Privacy Policy

Last updated: 22 October 2026

This policy explains how EVALIX LLC ("EVALIX", "we", "us") collects, uses and protects personal data when you use evalix.io and our products: Prodex, LexAssist, SmartVal and Numera. Each product also has its own privacy notice, linked in its footer, with more detail about that product. Where a product notice is more specific, it applies to that product alongside this policy:

• Prodex: prodex.evalix.io/privacy
• SmartVal: smartval.evalix.io/privacy-policy
• Numera: numera.evalix.io/privacy
• LexAssist: linked in the footer of lexassist.evalix.io

1. Who is responsible

EVALIX LLC, 2333 Brickell Ave D1-179, Miami, FL 33129, USA, is the controller of the personal data described in this policy, except as explained in section 9. Privacy contact: [email protected].

2. What we collect

• Account data: name, email address, phone number if you give it, organization, role and sign-in details.
• Content you put into a product: projects, tasks, cases, matters, documents, photos, invoices, reports, charts and messages to our AI assistants.
• Audio: where you use voice features or record a meeting for transcription, the audio is processed to produce the transcript or summary. Where a product says it does not store recordings, we keep only the result.
• Billing data: plan, invoices and payment status. Card payments are handled by Stripe, and in-app purchases by Apple or Google. We never receive your full card number.
• Usage and device data: log data, actions in the product, IP address, browser and device type, and error reports, used to run and secure the service.
• Integration data: when you connect a service such as Google Calendar, Gmail, Google Drive, Slack or Make, the data needed to operate that connection.
• Messages to us: what you send through our contact forms or by email.

3. How we use it

• To provide the products, including the AI features you use.
• To manage accounts, subscriptions, billing and support.
• To keep the products secure, prevent abuse and fix faults.
• To send service messages about your account, such as billing notices.
• To send a limited number of onboarding messages. Each of these carries an unsubscribe link.
• To meet legal, tax and accounting obligations.

We do not sell personal data, and we do not use it for third-party advertising.

4. Legal bases (EU, UK and similar laws)

We process personal data to perform our contract with you; on our legitimate interests in running, securing and improving the products, balanced against your rights; with your consent where we ask for it, which you can withdraw at any time; and to meet legal obligations.

5. AI processing

When you use an AI feature, the content needed for that request is sent to an AI model provider to generate the response. We use these providers' paid business services, whose terms do not allow them to use our customers' content to train their models. We do not use your content to train AI models, and we send only what the feature needs.

6. Who we share data with

We share personal data only with service providers that help us run the products, under contracts that limit their use of it; with services you choose to connect; and where the law requires. Our main providers:

If EVALIX is involved in a merger, acquisition or sale of assets, personal data may be transferred as part of that transaction, subject to this policy.

Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

7. International transfers

EVALIX is a US company, and our providers operate in the United States, the European Union, Israel and elsewhere. Where personal data from the EU, UK or Israel is transferred to a country without an adequacy decision, we rely on appropriate safeguards such as Standard Contractual Clauses or the EU–US Data Privacy Framework where the provider is certified.

8. How long we keep data

• Account and product data is kept while your account is active. After it closes, and after the 30-day export period in our Terms, it is deleted or anonymized, except where we must keep it.
• Some products keep records longer for professional reasons, as their notices explain. SmartVal, for example, keeps assessment case records for at least 7 years after the relationship ends, on behalf of the assessor's office that controls them.
• Billing and tax records are kept for the period required by tax and accounting law.

9. When you are the controller

If you use a product to handle personal data about your own clients or other people — for example a law firm's clients in LexAssist, an assessor's case parties in SmartVal, or a practitioner's clients in Numera — you decide why and how that data is processed. For that data you are the controller and EVALIX is your processor: we process it only on your instructions to provide the product, as set out in our Terms of Service. Requests from those people should go to you first; we will help you respond.

10. Security

We use encryption in transit, encryption at rest through our hosting providers, role-based access and data separation between organizations. No system is perfectly secure, but we work to protect your data and will tell affected customers promptly about a security incident that concerns their data.

11. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict some processing, and to withdraw consent. To use these rights, email [email protected], or use the in-app controls where a product offers them. We reply within 30 days.

You can also complain to a data protection authority: in Israel, the Privacy Protection Authority; in the EU, your local supervisory authority; in the UK, the Information Commissioner's Office.

12. Children

Our products are not intended for anyone under 18, and we do not knowingly collect their data. If you believe a minor has given us personal data, contact us and we will delete it.

13. Cookies and local storage

We use cookies and browser storage that are needed to sign you in, keep your session secure and remember your preferences. We do not use advertising cookies or cross-site tracking, and our websites carry no analytics or advertising scripts. Our pages load fonts from Google Fonts, and SmartVal's sign-in page loads the OneSignal notification script; neither is used to track you.

14. Changes

We may update this policy as the products change. For material changes we will notify you by email or in the product at least 30 days before they take effect, and update the date at the top.

15. Contact

EVALIX LLC, 2333 Brickell Ave D1-179, Miami, FL 33129, USA · [email protected]