Privacy Policy

LexaGPT ("Company", "we", "us", or "our") operates a language learning platform (the "Service") as a software-as-a-service (SaaS). We are committed to protecting your privacy and handling your personal data with transparency and care.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our mobile applications, or interact with our Service. It also describes your rights regarding your personal data and how you can exercise them.

By using the Service, you consent to the collection and use of your information in accordance with this Privacy Policy. If you do not agree with any part of this policy, you must not use the Service.

2.1. Information You Provide to Us

Account Information: When you create an account, we collect your name, email address, and password. You may also choose to provide additional profile information such as your profile picture, language preferences, and learning goals.

Payment Information: When you purchase a subscription, our third-party payment processors (such as Paddle, Stripe, or similar) collect your payment details. We do not store full credit card numbers on our servers. We may store a payment token and the last four digits of your card for identification purposes.

User Content: Any content you submit or create while using the Service, including saved vocabulary, comments, notes, and responses to exercises, is stored and associated with your account.

Communications: If you contact our support team, respond to surveys, or otherwise communicate with us, we collect and store the information you provide.

2.2. Information Automatically Collected

Device Information: We automatically collect certain information about your device when you access the Service, including your IP address, browser type and version, operating system, device identifiers, and time zone settings.

Usage Data: We collect information about your interactions with the Service, such as the videos you watch, words you click, features you use, time spent on pages, navigation paths, and session duration.

Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies to enhance your experience, analyze usage, and deliver personalized content. For more details, see Section 6.

To Provide and Maintain the Service:

• Create and manage your account
• Deliver the interactive video learning experience
• Process your subscription payments
• Provide customer support and respond to your inquiries

To Improve and Develop the Service:

• Analyze usage patterns to optimize features and content
• Identify and fix technical issues
• Develop new features and functionality

To Communicate with You:

• Send service-related emails (e.g., account verification, payment confirmations, subscription renewals)
• Share updates, newsletters, and marketing communications where permitted (you may opt out at any time)

To Ensure Security and Prevent Abuse:

• Monitor for suspicious or fraudulent activity
• Enforce our Terms of Service
• Protect the integrity and security of the Service

For Legal Compliance:

• Comply with applicable laws, regulations, and legal processes
• Respond to lawful requests from public authorities

If you are located in the European Economic Area (EEA), the United Kingdom, or other jurisdictions with similar data protection laws, we process your personal data based on the following legal grounds:

• Performance of a Contract: Processing necessary to provide the Service you have requested, including account registration, payment processing, and service delivery.
• Legitimate Interests: Processing for our legitimate business interests, such as improving the Service, analyzing usage, preventing fraud, and communicating with users.
• Consent: Where you have given explicit consent, such as for marketing communications or optional data collection features.
• Compliance with Legal Obligations: Processing required to comply with applicable laws and regulations.

We do not sell your personal data. We share your information only in the following limited circumstances:

Service Providers: We engage trusted third-party companies to perform functions on our behalf, including:

• Payment processing (e.g., Paddle, Stripe)
• Analytics and performance monitoring (e.g., Google Analytics, Amplitude)
• Customer support tools (e.g., Chatwoot, Intercom)
• Email delivery and marketing platforms
• Cloud hosting and infrastructure providers

Third-Party Video Content Providers: Our Service integrates video content from platforms such as YouTube. When you access such content, your interactions may be subject to the privacy policies of those third parties. We encourage you to review their policies.

Business Transfers: If we are involved in a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and ensure continued protection of your data.

Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities.

Protection of Rights: We may disclose information when we believe in good faith that such disclosure is necessary to enforce our Terms of Service, protect our rights, property, or safety, or investigate or prevent fraud or security issues.

We use cookies and similar tracking technologies to enhance your experience and analyze usage. Cookies are small text files stored on your device that help us remember your preferences and understand how you interact with the Service.

Types of Cookies We Use:

• Essential Cookies: Necessary for the Service to function (e.g., authentication, security)
• Preference Cookies: Remember your settings and language preferences
• Analytics Cookies: Collect information about how users interact with the Service
• Marketing Cookies: Used to deliver relevant advertisements and measure campaign effectiveness

Managing Cookies: Most browsers allow you to control cookies through their settings. You can refuse cookies or delete existing ones. However, disabling essential cookies may affect the functionality of the Service.

Third-Party Cookies: We use third-party analytics and advertising services that may set their own cookies, including Google Analytics, Amplitude, and Facebook Pixel.

We retain your personal data for as long as your account is active or as needed to provide you with the Service. After you delete your account, we will retain certain information for legitimate business purposes, such as:

• Compliance with legal obligations (e.g., tax and accounting records)
• Fraud prevention and security monitoring
• Resolving disputes and enforcing our agreements

Specific retention periods:

• Account Information: Retained for the duration of your account. After deletion, we retain a minimal set of data (e.g., transaction records) for up to 6 months unless a longer retention period is required by law.
• Usage Data: Aggregated and anonymized analytics data may be retained indefinitely for statistical purposes.
• Payment Information: Processed by third-party providers; we retain transaction identifiers and amounts for accounting purposes.

You may request deletion of your account at any time through your account settings or by contacting us.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. These measures include:

• Encryption of data in transit (TLS/SSL) and at rest
• Regular security assessments and vulnerability scanning
• Access controls limiting employee access to personal data
• Secure authentication mechanisms

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, and any transmission is at your own risk.

We operate globally and may transfer your personal data to countries outside your country of residence. These countries may have data protection laws that differ from those in your jurisdiction.

When we transfer data to countries that have not been recognized as providing an adequate level of protection, we rely on appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission or transfers to service providers certified under applicable data privacy frameworks.

By using the Service, you acknowledge and consent to the transfer of your data to such countries.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure ("Right to Be Forgotten"): Request deletion of your personal data, subject to legal limitations.
• Right to Restrict Processing: Request that we limit how we use your data.
• Right to Data Portability: Request a copy of your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Withdraw any consent you have previously given.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within a reasonable timeframe, typically within 30 days.

The Service is not intended for individuals under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that we have inadvertently collected personal data from a child under 13, we will take steps to delete it promptly.

If you are a parent or guardian and believe your child has provided us with personal data, please contact us.

The Service may contain links to third-party websites, applications, or services that are not owned or controlled by us. This Privacy Policy does not apply to such third parties. We are not responsible for the privacy practices or content of third-party sites. We encourage you to review the privacy policies of any third-party services you access.

Notably, our Service integrates with:

• YouTube: By using the Service, you agree to be bound by YouTube's Terms of Service and Google's Privacy Policy. Video content is subject to the policies of the platform owner.
• Payment Processors: Payment transactions are handled by our payment partners. Please refer to their privacy policies for details on how they process your payment information.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will revise the "Last Updated" date at the top of this policy.

If we make material changes, we will notify you through the Service or by email (using the address associated with your account) before the changes become effective. Your continued use of the Service after the effective date constitutes your acceptance of the revised policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: