Privacy Policy

Updated: September 2026

1. Data controller

The data controller is Liflex AI Systems (the Liflex web application — an AI-powered legal assistant). Contact: info@liflex.app.

2. What data we collect

Account: name, e-mail, interface language, jurisdiction country, password (stored only as an irreversible bcrypt hash). Content: your questions and assistant answers (chat history), documents you upload and their extracted text. Usage: query/audit/comparison counters for plan limits, registration and activity dates. Payments: subscription status; card data is processed by Stripe — we never receive or store it. Cookies: strictly necessary only (session, language, your cookie choice).

3. Purposes and legal bases

Contract performance (Art. 6(1)(b) GDPR): access to the service, document processing, assistant answers, plan limits, account-related e-mail (password reset, invitations). Consent (Art. 6(1)(a)): optional cookies and optional marketing e-mails — a separate checkbox (no need to tick it; consent can be withdrawn at any time in Settings → Privacy or via the unsubscribe link in the e-mail; art. 398 PKE). Legitimate interest (Art. 6(1)(f)): security, abuse prevention, access logs.

4. AI processing

To generate answers, your question and fragments of the documents you select are sent to our language model provider (Groq) and are not used for model training. You decide which documents are attached to a question.

5. Third-party processors

Brevo (SMTP) — e-mail delivery (password resets, invitations, newsletters if consent is given). Stripe — payment processing. Groq — the language model. Our server and file storage (MinIO/S3) — hosting documents and application data.

6. Cookies

Strictly necessary only: login session token, selected language, your cookie decision. No analytics or advertising cookies.

7. Retention

Data is kept while your account exists. Deleting your account removes your profile, chat history and uploaded documents immediately.

8. Your rights

Access and portability (Art. 15, 20): the "Download data" button in Settings → Privacy exports your profile, chats with messages and documents as JSON. Erasure (Art. 17): the "Delete account" button in the same place. Rectification (Art. 16): profile settings. Withdrawal of marketing consent (Art. 7(3)): the toggle in Settings → Privacy or the unsubscribe link in any e-mail. Objection (Art. 21) and complaints to a supervisory authority — anytime at info@liflex.app.

9. Security

Passwords are stored only as bcrypt hashes; traffic is encrypted; access to data is limited to the necessary minimum.

10. Changes

We will notify you of changes in the app. Continued use after changes take effect constitutes acceptance of the updated version.

Questions about your data: info@liflex.app