Terms of Use

1.1 These Terms of Use (“Terms”) govern access to and use of the lexona.ai website, the Lexona platform and related services (together, the “Services”), provided by YR Legal Services Ltd, trading as Lexona.AI, a company registered in England and Wales, Company No. 16885532 (“Lexona”, “we”, “us”). Registered Office: 124 City Road, London, England, EC1V 2NX.

1.2 The Services are provided to legal practices and other businesses. They are not offered to consumers.

1.3 A “Customer” is the legal practice or other organisation that has agreed to use the Services. An “Authorised User” is an individual whom the Customer permits to use the Services under its account.

1.4 If a Customer has signed a customer agreement or order form with us (a “Customer Agreement”), the Customer Agreement prevails over these Terms where they conflict, and the Data Processing Agreement prevails over both on the protection of personal data.

1.5 A Customer accepts these Terms through its Customer Agreement, order form, subscription or account onboarding process. The version that applies is the version identified in that document or process or, where none is identified, the version in force when the Customer first accepted them. Each version is identified by the version number and date shown above. Authorised Users must comply with these Terms when using the Services.

1.6 If you only browse our website, these Terms apply to that use so far as they are relevant.

• “Client Data” means information about a Customer’s clients and prospective clients.
• “Matter Data” means information about a Customer’s legal matters, including documents, correspondence and details of other people involved.
• “Customer Data” means all data, including Client Data and Matter Data, submitted to or processed by the Services by or for the Customer.
• “Output” means content generated by the Services from Customer Data, including AI-generated drafts, summaries, chronologies, enquiries, analysis and reports.
• “Third-Party Platform” means software or a service provided by someone other than Lexona, such as a practice-management, document-storage or email platform.

3.1 Lexona provides AI-assisted workflow software for legal professionals, focused on conveyancing and property litigation. It includes document review, enquiry and report drafting, possession and disrepair workflows with evidence timelines, client intake, lender-handbook and practice-guidance retrieval, and practitioner review features.

3.2 Where the Services are connected to a Third-Party Platform, Lexona is designed to work alongside it, using the information and permissions that Authorised Users grant to carry out supported workflows.

3.3 The Services do not provide legal advice. The Customer and its Authorised Users remain responsible for all legal advice given and decisions made using the Services.

3.4 Pilot, preview and evaluation features are provided so that they can be assessed. They may change or be withdrawn, and they are provided without the commitments in section 17 unless the Customer Agreement says otherwise.

• The Customer is responsible for its Authorised Users and for everything done under its account.
• Each login is for one individual. Credentials must not be shared.
• Authorised Users must keep their credentials confidential and use multi-factor authentication where it is available and required by the Customer’s policies.
• The Customer’s administrators are responsible for granting, reviewing and promptly removing access, including when someone leaves or changes role.
• Suspected unauthorised access must be reported promptly to security@lexona.ai and to the Customer’s administrator.
• Registration and account information must be accurate and kept up to date.

The Customer is responsible for:

• having the right, and any necessary lawful basis, to submit Customer Data to the Services and to instruct its processing, including giving any notices its clients require;
• complying with its professional obligations, including confidentiality, supervision, competence and client care, and with any regulatory rules that apply to it;
• its own anti-money-laundering, client identification and conflict-checking obligations, which the Services may support but do not discharge;
• configuring the Services, including user permissions and approval settings, in line with its own policies;
• the accuracy and completeness of the Customer Data it submits; and
• keeping the records it is required to keep. Unless the Customer Agreement says otherwise, the Services do not replace the Customer’s own record-keeping obligations.

The Services must not be used to:

• break any law or regulation, or infringe anyone’s rights;
• upload data the user has no right to upload, or malicious software;
• gain, or attempt to gain, unauthorised access to the Services, other accounts or our systems;
• probe, scan or test the security of the Services without our written permission;
• interfere with or disrupt the Services, or other users’ use of them;
• copy, reverse engineer or decompile the Services, except where the law allows it;
• build a competing product or service using the Services or Outputs; or
• use Outputs for an unlawful purpose.

7.1 Lexona.AI assists legal professionals but does not replace professional judgement.

7.2 AI-generated information must be reviewed by an appropriately qualified or authorised user before it is relied upon, where review is required by law, by professional obligations or by the Customer’s own policies. Outputs must not be sent to clients or third parties, filed or otherwise acted on without that review.

7.3 Outputs are generated using AI models and may be inaccurate, incomplete, out of date or unsuitable for a particular matter. Source links and citations help review but do not guarantee accuracy.

7.4 Approval and review controls in the Services support supervision. They are not a guarantee that an Output is correct.

7.5 The Customer is responsible for the decisions it makes and the advice it gives.

8.1 Where the Services support an action that creates, changes or sends information in a Third-Party Platform or another external system, the action is available only to Authorised Users with the appropriate permissions, is subject to user confirmation where the Services provide it, and is limited to what the relevant platform’s API and permissions support.

