This Privacy Policy explains how Lexandro.ai Ltd processes personal data when you visit our website, interact with us, or use our services. It also explains your rights and how to exercise them.
1. Scope
This Privacy Policy applies to the Lexandro.ai website, product pages, marketing pages, and services made available by Lexandro.ai Ltd through its platform, together the Services.
If you do not agree with this Privacy Policy, please do not use the Services.
2. Roles and responsibilities
Depending on the context, Lexandro.ai Ltd may process personal data in different roles.
Lexandro.ai Ltd as controller
We act as a controller for personal data processed in connection with:
- our website
- marketing and business development activities
- sales enquiries and demo requests
- account creation and administration
- billing and contract management
- security, fraud prevention, and platform operations
- communications with users, customers, and prospective customers
Lexandro.ai Ltd as processor
Where organisations use Lexandro.ai and submit documents, prompts, uploads, outputs, or other content that may contain personal data, Lexandro.ai Ltd may process that data on behalf of the relevant customer.
In those cases, the customer organisation acts as the controller, and Lexandro.ai Ltd acts as the processor in accordance with the applicable customer agreement and, where relevant, a Data Processing Addendum.
If your personal data is included in customer content submitted by your employer, law firm, company, or another organisation using Lexandro.ai, please contact that organisation first.
3. Personal data we collect
We may collect personal data in the following ways.
3.1 Data you provide directly
This may include:
- name
- email address
- telephone number
- company or organisation name
- job title or role
- account details
- communications you send to us
- support requests, feedback, and other correspondence
3.2 Data collected automatically
When you use the website or platform, we may collect certain technical and usage information, including:
- IP address
- timestamps
- log data
- browser type and device information
- pages viewed
- interaction and feature usage data
- performance and diagnostic information
3.3 Data from third parties
We may receive personal data from third parties, such as:
- identity and authentication providers, including single sign on providers
- service providers supporting analytics, security, or communications
- business partners, where relevant to a request or rollout
4. How we use personal data
We use personal data where necessary to:
- provide, operate, and maintain the Services
- authenticate users and manage accounts
- respond to enquiries and provide support
- improve platform performance, reliability, and user experience
- monitor security and prevent misuse, fraud, or unauthorised access
- communicate about onboarding, service updates, account matters, and operational changes
- manage commercial relationships, contracting, and billing
- comply with legal, regulatory, and contractual obligations
5. Legal bases under the GDPR
Where the GDPR applies, Lexandro.ai Ltd processes personal data on one or more of the following legal bases:
Contract
Where processing is necessary to provide the Services, respond to a request, or take steps before entering into an agreement.
Legitimate interests
Where processing is necessary for our legitimate interests, including operating, securing, improving, and supporting the Services, managing our business relationships, and protecting our rights, provided those interests are not overridden by your rights and interests.
Consent
Where consent is required under applicable law, including for certain cookies or marketing activities.
Legal obligation
Where processing is necessary to comply with applicable law, regulation, or binding legal requirements.
6. Sharing and disclosures
We may share personal data with:
- service providers supporting hosting, infrastructure, security, support, analytics, communications, or related operations
- professional advisers, including legal, accounting, insurance, and compliance advisers
- competent authorities, regulators, courts, or other third parties where required by law, regulation, or binding order
- relevant parties in connection with a corporate transaction, restructuring, financing, or acquisition, subject to appropriate confidentiality safeguards
We do not sell personal data.
We do not use customer content to train public AI models.
7. International transfers
Personal data may be processed in countries where Lexandro.ai Ltd or its service providers operate.
Where required under applicable law, we use appropriate safeguards for international transfers, including standard contractual clauses or other recognised transfer mechanisms, together with relevant technical and organisational measures.
8. Retention
We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law, regulation, contract, or legitimate business need.
Where Lexandro.ai Ltd acts as a processor, retention of customer content is governed by the relevant customer agreement and the customer’s instructions.
9. Security
We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction.
These measures may include:
- encryption
- access controls
- monitoring and logging
- authentication controls
- internal governance and confidentiality measures
- incident management procedures
No system can be guaranteed to be completely secure. If you believe your account or data may have been compromised, please contact us promptly.
10. Your rights
Depending on your location and the law that applies, you may have rights that include:
- access to your personal data
- rectification of inaccurate or incomplete personal data
- deletion in certain circumstances
- restriction of processing in certain circumstances
- objection to processing in certain circumstances
- data portability where applicable
- withdrawal of consent where processing is based on consent
- the right to lodge a complaint with a competent supervisory authority
To exercise your rights, please contact us at privacy@lexandro.ai.
Where Lexandro.ai Ltd acts only as a processor on behalf of a customer, we may direct you to the relevant customer organisation.
11. Cookies
We use cookies and similar technologies to operate the website, remember preferences, improve performance, and understand how the website is used.
Cookie categories
Essential cookies
Necessary for core website and platform functionality.
Analytics cookies
Used to understand usage and improve performance.
Preference cookies
Used to remember settings such as language or region.
You can manage cookies through your browser settings. Please note that disabling certain cookies may affect website functionality.
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time.
If we make material changes, we will take reasonable steps to notify users where appropriate, including by updating this page or using other relevant communications.
13. Contact
If you have questions, requests, or concerns regarding this Privacy Policy or the way personal data is processed, please contact:
Lexandro.ai Ltd Privacy Team
Email: privacy@lexandro.ai