Veralex Privacy Policy
This privacy policy ("Policy") describes how GENIO GROUP, INC. ("Company", "Veralex", "we", "us") collects, uses, and shares personal information of consumer users of this website, https://www.veralex.ai (the "Site"), as well as associated AI-powered legal research and document analysis services (together, the "Services"), and applies to personal information that we collect through the Site and our Services as well as personal information you provide to us directly. This Policy also applies to any of our other websites that post this Policy.
IMPORTANT NOTICE
BY USING THE SITE OR THE SERVICES, YOU ACCEPT THE PRACTICES AND POLICIES DESCRIBED IN THIS POLICY AND YOU CONSENT THAT WE WILL COLLECT, USE, AND SHARE YOUR PERSONAL INFORMATION AS DESCRIBED BELOW. IF YOU DO NOT AGREE TO THIS POLICY, PLEASE DO NOT USE THE SITE OR THE SERVICES.
SPECIAL NOTICE FOR LEGAL PROFESSIONALS
If you are an attorney or legal professional, please pay special attention to Sections 4, 6, and 14 of this Policy, which address attorney-client privilege, professional confidentiality, and your ethical obligations when using AI-powered legal services.
Table of Contents
1. PERSONAL INFORMATION WE COLLECT
Information You Provide
We collect personal information that you provide directly to us, including:
- Account Information: Name, email address, password, and professional credentials when you create an account
- Profile Information: Professional title, firm affiliation, practice areas, and other professional details
- Legal Documents: Documents, contracts, case files, and other legal materials you upload for analysis
- Research Queries: Legal questions, search terms, and research requests you submit
- Communications: Messages, feedback, and other communications you send to us
- Payment Information: Billing details and payment method information for subscription services
Automatically Collected Information
We automatically collect certain information when you use our Services, including:
- Computer or device identification and operating system type
- Browser type, version, and screen resolution
- Browser language and time zone settings
- Internet protocol (IP) address and geolocation data
- Unique device identifiers and mobile network information
- The website you visited before browsing to our Site
- Pages you viewed and time spent on each page
- Access times and clickstream data
- Information about your use of and actions on our Site or Services
- Usage patterns and feature utilization metrics
How much of this information we collect depends on the type and settings of the device you use to access the Site and Services.
Cookies and Similar Technologies
We may log information using "cookies." Cookies are small data files stored on your hard drive by a website. We may use:
- Session Cookies (which expire after a certain period of time)
- Persistent Cookies (which stay on your computer until you delete them)
- Essential Cookies required for basic website functionality
- Analytics Cookies to understand how you use our Services
- Preference Cookies to remember your settings and choices
Other similar tools we may use include:
- Web server logs
- Web beacons and pixel tags
- Local storage technologies
- Software development kits (SDKs) in mobile applications
This type of information is collected to make the Site and Services more useful to you and to tailor the experience with us to meet your interests and needs.
Google Analytics and Third-Party Analytics
We may use Google Analytics and other analytics services to help analyze how users use the Site. These services use Cookies to collect information such as:
- How often users visit the Site
- What pages they visit when they do so
- What other sites they used prior to coming to the Site
- User demographics and interests (when available)
We use the information we get from analytics services only to improve our Site and the Services. Although these services may plant persistent Cookies on your web browser, the information collected is subject to their respective privacy policies. For Google Analytics, please see the Google Analytics Terms of Use and the Google Privacy Policy.
2. HOW WE USE YOUR PERSONAL INFORMATION
Primary Uses
We use the personal information we collect for various purposes, including:
- To help establish and verify your identity and professional credentials
- For the purposes for which you specifically provided it to us, including to enable us to process and fulfill your requests or provide the Services to you
- To provide you with effective customer service and technical support
- To provide you with a personalized experience when you use the Site or the Services
- To process your subscription payments and manage your account
- To send you information about your relationship or transactions with us
- To provide AI-powered legal research, document analysis, case law search, and other legal technology services
- To generate legal documents, contracts, and other legal content using AI
- To enhance or develop features, products or services
- To maintain and improve the quality and accuracy of our AI systems
AI and Machine Learning
We may use your information to improve our AI systems and services, including:
- Training and improving our AI models for legal research and analysis
- Enhancing the accuracy and relevance of AI-generated content
- Developing new AI features and capabilities
- Analyzing usage patterns to optimize our Services
Privacy Protection
When using your information for AI training, we implement strict privacy protections and data anonymization techniques to protect your confidentiality.
