Privacy Policy

Lexir ("Lexir", "we", "us") runs lexir.ai, a tool that audits a business's public online presence (its website, search listings, reviews and social pages) and turns the results into reports and slideshows. Lexir is used by marketing agencies, sales teams and the businesses they work with. You can reach us at team@lexir.ai.

• Your account: your name, email address, the company or agency you belong to, your role and your sign-in details. Passwords are handled by our sign-in provider and are never stored by Lexir in plain text.
• What you ask Lexir to audit: the business names, website addresses and locations you enter, and the reports, slideshows, notes and content Lexir makes from them.
• Public information about audited businesses: what anyone can see online, such as a business's website, its search results, listings, reviews and public social media pages.
• Accounts you choose to link: described in the next section. Nothing is read from a linked account until you link it yourself.
• Usage and device information: pages visited, actions taken, browser type, IP address and error logs, used to keep Lexir working and secure.
• Cookies: Lexir uses cookies that keep you signed in and protect sign-in steps. We do not use advertising cookies.

You can link other services from Settings. Each one asks for the least access Lexir needs, and you can unlink it at any time.

• Google Calendar (read-only). Lexir reads your upcoming calendar events: their time, title, attendees' email addresses, description and location. It uses them for one thing: to find the website of the business you are meeting, so it can audit that business before your call and show the call on your Lexir home page. Lexir never creates, changes or deletes calendar events.
• Gmail (send only). Lexir can send an email from your Gmail address only when you press Send in Lexir, such as when you email a slideshow to a prospect. You see the recipient, subject and message before it goes. Lexir cannot read, search, list or delete any of your email.
• HubSpot (read-only). Lexir reads your HubSpot meetings, the contacts and companies on them and the owners in your account, to find who you are meeting and audit their business before the call. Lexir never writes to HubSpot and never reads deals.
• Claude, ChatGPT and other AI apps. If you connect one, it can run audits and read results in your Lexir account, as you, until you unlink it.

Access tokens for linked accounts are stored encrypted and are used only by Lexir's servers.

Lexir's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We use Google Calendar and Gmail data only to provide the features described above, which you can see in Lexir.
• We do not sell Google user data, use it for advertising, or use it to build profiles of you.
• We do not use Google user data to train or improve artificial intelligence or machine learning models, ours or anyone else's.
• We do not let people read your Google data, except with your permission, when needed for security or to investigate abuse, or to comply with the law.
• We transfer it to others only as needed to run these features (for example, to our hosting and database providers), and when a business's website address found in an event is audited, only that public website address is used by the audit.

• To run audits and make the reports, slideshows and content you ask for.
• To audit the businesses you are about to meet, when you link a calendar or HubSpot.
• To send the emails you ask Lexir to send, and account emails such as invitations and password resets.
• To keep Lexir secure, prevent abuse, fix problems and understand which features are used.
• To meet legal obligations.

We do not sell personal information. We share it only with:

• Service providers that run Lexir for us under contract, such as hosting (Vercel), database and sign-in (Supabase), email delivery, and the data and AI services that run audits and write report text. Audits send these services public business information, such as a website address and what it shows, not your linked account data.
• Your own team: people in your company or agency account can see the audits and calls in that account.
• The law: when required by law, or to protect the rights and safety of Lexir, our users or others.
• A buyer: if Lexir is merged or sold, under this policy.

We keep your account information while your account is open. Audits, reports and slideshows stay in your account until you or your account's admin delete them, or the account closes. Calendar and HubSpot call details are kept for showing your upcoming and recent calls. When you unlink Google or HubSpot, Lexir deletes its access token straight away and asks the service to revoke it. When an account closes, we delete or anonymize its data within 90 days, except what we must keep by law.

• Unlink any account from Settings, Connections. You can also remove Lexir from your Google account at myaccount.google.com/permissions or from Connected apps in HubSpot.
• See, correct or delete your data by writing to team@lexir.ai. We answer within 30 days.
• California residents have the right to know what personal information we collect, to delete it, to correct it, and not to be treated differently for asking. We do not sell or share personal information for cross-context advertising.

Data is encrypted in transit, linked-account tokens are encrypted at rest, and access inside Lexir is limited to each account's own people. No system is perfectly secure; if we learn of a breach that affects you, we will tell you as the law requires.

Lexir is a business tool and is not meant for anyone under 18. We do not knowingly collect information from children.

If we change this policy, we will update the date at the top. If a change affects how we use linked-account data, we will tell you in Lexir or by email before it takes effect.

Questions or requests about privacy: team@lexir.ai.