8.2 The Services do not make autonomous legal judgements, and they are not designed to change matter data in a Third-Party Platform except through a supported action initiated or confirmed by an Authorised User.

8.3 The Customer is responsible for reviewing an action before confirming it.

9.1 Third-party integrations, including practice-management and legal-software platforms, are subject to the availability, permissions, APIs and terms of the relevant third-party provider. Lexona is an independent product and is not an agent, partner, authorised representative or affiliate of any third-party platform unless expressly stated otherwise.

9.2 An integration with a platform is not an endorsement, approval or certification of Lexona by that platform. A planned or proposed integration may never become available.

9.3 Connected third-party platforms remain the system of record for data and workflows held within those platforms. Unless the Customer Agreement says otherwise, Lexona does not act as the system of record for data held in a connected Third-Party Platform; it processes the data needed to perform the actions the Customer instructs.

9.4 The Customer’s use of a Third-Party Platform is governed by its agreement with that provider. The Customer is responsible for having the licences and permissions needed to connect it. We are not responsible for a Third-Party Platform’s availability, security or changes to its API, and we may suspend an integration if its provider requires it or its API changes.

10.1 We use third-party providers to host and operate the Services, including AI model providers. The list of subprocessors is available to Customers and prospective Customers on request through a security pack request, and changes are notified to Customers as the Data Processing Agreement provides.

10.2 Where configured and contractually available, model providers are used with enterprise privacy controls designed to limit provider retention and model training. Our Privacy Policy describes how model providers are used.

11.1 As between the Customer and Lexona, the Customer (or its clients and licensors) owns all rights in Customer Data. We acquire no ownership of it.

11.2 The Customer grants us a non-exclusive licence to host, copy, process, transmit and display Customer Data only as needed to provide, secure and support the Services, to comply with the law, and as the Customer instructs.

11.3 We do not use Client Data or Matter Data to train AI models.

11.4 We may use technical information about how the Services operate — not the content of Customer Data — to run, secure and improve the Services, and aggregated information that does not identify the Customer, its clients or any individual.

12.1 As between the Customer and Lexona, and subject to the Customer’s compliance with these Terms and to the rights of others, the Customer owns the Outputs generated for it, and we assign to the Customer any rights we have in those Outputs.

12.2 Our pre-existing materials that appear in an Output — such as templates, standard wording and formatting — remain ours. We grant the Customer a non-exclusive, perpetual licence to use them as part of that Output for its own legal work.

12.3 Outputs may be similar to content generated for others. We do not promise that Outputs are unique or free from the rights of others.

13.1 The Services, including their software, design, content, rulesets and documentation, are owned by YR Legal Services Ltd or its licensors. Except for the rights granted in these Terms, no rights are transferred.

13.2 If the Customer or an Authorised User gives us feedback, we may use it without restriction or payment.

14.1 Each party will keep the other party’s confidential information confidential, use it only to perform or receive the Services, and disclose it only to its personnel, professional advisers, and (for Lexona) subprocessors who need to know it and are bound by equivalent obligations, or where the law requires disclosure. Where lawful, the disclosing party will be told of a legally required disclosure.

14.2 Customer Data is the Customer’s confidential information.

14.3 These obligations do not apply to information that is public other than through a breach of these Terms, that the recipient already lawfully knew, that it developed independently, or that it received lawfully from a third party without a duty of confidence.

14.4 Using the Services is not intended to waive legal professional privilege in Customer Data, and we treat Customer Data accordingly.

14.5 This section continues to apply after termination.

15.1 For personal data within Customer Data, the Customer is the controller and Lexona is the processor. Processing of that personal data is governed by the Data Processing Agreement, which forms part of the Customer Agreement, and which prevails over these Terms on the protection of personal data.

15.2 A Customer must have a Data Processing Agreement in place with us before it uses the Services with personal data in Client Data or Matter Data.

15.3 Lexona is the controller of the personal data it processes for its own business operations, as described in our Privacy Policy.

16.1 We maintain technical and organisational measures appropriate to the Services, as set out in our Information Security Policy. Our Security page describes current controls and their status. We do not currently hold a security certification.

16.2 The Customer is responsible for:

• the security of its Authorised Users’ credentials and devices;
• enabling multi-factor authentication for its Authorised Users where its policies require it;
• managing user access and permissions, and removing access promptly when it is no longer needed; and
• reporting suspected vulnerabilities or security incidents to security@lexona.ai.

16.3 We will notify the Customer of a personal data breach affecting Customer Data as the Data Processing Agreement provides.

17.1 We aim to keep the Services available, but we do not guarantee that they will be uninterrupted or error-free. We may carry out maintenance, and will try to minimise disruption.