Legal Professional Services
For legal professionals, we may use your information to:
- Verify your professional credentials and bar admission
- Provide specialized features for legal practice management
- Ensure compliance with professional conduct requirements
- Maintain attorney-client privilege protections
- Offer continuing legal education and professional development resources
3. HOW WE SHARE YOUR PERSONAL INFORMATION
Sharing with Your Consent
We may share your personal information with third parties when you have given us your consent to do so.
Service Providers
We may share your information with trusted third-party service providers who assist us in operating our Services, including:
- Cloud hosting and storage providers
- Payment processing services
- Analytics and monitoring services
- Customer support and communication tools
- Legal research database providers
Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities, including to meet national security or law enforcement requirements.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.
Professional Confidentiality
For legal professionals, we maintain strict confidentiality standards and do not share privileged or confidential client information without explicit consent or legal requirement.
4. SECURITY OF YOUR PERSONAL INFORMATION
Security Measures
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction, including:
- Encryption of data in transit and at rest using industry-standard protocols
- Multi-factor authentication and access controls
- Regular security assessments and penetration testing
- Employee training on data protection and privacy
- Incident response and breach notification procedures
- Compliance with industry security standards and certifications
Legal Professional Security
For legal professionals, we implement additional security measures to protect privileged and confidential information:
- Enhanced encryption for sensitive legal documents
- Separate secure environments for privileged communications
- Strict access controls and audit trails
- Compliance with legal industry security standards
- Attorney-client privilege protection protocols
Security Notice
While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but we continuously work to improve our security measures.
5. YOUR RIGHTS REGARDING YOUR PERSONAL INFORMATION
Access and Portability
You have the right to access and receive a copy of your personal information that we hold. You may also request that we provide your information in a portable format.
Correction and Updates
You have the right to request correction of any inaccurate or incomplete personal information we hold about you.
Deletion
You have the right to request deletion of your personal information, subject to certain legal and contractual obligations.
Restriction and Objection
You have the right to restrict or object to certain processing of your personal information, including for direct marketing purposes.
Withdrawal of Consent
Where we rely on your consent for processing, you have the right to withdraw your consent at any time.
Exercising Your Rights
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within the timeframes required by applicable law.
7. SECURITY OF YOUR PERSONAL INFORMATION
Security Measures
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction, including:
- Encryption of data in transit and at rest using industry-standard protocols
- Multi-factor authentication and access controls
- Regular security assessments and penetration testing
- Employee training on data protection and privacy
- Incident response and breach notification procedures
- Compliance with industry security standards and certifications
Legal Professional Security
For legal professionals, we implement additional security measures to protect privileged and confidential information:
- Enhanced encryption for sensitive legal documents
- Separate secure environments for privileged communications
- Strict access controls and audit trails
- Compliance with legal industry security standards
- Attorney-client privilege protection protocols
Security Notice
While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but we continuously work to improve our security measures.
8. DATA RETENTION AND DELETION
Retention Periods
We retain your personal information for as long as necessary to provide our Services and fulfill the purposes outlined in this Privacy Policy, including:
- Account information: Retained while your account is active and for a reasonable period thereafter
- Legal documents: Retained according to your account settings and legal requirements
- Usage data: Retained for analytics and service improvement purposes
- Communication records: Retained for customer service and legal compliance
Deletion Requests
You may request deletion of your personal information by:
- Using the account deletion feature in your settings
- Contacting us directly at [email protected]
- Submitting a formal data deletion request
Legal Professional Data
For legal professionals, we implement accelerated deletion schedules for privileged information and maintain detailed audit trails of all data handling activities.
Data Portability
You may also request a copy of your personal information in a portable format for transfer to another service provider.
9. INTERNATIONAL USERS AND CROSS-BORDER TRANSFERS
Data Transfers
Your personal information may be transferred to and processed in countries other than your country of residence. We ensure that such transfers comply with applicable data protection laws.
EU Data Transfers
For users in the European Union, we ensure adequate protection for your personal information through:
- Adequacy decisions by the European Commission
- Standard contractual clauses approved by the European Commission
- Other appropriate safeguards as required by GDPR
Legal Professional Considerations
For legal professionals, we maintain additional safeguards to ensure that privileged information remains protected during international transfers, including:
- Enhanced encryption for cross-border data transfers
- Compliance with legal industry requirements for international data handling
- Specific protections for attorney-client privileged communications
10. CHILDREN
Age Restrictions
Our Services are not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
Legal Professional Services
Our Services are designed for legal professionals and adults. We do not knowingly collect personal information from minors, even in the context of legal representation.
