Privacy Policy
Effective date: 27 September 2026
1. Scope and roles
This Policy applies to the YOGEXA website, application, account administration, support and related services. For information a firm uploads about its clients, cases, employees or other persons, the firm generally decides why and how that information is used. YOGEXA processes that information to provide the service on the firm's instructions and for necessary security, support and legal-compliance purposes.
2. Information we collect
| Category | Examples | Why we use it |
|---|---|---|
| Account and firm information | Name, login email, firm name, role, account settings, contact information | Account creation, authentication, administration and support |
| Practice-management content | Client records, case details, hearing dates, tasks, notes, documents, messages, invoices and payment records entered by users | Provide the features users request and maintain the firm's workspace |
| Technical and security data | Login events, timestamps, IP/network information, browser/device information, audit and error logs | Security, fraud prevention, troubleshooting, reliability and auditability |
| Subscription data | Plan, payment status, provider references, billing history | Subscription management, accounting and fraud prevention |
| Support communications | Emails and information supplied when contacting support | Respond to questions, investigate issues and improve support |
3. Documents and confidential legal information
YOGEXA may host documents and information that are confidential, sensitive or legally privileged. Access is intended to be limited to the applicable firm and its authorized users. Firms remain responsible for deciding what information may lawfully be uploaded, for professional confidentiality obligations, and for granting appropriate user permissions.
4. AI features
When a user requests AI-assisted analysis, drafting, summarization or research, the content selected for that request may be transmitted to YOGEXA's configured AI service provider, including Google Gemini where configured, for the purpose of generating the requested output. Users should avoid including information that is unnecessary for the task and must independently review AI output.
Third-party AI services operate under their own contractual and technical terms. YOGEXA does not make a blanket promise about a third-party provider's independent retention or model-training practices beyond the protections actually available under the configuration and terms applicable to YOGEXA.
5. Service providers
YOGEXA may use trusted service providers to operate the platform. Depending on the deployed configuration, these may include:
- Neon for managed PostgreSQL database infrastructure;
- cloud object-storage providers for private document storage;
- Resend for transactional email delivery;
- Safepay for subscription payment processing;
- Google Gemini or another configured AI provider for AI-assisted features;
- Cloudflare for domain, DNS, security and related network services.
These providers receive information only as reasonably necessary for their role, subject to their terms, safeguards and any configuration chosen for YOGEXA.
6. Payment information
YOGEXA is designed so that sensitive payment credentials may be collected and processed by the payment provider rather than by YOGEXA. YOGEXA may retain non-sensitive payment information such as plan, amount, currency, transaction/provider references, status and billing history needed to administer subscriptions and resolve disputes.
7. Email and communications
YOGEXA uses account email addresses to send security codes, password-reset messages, account notices, trial reminders, hearing/task notifications, subscription messages and other service communications. Transactional messages are necessary for operating the account and are distinct from optional marketing communications.
8. Cookies and local storage
YOGEXA may use session cookies, browser storage or similar technologies that are necessary for authentication, security, user preferences and application operation. If optional analytics or marketing technologies are introduced, this Policy and any required consent mechanism should be updated before they are used.
9. Legal bases and purposes
YOGEXA processes information to perform the service requested by customers and users, protect legitimate security and operational interests, comply with legal obligations, and where applicable act on consent. Customers remain responsible for the legal basis on which they place third-party personal information into their workspace.
10. Data retention and deletion
Account, subscription, audit and customer-content data are retained for as long as reasonably necessary to provide the service, maintain security, meet legal/accounting obligations, resolve disputes and enforce agreements. Following account closure, data may remain for a limited period in backups, logs or records that must be retained for legal or security purposes.
Where technically and legally possible, an authorized firm owner may request account/data deletion or export by contacting support. YOGEXA may need to verify identity and authority before acting on such a request.
11. Security
YOGEXA uses measures intended to protect data, which may include authenticated access, authorization controls, encrypted connections, private document storage, logging and service-provider security features. However, no system can guarantee complete security. Users must protect passwords, devices and recovery methods and promptly report suspected compromise.
12. International processing
Some service providers may process or store information outside Pakistan. Where this occurs, YOGEXA seeks to use reputable providers and appropriate contractual/technical safeguards consistent with the nature of the service and applicable legal requirements.
13. Children's data
YOGEXA is intended for professional legal-practice use and is not directed to children as account holders. A legal matter may nevertheless contain information about minors where a law firm has a lawful and professional reason to record it.
14. User and data-subject requests
Requests concerning account information may be sent to [email protected]. Where the request concerns information controlled by a law firm using YOGEXA, the requester may need to contact that firm directly; YOGEXA may refer the request to the relevant customer where appropriate.
15. Changes to this Policy
This Policy may be updated when YOGEXA changes its services, providers or legal practices. The current version and effective date will be posted here. Material changes may also be communicated through the application or by email where appropriate.
16. Contact
Privacy questions or requests: [email protected].