LAWDEX
Sign inStart free trial

Terms of Service

Last updated 30 October 2026

1. Who these terms are between

These Terms of Service ("Terms") are a contract between Kian Consult Ltd, a company registered in Nigeria under RC 7617713, whose registered address is No. 6, Eesa Tuntun, Ido Osun, Osun State, Nigeria ("Kian Consult", "we", "us"), and the law firm, chambers or other organisation that subscribes to Lawdex (the "Subscriber" or "Firm"). Lawdex is a product of Kian Consult.

By creating a workspace, accepting an invitation or using Lawdex you accept these Terms, the Data Processing Agreement in Schedule 1 and our Privacy Policy. If you accept for a firm, you confirm you have authority to bind it.

2. Definitions

  • "Service" means the Lawdex web and installable app at lawdex.app, its features and its support.
  • "Authorized User" means a person the Subscriber invites to its workspace, in any role.
  • "Workspace" means the Subscriber’s private area of the Service.
  • "Customer Data" means everything the Subscriber and its Authorized Users put into the Workspace, including personal data about clients and others.
  • "AI Features" means the AI Summariser, Document Generator, knowledge base and the Ask Rah assistant.
  • "DPA" means the Data Processing Agreement in Schedule 1.

3. Who may use Lawdex

You must be at least 18 and act for a law firm, chambers, legal department or similar professional practice. Lawdex is a business service; it is not offered to consumers for personal use.

Federal public institutions and their contractors must not store data classified as Level 3 or Level 4 under the NITDA National Cloud Policy 2025 in Lawdex unless we have signed a separate written agreement covering in-country hosting.

4. Accounts, roles and security

  • Roles. Each Authorized User has one role: Administrator, Partner, Head of Chambers, Associate or Legal Secretary. Roles decide what a user can see and change, and are enforced on our servers.
  • The Subscriber controls access. The Subscriber, through its Administrator, decides who is invited, what role they have and when they are removed. Remove people promptly when they leave.
  • Credentials. Keep your password private. Every user can turn on two factor authentication at no cost, and once it is on it is required for privileged changes. We strongly recommend it for every account and expect it of Administrators and Partners. Tell us at once if you suspect misuse.
  • Responsibility. You are responsible for activity under your account. We are not responsible for loss caused by shared or stolen credentials, by not using the security features we provide, or by the Subscriber’s own role settings.

5. Plans and prices

Each plan is priced by practice type. Solo is for one lawyer. Chambers is for up to 4 partners with equal access and one secretary. Firm includes 8 seats, and the Subscriber can buy extra seats at the price shown below. Inviting more people than the plan allows needs an upgrade.

Current prices in Naira
PlanPractice typeSeatsMonthly (30 days)Annual (365 days)
EssentialsSolo1₦2,500₦25,000
EssentialsChambers4, plus 1 secretary seat₦5,000₦50,000
EssentialsFirm8, then a price per extra seat₦9,000₦90,000
PlusSolo1₦3,500₦35,000
PlusChambers4, plus 1 secretary seat₦6,500₦65,000
PlusFirm8, then a price per extra seat₦12,000₦120,000
ProSolo1₦9,000₦90,000
ProChambers4, plus 1 secretary seat₦15,000₦150,000
ProFirm8, then a price per extra seat₦27,000₦270,000
Extra seats on Firm, per seat
PlanMonthly (30 days)Annual (365 days)
Essentials₦1,000₦10,000
Plus₦1,250₦12,500
Pro₦2,000₦20,000

An annual period costs 10 times the monthly price. Essentials has no AI Features and no video meetings. Plus adds the AI Features and, on Chambers and Firm, video meetings. Pro adds more research answers. Features we describe as coming soon are not part of any plan until we release them.

Workspaces that existed when the new prices started keep their price and AI limits for 12 months. Billing shows the exact date. We will give you written notice before that price or those limits change.

