploads
• Monitor for safety issues, abuse, and policy violations
• Improve the platform, AI models, and redaction accuracy
• Communicate with you about your account or the platform
• Comply with legal obligations
• Analyze usage patterns and platform performance

6. Third-Party AI Providers

Your messages (after automated redaction) are transmitted to third-party AI providers to generate responses. Current providers include:

• OpenRouter — routes sanitized conversational requests to configured model developers and may provide live-web verification
• Mistral AI — document text extraction when the upload feature is enabled
• Model developers reached through OpenRouter, which may change as models are configured

These providers have their own privacy policies and terms of service. By using Savage Lex AI, you acknowledge that your (redacted) inputs will be processed by these third parties.

Lite and Standard conversational requests use a provider-side data-collection denial. Guest and Free Plus sanitized interactions may be used by Savage Ventures LLC for service improvement or training as described in the AI Terms.

7. Data Sharing and Disclosure

We do not sell your personal information. We may share information only in the following circumstances:

• Service providers: Supabase (database/auth infrastructure), Cloudflare (hosting/CDN), Railway (backend hosting) — each bound by data processing agreements
• AI providers: Sanitized input shared through OpenRouter with configured model developers, and with Mistral AI for supported document processing, as described above
• Legal requirements: If required by law, court order, or government request
• Safety: To prevent imminent harm to you or others
• Business transfer: In connection with a merger, acquisition, or sale of assets (you will be notified)

8. Data Retention

Account chat logs and Raw Vault entries are automatically deleted after 12 months.

Guest chat logs and Raw Vault entries are automatically deleted after 6 months.

Operational security counters use shorter retention periods. Aggregated records that no longer identify a user may be retained for product and security analysis.

You may request deletion of your data at any time. See Section 10 for your rights.

9. Data Security

We implement industry-standard security measures including encrypted data transmission (HTTPS/TLS), secure database access controls, and environment-separated API keys.

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your information. You use this platform at your own risk.

10. Your Rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your personal information
• Opt out of non-essential communications
• Receive a copy of your data in a portable format

To exercise any of these rights, email privacy@savagelex.com. We will respond within 30 days.

11. Children's Privacy

Savage Lex AI is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at privacy@savagelex.com and we will delete it promptly.

12. Cookies and Tracking

We use localStorage and sessionStorage for consent, display preferences, per-tab analytics identifiers, and some session state. Authentication is provided by Supabase. We do not use third-party advertising cookies or tracking pixels.

Operational analytics may include a user ID, masked email, coarsened IP address, browser information, request path, and timestamps. We minimize these fields and do not place raw chat or document content in analytics.

13. Governing Law

This Privacy Policy is governed by the laws of the State of Georgia. Any disputes shall be resolved in the courts of Fulton County, Georgia.

14. Contact Us

For privacy questions, data requests, or concerns:

• Email: privacy@savagelex.com
• General: hello@savagelex.com
• Company: Savage Ventures LLC