Privacy Policy

In short: we collect only what we need to run the service, we do not sell your data, your legal questions and drafts belong to you, and you can ask us to delete your account and its data at any time.

1. Who we are

Leksa (“we”, “us”) operates the legal AI platform at leksa.co.tz, providing AI-assisted legal research, document drafting, and document review grounded in Tanzanian law. For any privacy matter, contact us at privacy@leksa.co.tz.

2. The law that governs this policy

We process personal data in accordance with the Personal Data Protection Act, 2022 (Act No. 11 of 2022) of the United Republic of Tanzania and its regulations, under the oversight of the Personal Data Protection Commission (PDPC).

3. What we collect

Account data — your name, email address, phone number, and password (stored as a salted hash, never in plain text).
Usage content — the questions you ask, the drafts you create, the documents you upload for drafting or review, and your feedback.
Technical data — log records (IP address, browser type, pages visited, timestamps) needed to keep the service secure and reliable.

4. How we use your data

To provide the service — answering your questions, generating and storing your drafts, and running document reviews.
To maintain your account, respond to support requests, and send essential service emails (e.g. password resets).
To keep the platform secure, prevent abuse, and monitor reliability.
To improve the product in aggregate. We do not use your confidential questions, drafts, or uploaded documents to train public AI models.

5. AI processing and third-party processors

To generate answers and drafts, the text you submit is processed by third-party AI model providers acting as our processors under contractual confidentiality and data-protection obligations. Your content is transmitted securely, used only to produce your result, and is not used by us to build marketing profiles.

Professional note for advocates: you remain responsible for your own confidentiality obligations under the Advocates Act and the Tanganyika Law Society rules. Leksa's drafting tool supports placeholders (e.g. [CLAIMANT NAME], “Party A”) precisely so that you can obtain complete drafts without disclosing client identities. We recommend using placeholders for sensitive matters.

6. Legal bases for processing

Contract — processing needed to deliver the service you signed up for.
Legitimate interest — security, fraud prevention, and service improvement.
Consent — for anything optional; you can withdraw consent at any time.
Legal obligation — where Tanzanian law requires us to retain or disclose records.

7. Sharing and disclosure

We do not sell personal data. We share data only with:

service providers (hosting, email delivery, AI model providers) bound by data-processing obligations;
public authorities where disclosure is required by law or a court order; and
a successor entity in the event of a merger or acquisition, under the same protections.

8. Data retention

Your conversations and drafts are retained so you can return to them, until you delete them or your account.
Account data is retained while your account is active and for a reasonable period afterwards to comply with legal obligations.
Server logs are retained for a limited period for security purposes.

9. Your rights

Under the Personal Data Protection Act, 2022 you have the right to:

access the personal data we hold about you;
have inaccurate data corrected;
request deletion of your data and account;
object to or restrict certain processing; and
lodge a complaint with the Personal Data Protection Commission.

To exercise any of these rights, email privacy@leksa.co.tz. We respond within the timelines set by the Act.

10. Security

All traffic is encrypted in transit (HTTPS). Passwords are hashed. Access to production data is restricted to authorised personnel. No system is perfectly secure, but we treat legal data with the sensitivity it deserves.

11. Changes to this policy

We will post any changes on this page and update the effective date above. Material changes will be notified to registered users by email or in-app notice.