Fair use limits apply and are shown in the app. Each month, Ask Rah legal research answers are limited to 15 on Solo, 25 on Chambers, 40 on Firm on Plus and 50 on Solo, 100 on Chambers, 160 on Firm on Pro, with up to 8 per person a day on Plus and 20 on Pro. Everyday Ask Rah requests are limited to 150 on Plus and 300 on Pro. Every AI plan may also make up to 100 summaries, 50 document generations and 200 knowledge base uploads a month. Each workspace gets 75 MB of document storage unless we agree more. We may change these limits with notice.

6. Free trial

A new workspace gets a 7 day free trial with the Plus features, including the AI Features. No card is needed. When the trial ends the workspace becomes read only until a plan is bought; nothing is deleted.

7. Payment

Prices are in Nigerian Naira. You pay in advance for each period by bank transfer through CozziPay (a one time account shown at checkout, valid for 30 minutes). Earlier subscriptions were paid through Paystack, which still holds the records of those payments. We never see or store your full card or bank details. A period starts when the payment is confirmed: 30 days for monthly and 365 days for annual.

8. Renewal and late payment

Subscriptions do not renew automatically and we never charge a stored card. Before your period ends we remind your Administrators and Partners in the app and by email: about 7, 3 and 1 days before for monthly plans, and about 14, 7 and 1 days before for annual plans.

If you do not renew, you keep full access for a 3 day grace period. After that the workspace becomes read only: you can still sign in, view and export everything, but not add or change records, until you renew. There are no late fees.

9. Cancellation and refunds

You can stop at any time by not renewing. If you simply do not renew, you keep access until the end of the period you have paid for, and the workspace then becomes read only as described above.

You can also close your workspace in Settings. Closing starts a 30 day export window, and the workspace is then deleted, whatever time is left on the period you have paid for. Unused time is not refunded on closure, except as set out in the next paragraph. You can cancel a closure in Settings during the 30 days.

Fees are not refundable, except that we refund duplicate or mistaken payments, refunds required by Nigerian consumer protection law, and the unused part of a prepaid period if you end the subscription because you objected to a new sub-processor under the DPA.

10. Taxes

Prices are in Naira. Where value added tax applies to your subscription, we add it at the rate in force and show it on your receipt. Any other taxes, duties or bank charges on your side are yours.

11. Acceptable use

You and your Authorized Users must not:

  • break any law, including the Cybercrimes (Prohibition, Prevention, etc.) Act 2015 and the NDPA, or use Lawdex to infringe anyone’s privacy, confidentiality or intellectual property;
  • upload malware or content that is unlawful, defamatory or obscene;
  • try to reach another firm’s data, test or bypass our security, or reverse engineer the Service;
  • scrape or bulk download the Service by automated means, other than the export tools we provide;
  • misuse the AI Features or video meetings, for example to generate unlawful content or to overload the Service;
  • resell or share access with people outside your firm.

If the Nigeria Data Protection Commission or another authority directs us to restrict a user who is breaching someone’s privacy, we will do so.

12. Your data

The Subscriber owns its Customer Data and is its controller under the NDPA. We are its processor. You give us a limited licence to host, copy and process Customer Data only to provide and support the Service and as the DPA allows. We do not sell it, use it for advertising or use it to train AI models.

The DPA in Schedule 1 forms part of these Terms. Our Privacy Policy explains how we handle personal data where we are the controller.

13. Confidentiality and legal professional privilege

We treat Customer Data as confidential. Our staff do not read it except on the Subscriber’s documented instruction or where the law compels us, and everyone who can access it is bound by confidentiality. We hold privileged material only as the Subscriber’s agent and service provider, and our hosting it does not waive privilege. If a court, regulator or other authority demands Customer Data, we tell the Subscriber promptly, unless the law forbids it, so that it can assert privilege, and we disclose only what we must.

14. AI Features

The AI Features produce drafts and summaries by machine. Their output can be wrong, incomplete or out of date, and it is not legal advice. You are responsible for checking every output against the source and the law before you rely on it or share it. When a user runs an AI Feature, the text submitted is sent to OpenAI as our sub-processor, as described in the Privacy Policy. An Administrator or Partner can turn the AI Features off for the whole firm in Settings.

