LexFlow Privacy Policy
Last updated: 13 September 2026. LexFlow handles client data under EU GDPR requirements. We protect the privacy of our customers and their clients using recognised standards as a point of reference.
1. Who we are
LexFlow is a legal practice management platform operated for Studio Legale X (Genoa, Italy) and deployed by AVibe Agency. This privacy policy explains what data we collect, why, and how it is protected.
2. Data we collect
- Intake form data: name, email, phone, practice area, and message when you request a demo.
- Chatbot messages: messages sent to the Elisa assistant, used to route your request to the right team member.
- Usage data (anonymous): pages visited and language/theme preferences, stored locally in your browser (localStorage).
3. How we use data
- To respond to demo requests and route them to the firm's CRM.
- To send notifications about your request (to the firm and to the interested client).
- To improve the website experience.
4. Data protection
All data is transmitted over TLS. Client matter data in the LexFlow CRM is stored with bank-grade 256-bit encryption, zero-knowledge document storage, and SOC2-aligned practices. Internal notes are never visible to clients.
We protect the privacy of our customers and their clients using recognised standards as a point of reference.
Certification status: ISO/IEC 27001 and ISO/IEC 27701 certification is in progress and not yet held. SOC 2 is an auditing framework we align our practices with, not a completed certification. These are reference points for how we build, not claims of completed certification.
5. Cookies & tracking technologies
Last updated: [DATE]
This section explains how LexFlow uses cookies and similar technologies. It forms part of our Privacy Policy.
What cookies are
Cookies are small text files stored on your device. Similar technologies include local storage, session storage and comparable browser storage or access mechanisms.
Cookies we use
Strictly necessary (no consent required)
These are essential for the website and secure access to work. They cannot be switched off in our systems.
- [cookie name] — purpose: [e.g. session/security/load balancing] — provider: [first-party/Cloudflare] — duration: [session/X days].
Optional cookies (loaded only with your consent)
These are set only if you accept them. They are blocked until you consent and can be withdrawn at any time.
- Analytics: [provider] — purpose: [aggregated usage] — duration: [X].
- Functional: [provider] — purpose: [preferences] — duration: [X].
- Marketing: [provider] — purpose: [advertising/measurement] — duration: [X].
If we use only strictly necessary cookies, no consent banner is shown, but this disclosure still applies.
Your choices
- You can accept, reject or customise optional cookies at any time via [Cookie Settings link].
- Rejecting optional cookies does not restrict access to the ordinary website.
- You can withdraw consent as easily as you gave it.
- You can also manage cookies through your browser settings.
Third parties
Where third-party providers set cookies, their processing is governed by their own policies:
- [provider] — [policy link].
Legal basis
Strictly necessary cookies rely on our legitimate interest in providing a secure, functioning website. Optional cookies rely on your consent under applicable EU/Italian rules (GDPR and ePrivacy).
Contact
Questions about cookies or privacy: [privacy contact email]. Data controller: [legal entity name], [registered address], Partita IVA [P.IVA], PEC [pec].
6. Your rights (GDPR)
You may request access, correction, or deletion of your personal data at any time by writing to info@lexflow.com. We respond within 30 days.
7. Contact
LexFlow · Studio Legale X · Genova, Italia
WhatsApp: +39 345 023 4084 · info@lexflow.com