COPPA Compliance
We comply with the Children's Online Privacy Protection Act (COPPA) and do not knowingly collect personal information from children under 13 years of age.
11. DO NOT TRACK
Browser Do Not Track Signals
Some browsers include a "Do Not Track" (DNT) feature that, when enabled, signals to websites that you visit that you do not want to have your online activity tracked. We do not currently respond to DNT signals because there is no common understanding of how to interpret them.
Alternative Opt-Out Options
Instead of relying on DNT signals, we provide you with other ways to control tracking:
- Cookie preference controls in your account settings
- Browser-based cookie management tools
- Third-party opt-out mechanisms for specific services
- Direct contact with us to request tracking restrictions
Legal Professional Privacy
For legal professionals, we provide enhanced privacy controls to ensure that privileged communications and confidential information are not tracked or used for analytics purposes.
12. UPDATES TO THIS PRIVACY POLICY
Policy Changes
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:
- Update the "Last Updated" date at the top of this policy
- Notify you of significant changes through our website or email
- Provide clear information about what has changed
- Give you time to review changes before they take effect
Material Changes
For material changes that affect how we process your personal information, we will:
- Provide advance notice of at least 30 days
- Obtain your consent where required by law
- Allow you to opt-out of new processing activities
- Provide clear explanations of the changes and their impact
Legal Professional Notice
For legal professionals, we provide advance notice of any changes that might affect attorney-client privilege or professional confidentiality requirements. You will receive direct notification of such changes.
Your continued use of our Services after any changes to this Privacy Policy constitutes acceptance of the updated policy. If you do not agree to the changes, you should stop using our Services and contact us to discuss your concerns.
13. CALIFORNIA PRIVACY RIGHTS (CCPA/CPRA)
California Consumer Rights
If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- Right to Know: Request information about personal information we collect, use, and disclose
- Right to Delete: Request deletion of your personal information
- Right to Correct: Request correction of inaccurate personal information
- Right to Portability: Request a copy of your personal information in a portable format
- Right to Opt-Out: Opt-out of the sale or sharing of personal information
- Right to Limit: Limit the use and disclosure of sensitive personal information
Exercising Your Rights
To exercise your California privacy rights, you may:
- Contact us at [email protected]
- Use our online privacy request form
- Call our toll-free number (if available)
Verification
We may need to verify your identity before processing your request. We will not discriminate against you for exercising your privacy rights.
No Sale of Personal Information
We do not sell your personal information to third parties. We may share information with service providers as described in this Privacy Policy.
14. GENERAL DATA PROTECTION REGULATION (GDPR)
Legal Basis for Processing
For users in the European Union, we process your personal information based on the following legal grounds:
- Consent (Article 6(1)(a)): For marketing communications and non-essential cookies
- Contract (Article 6(1)(b)): To provide our Services and fulfill our obligations
- Legitimate Interests (Article 6(1)(f)): For security, fraud prevention, and service improvement
- Legal Obligation (Article 6(1)(c)): To comply with applicable laws
Your GDPR Rights
Under GDPR, you have the following rights:
- Right of access to your personal information
- Right to rectification of inaccurate information
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent
- Right to lodge a complaint with a supervisory authority
Data Protection Officer
For GDPR-related inquiries, you may contact our Data Protection Officer at [email protected].
International Transfers
When we transfer your personal information outside the EEA, we ensure adequate protection through appropriate safeguards such as Standard Contractual Clauses.
15. CONTACT INFORMATION
How to Contact Us
If you have any questions about this Privacy Policy or our privacy practices, please contact us:
Company: GENIO GROUP, INC.
Email: [email protected]
Website: https://www.veralex.ai
Support Hours: Monday - Friday, 9:00 AM - 6:00 PM EST
Privacy Inquiries
For privacy-related inquiries, please include "Privacy Inquiry" in the subject line of your email.
Response Times
We will respond to your privacy inquiries within the timeframes required by applicable law:
- General inquiries: 2-3 business days
- Data subject requests: 30 days (as required by GDPR)
- California privacy requests: 45 days (as required by CCPA)
Last Updated: June 19, 2025
Copyright: © 2025 GENIO GROUP, INC. All rights reserved.
Trademark: Veralex is a trademark of GENIO GROUP, INC.