15. Legislation library

The legislation library is for reference. Each instrument is checked by a person and shows its source and review date, but it may not reflect the latest amendments, commencement orders or official gazettes, and it is not an official text. Check the official gazette or certified copy before you rely on it.

16. Financial features

The Firm Ledger and financial analysis features are for internal tracking and capacity planning only. They are not financial advice and do not replace certified accounting software or official tax reporting to the Nigeria Revenue Service (NRS) or a state internal revenue service.

17. Availability and support

We work to keep Lawdex available at all times, and we monitor it every 10 minutes, but it is provided as available and we do not promise it will never be interrupted. We may pause it for maintenance or urgent security work; we give notice of planned maintenance where we can. Support is available at lawdexapp@gmail.com and on WhatsApp.

18. Export and deletion

  • An Administrator or Partner can export the firm’s data at any time from Settings, with links to every file.
  • Each user can download their own personal data, and can delete their account; the account is deleted 14 days later unless they cancel. Work records they created stay with the firm.
  • When the Administrator closes the workspace, everyone keeps access for 30 days so the firm can export what it needs; then the workspace, its files and its member accounts are deleted. Backup copies expire on the schedule in the Privacy Policy.
  • We keep billing records for 6 years for tax and accounting. Audit log entries are kept for 6 years to defend legal claims, but when the workspace is deleted they keep only what happened and when: the record contents and the names in them are removed.

19. Intellectual property

Lawdex, its software, design and brand belong to Kian Consult and its licensors. These Terms give you the right to use the Service during your subscription and nothing more. If you send us feedback, we may use it without obligation to you.

20. Third party services

Payments, video meetings, email delivery and the AI Features rely on the providers listed in our Privacy Policy. Their own terms may also apply when you use them (for example at a payment checkout). We are responsible for the providers we engage as sub-processors, as the DPA sets out.

21. Warranties and disclaimers

We will provide the Service with reasonable skill and care. Apart from that, and to the extent Nigerian law allows, the Service is provided as is, without other warranties, express or implied, including fitness for a particular purpose. Lawdex is a tool: it does not give legal advice and does not replace the professional judgement of your lawyers, including on court dates and limitation periods.

22. Limitation of liability

To the extent Nigerian law allows, neither party is liable for indirect or consequential loss, loss of profit or goodwill, or missed deadlines, and our total liability in any 12 months is limited to the fees the Subscriber paid us in the 12 months before the event.

These limits do not apply to liability for fraud, for death or personal injury caused by negligence, for breach of data protection law where the law does not allow it to be limited, or to anything else that cannot lawfully be limited.

23. Indemnity

The Subscriber will compensate us for claims by third parties caused by Customer Data it had no right to upload or by its users breaching these Terms. We will compensate the Subscriber for claims by third parties that the Service itself infringes their intellectual property. Each party will tell the other promptly about a claim and let it lead the defence.

24. Suspension and termination

We may make a workspace read only for non payment, as described above. We may suspend a user or a workspace if there is a serious breach of these Terms, a security risk, or a legal order requiring it; we give notice and a chance to put things right where we can. The Subscriber may end its subscription at any time. Either party may end the contract if the other commits a serious breach and does not fix it within 30 days of notice. After termination, the export and deletion terms above apply.

25. Events beyond our control

Neither party is liable for delay or failure caused by events beyond its reasonable control, such as power or network failures at a provider, natural disasters, strikes, civil unrest or government action. The affected party will tell the other and do what it reasonably can to limit the effect.

26. Governing law

These Terms are governed by the laws of the Federal Republic of Nigeria.

27. Disputes

  • First, the parties will try to settle any dispute by good faith negotiation for 30 days after one of them gives notice.
  • If that fails, either may refer it to mediation under the Arbitration and Mediation Act 2023.
  • If mediation does not settle it within 30 days, it will be finally resolved by arbitration under the Arbitration and Mediation Act 2023, before one arbitrator, in English, with the seat in Lagos, Nigeria.
  • Either party may ask a court for urgent interim relief at any time.