17.2 No service-level commitment applies unless the Customer Agreement includes one. Support is available as described on our Support page, and any support hours or response targets are those in the Customer Agreement.

17.3 We may change the Services, including by adding, changing or removing features. Where a change materially reduces what a paying Customer receives, we will give reasonable notice where we can.

18.1 Fees are set out in the Customer Agreement, order form or selected plan, exclude VAT and other applicable taxes, and are payable on the terms stated there.

18.2 Unless the Customer Agreement says otherwise, subscriptions renew automatically, and a cancellation takes effect at the end of the current billing period.

19.1 We may suspend access to all or part of the Services, or for particular Authorised Users, where reasonably necessary because of a security threat or incident, a breach of section 6, fees that remain unpaid after notice, a legal requirement or a requirement of one of our providers, or to prevent harm to the Services, other customers or third parties.

19.2 Where practicable we will give notice first, limit the suspension to what is necessary, and restore access once the reason for it is resolved. Suspension does not delete Customer Data.

20.1 These Terms apply for as long as the Customer uses the Services.

20.2 Either party may terminate on written notice if the other commits a material breach that is not remedied within 30 days of notice, or becomes insolvent.

20.3 A Customer may cancel a subscription as its plan or Customer Agreement allows.

20.4 We may end a Customer’s access immediately on notice where the law requires it, or where its use exposes us, other customers or third parties to a serious security or legal risk that cannot be remedied.

20.5 Sections that by their nature should continue — including 11 to 15, 21, 23, 24 and 25 — continue after termination.

21.1 Before termination takes effect, and for 30 days after termination, the Customer may request an export of its Client and Matter Data in a format the Services support or as otherwise agreed.

21.2 Following termination, Client and Matter Data is deleted in accordance with the Customer Agreement and Data Processing Agreement, normally within 30 days unless the Customer instructs otherwise or we are legally required to retain specified information.

21.3 Where a subprocessor keeps a copy for a limited period — for example in a backup or a provider log, where one exists — that copy is deleted on the provider’s own retention cycle.

21.4 Records we keep as a controller, such as billing records, are kept as our Privacy Policy describes.

22.1 We will provide the Services with reasonable skill and care.

22.2 Except as expressly stated in these Terms or the Customer Agreement, the Services are provided “as is” and “as available”, and we give no warranty that Outputs are accurate, complete or suitable for any purpose, or that the Services will be uninterrupted, error-free or completely secure.

23.1 Nothing in these Terms limits or excludes liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, or for any other liability that cannot be limited or excluded by law.

23.2 Subject to 23.1, YR Legal Services Ltd is not liable for any indirect, incidental, special or consequential loss, or for loss of profits, revenue, business, goodwill, anticipated savings or data, arising from or in connection with the Services.

23.3 Subject to 23.1, our total liability arising from or in connection with the Services is limited to the fees the Customer paid for the Services in the twelve months before the event giving rise to the claim.

23.4 A Customer Agreement may set different limits, which then apply.

24.1 The Customer will indemnify Lexona against losses arising from a third-party claim that Customer Data, or the Customer’s instructions for processing it, infringe that third party’s rights or break the law, or that arises from the Customer’s breach of section 6.

24.2 Any indemnity given by Lexona is set out only in a signed Customer Agreement.

These Terms, and any dispute or claim arising from or in connection with them (including non-contractual disputes or claims), are governed by the law of England and Wales, and the courts of England and Wales have exclusive jurisdiction.

• Entire agreement: these Terms, together with any Customer Agreement, order form and Data Processing Agreement, are the whole agreement between the parties about the Services.
• Assignment: the Customer may not assign its rights without our written consent. We may assign our rights to a successor to our business, with notice.
• Subcontracting: we may use subcontractors and subprocessors, and we remain responsible for their performance as the Data Processing Agreement and the law require.
• Events beyond reasonable control: neither party is liable for delay or failure caused by events beyond its reasonable control.
• Relationship: nothing in these Terms creates a partnership, joint venture or agency between the Customer and Lexona.
• Severance and waiver: if any provision is found unenforceable, the rest remains in force; a delay in enforcing a right is not a waiver of it.
• Third-party rights: no one other than the Customer and Lexona has any right to enforce these Terms under the Contracts (Rights of Third Parties) Act 1999.
• Notices: notices to us must be sent to legal@lexona.ai; notices to the Customer are sent to the email address of its account administrator.

We may update these Terms. Each version has its own version number and date. Where a Customer Agreement sets out how changes apply, it governs. Otherwise we will give account administrators reasonable notice of material changes before they take effect.

• Legal questions and notices: legal@lexona.ai
• Support: support@lexona.ai
• Security: security@lexona.ai
• Privacy: privacy@lexona.ai