Legal

Privacy policy

Last updated 2 November 2026

Who we are

Lexora is run by a sole proprietor (individual entrepreneur) registered in Ukraine, who is the controller of the personal data this policy describes. Write to privacy@lexora.ink about anything in it.

When your Organization puts other people’s personal data into Lexora, such as an Author’s texts or a customer list in a Knowledge Base, your Organization decides why, and we process that data on its behalf. If your Organization needs a data processing agreement with us, write to the same address.

What we collect

• Your account: your name, your email address, the Organizations you belong to and your role in each. Your password is held by our sign-in provider; we never see it.
• Invitations: the email address of each person invited, and who invited them.
• Your content: what your Organization puts into Lexora and makes in it: Brands, Authors and their texts, Knowledge Base Documents, files, pictures, projects, tasks, briefs, articles and their history, comments and mentions.
• Billing: from Paddle, your Organization’s plan, payments, invoices and payment status, and the card’s brand, last four digits and expiry date, so the Billing page can show them.
• Usage: what Lexora did, for whom and for how many credits, so your Organization can see its usage, and what each action cost us to run.
• Technical: our servers log each request, with its IP address, browser and time, to keep Lexora working and secure.
• Messages: what you send us by email.

Why we use it

• To provide Lexora under our terms with you: to sign you in, to research, write and check your articles, to send the emails your work needs and to bill your Organization.
• For our legitimate interests: keeping Lexora secure, preventing abuse, fixing problems and knowing what it costs to run.
• To meet legal duties, such as keeping accounting records.

We don’t sell personal data, show ads or build marketing profiles, and we send no newsletters or marketing emails unless you ask for them. Emails about your work, about Runs and about comments and mentions, can be switched off on your Account page. Invitations, sign-in codes and notices about your account or plan can’t be.

Who else handles it

These companies process data for us, each only for its part of Lexora and under a contract that requires it to protect the data:

• Amazon Web Services: our servers, database and file storage, Knowledge Base search, sign-in, email, and the browser Lexora reads some web pages with.
• Anthropic: the AI models that research, write, check and edit text. They receive what a task needs: its brief, the Brand and the Author, passages from your Knowledge Bases and files, and the article.
• OpenAI: makes pictures from their descriptions.
• Paddle: checkout, payments, tax and invoices. As Merchant of Record, Paddle is responsible for the payment details you give it, under its own privacy notice.

Under their business terms with us, Anthropic and OpenAI don’t use what we send them to train their models. We may also disclose data where the law requires it, or to a buyer of our business, which would be bound by this policy.

Where your data is

We store your data in the European Union, with Amazon Web Services in Frankfurt, Germany. Anthropic and OpenAI process what they receive in the United States, and Paddle is based in the United Kingdom. We run Lexora from Ukraine, and reach your data from there to support you and keep Lexora working. When Anthropic, OpenAI or Paddle receive data outside the EU, we rely on the European Commission’s Standard Contractual Clauses, or on the EU–US Data Privacy Framework where the recipient is certified under it.

How long we keep it

• Your account: until you ask us to delete it. If you’re an Owner, transfer ownership of your Organizations or delete them first.
• An Organization’s content: while the Organization exists. Its Owner can delete it at any time, which deletes its content, files and Knowledge Base Documents at once.
• After a plan ends: the Organization’s content stays for 12 months after the last period you paid for, and you can still open, copy and download it. We email the Owner a month before we delete the Organization with everything in it, and again a week before. Start a plan again and everything is where you left it.
• Billing records: as long as tax and accounting law requires.
• Server logs: 30 days.
• Messages to us: as long as we need them to answer you.

Deleted data also leaves our backups as they expire.

How we protect it

• The database itself limits every query Lexora makes to one Organization, so one Organization’s data can’t appear in another’s.
• Data travels encrypted, and files are stored encrypted.
• Passwords are held by our sign-in provider and cards by Paddle; neither reaches our servers.
• Only the people who run Lexora can reach its systems, and only to support you or fix a problem.

Your rights

You can ask us to show you your data, correct it, delete it, give you a copy to take elsewhere or limit how we use it, and you can object to how we use it. Write to privacy@lexora.ink; we answer within one month.

Some of this you can do yourself: change your name on your Account page, switch emails off, leave an Organization or, as its Owner, delete it. If you think we’ve handled your data wrongly, you can complain to the data protection authority where you live or work.

Cookies and browser storage

Lexora uses no advertising or analytics cookies and no tracking pixels. The app keeps a few things in your browser’s local storage: your sign-in session, the last Organization you opened, your light or dark theme and how you left its panels. They exist only for features you use, so we don’t ask for consent.

When you open Paddle’s checkout, Paddle sets cookies of its own for payments and fraud prevention, described in its privacy notice.

Children

Lexora is a tool for work and isn’t meant for anyone under 18. We don’t knowingly collect children’s data.

Changes to this policy

When we change how we handle your data, we’ll update this policy and its date, and email you before a change that affects you takes effect.