Nothing in these Terms stops anyone from complaining to the Nigeria Data Protection Commission, the Federal Competition and Consumer Protection Commission or another regulator, or going to court to enforce their data protection rights.

28. Notices

Send legal notices to thekianconsult@gmail.com and to our registered address. We send notices to the Subscriber by email to its Administrators and in the app.

29. Assignment

The Subscriber may not transfer these Terms without our written consent. We may transfer them to a company that takes over the Lawdex business, if it accepts them and the DPA; we will tell you first.

30. Severability

If a court finds any part of these Terms unenforceable, the rest stays in force, and the part concerned applies to the greatest extent the law allows.

31. Entire agreement

These Terms, the DPA and the Privacy Policy are the whole agreement between the parties about the Service and replace earlier versions.

32. Changes to these Terms

We may update these Terms. For a material change we give at least 30 days notice by email and in the app. If you do not accept it, you may end your subscription before it takes effect and we will refund the unused part of any prepaid period. Otherwise the new Terms apply from the date shown.

33. Contact

Schedule 1

Data Processing Agreement

This Schedule is the written agreement NDPA 2023 section 29 requires between the Subscriber (the controller) and Kian Consult Ltd (its processor). It applies to every subscription.

  1. 1. Parties and how this agreement applies

    This Data Processing Agreement ("DPA") is between Kian Consult Ltd (RC 7617713), No. 6, Eesa Tuntun, Ido Osun, Osun State, Nigeria (the "Processor"), and the law firm, chambers or other organisation that subscribes to Lawdex (the "Controller"), at the address the Controller gives in its account. It forms part of the Lawdex Terms of Service (the "Principal Agreement") and applies automatically when the Controller accepts them. If the DPA and the Terms conflict on data protection, the DPA wins.

  2. 2. Subject matter, nature and purpose

    The Processor hosts and processes Customer Data to provide Lawdex: storing and displaying workspace records, files and messages, sending notifications, running video meetings and, when a user starts them, the AI tools. It processes Customer Data for no other purpose.

  3. 3. Duration

    This DPA lasts as long as the Processor processes Customer Data for the Controller, including the 30 day export window after closure and the time it takes for backups to expire.

  4. 4. Data and data subjects

    • Data subjects: the Controller’s members and staff; its clients and prospective clients; opposing and other parties, witnesses, counsel and court officials named in its records; tenants, landlords and other people in its property, intellectual property and corporate records; anyone else the Controller records.
    • Categories of data: identity and contact details, identification numbers, financial and transaction details, matter and court information, documents and their contents, messages, meeting audio and video while live, and any other data the Controller enters. This may include sensitive personal data and data about children.

  5. 5. Lawful basis and instructions

    The Controller is responsible for having a lawful basis under the NDPA for the processing it asks for, and for giving any notices its clients and others need. The Controller’s use and configuration of Lawdex are its documented instructions. The Processor processes Customer Data only on those instructions, unless Nigerian law requires otherwise, in which case it tells the Controller first unless the law forbids it. The Processor tells the Controller if it believes an instruction breaks the NDPA.

  6. 6. Where the data is processed

    Customer Data is stored in Germany (Supabase, Frankfurt). Some services run in the United States as set out in the sub-processor list below. The Processor relies on the transfer bases set out in the Privacy Policy (NDPA s.41 and s.43), keeps a written record of each transfer, and will give the Controller what it needs to keep its own record.

  7. 7. Confidentiality and legal professional privilege

    Everyone at the Processor who can access Customer Data is bound by confidentiality. Staff do not read Customer Data except on the Controller’s documented instruction or where the law compels it, and each such access is written down in the Processor’s support access record (who, when, why and on whose instruction). The Processor holds privileged material as the Controller’s agent and service provider and does nothing to waive privilege. If an authority demands Customer Data, the Processor tells the Controller promptly unless the law forbids it, and gives only what it is obliged to give.

  8. 8. Security

    The Processor maintains technical and organisational measures appropriate to the risk, as NDPA s.39 requires, including at least:

    • tenant isolation in the database with row level security, and roles enforced on the server;
    • two factor authentication, required for privileged changes once a user turns it on;
    • TLS with HSTS in transit, encryption at rest, and AES-256-GCM encryption of backup copies;
    • an audit log of sensitive actions that users and staff cannot edit or delete, except that record contents and names are removed when a workspace or account is erased and entries are deleted after 6 years, each change itself logged;
    • monitoring every 10 minutes, rate limits and signed payment notifications;
    • least privilege access for staff, and regular review and testing of these measures.

  9. 9. Sub-processors

    The Controller authorises the sub-processors below. The Processor binds each of them in writing to data protection terms at least as protective as this DPA, and remains responsible for them. It gives the Controller at least 30 days notice by email and in the app before adding or replacing one. The Controller may object on reasonable data protection grounds within that time; if the parties cannot resolve it, the Controller may end the subscription and receive a pro rata refund of prepaid fees for the unused period.

    Authorised sub-processors
    CompanyPurposeLocation
    SupabaseDatabase, sign in, file storage and server functions for the whole serviceGermany (Frankfurt, AWS eu-central-1)
    NetlifyHosting and content delivery for lawdex.appUnited States, with a global edge network
    OpenAIAI Summariser, Document Generator, firm knowledge base and Ask Rah, only when a user runs themUnited States
    ResendAccount, notification and service emailsUnited States
    CozziPaySubscription payments by bank transferNigeria
    PaystackEarlier subscription payments; it keeps the records of those payments (checkout now uses CozziPay)Nigeria
    8x8 (Jitsi as a Service)In-app video meetings on the Plus planUnited States
    Web push services (Google, Mozilla, Apple or Microsoft, depending on your browser)Delivering push notifications you turned onUnited States
    Google FontsFont files for the website and appUnited States
    Google (sign in with Google)Signing in with your Google account, when Lawdex offers it and you choose itUnited States
    Cloudflare TurnstileBot protection on sign up, password reset, the contact form and careers applicationsUnited States, with a global edge network

  10. 10. Helping with rights requests and assessments

    Lawdex lets the Controller find, correct, export and delete Customer Data itself. If a data subject contacts the Processor about Customer Data, it passes the request to the Controller within 2 business days and does not answer it directly unless told to. It gives reasonable help with the Controller’s data privacy impact assessments, consultations with the Nigeria Data Protection Commission and NDPC registration, including its own DPIA summary, evidence of its security measures and, once issued, evidence of its NDPC registration.

  11. 11. Personal data breaches

    The Processor notifies the Controller of a personal data breach affecting Customer Data without undue delay and within 24 hours of becoming aware of it. The notice describes, as far as known, the nature of the breach, the categories and approximate numbers of data subjects and records, the likely consequences, the measures taken or proposed, and a contact point. It sends further information in phases as it learns more, records the breach in its register, and helps the Controller meet its own duties under NDPA s.40, including the 72 hour notice to the Commission.

  12. 12. Return and deletion

    The Controller can export its data from Settings at any time. When it closes its workspace, the data stays available for 30 days for export, then the Processor deletes the workspace, its files and its member accounts. Backup copies expire on the schedule in the Privacy Policy. The Processor keeps only the billing records it must keep by law (for 6 years, with no payer identity) and, for 6 years, audit log entries that show what happened and when, with the record contents and names removed.

  13. 13. Audits and information

    The Processor makes available the information the Controller reasonably needs to show compliance with NDPA s.29, including this DPA, its records of processing, its DPIA summary and its sub-processor list. The Controller may, on 30 days notice and at most once a year (or after a breach), audit the Processor’s compliance through a qualified independent auditor bound by confidentiality, in a way that does not expose other firms’ data.

  14. 14. Liability and force majeure

    Liability under this DPA is governed by the limitation of liability, indemnity and force majeure clauses of the Terms, except that nothing limits liability that cannot be limited under Nigerian law.

  15. 15. Disputes and governing law

    This DPA is governed by the laws of the Federal Republic of Nigeria and disputes are resolved as set out in the Terms. Nothing in it prevents either party or any data subject from complaining to the Nigeria Data Protection Commission or going to court to enforce data protection rights.