Privacy Policy

GDPR compliant (Regulation EU 2016/679) Belgian Act of 30 July 2018

Data controller

Company
Lexavo SRL
Registered office
Brussels, Belgium
CBE
en cours d'attribution (SRL en cours d'immatriculation)
DPO
privacy@lexavo.be

Data collected and processed

Legal questions

Text of questions submitted to the AILegitimate interest (Art. 6.1.f)Session only (not stored)

E-mail (Emergency)

E-mail address provided voluntarilyConsent (Art. 6.1.a)12 months after the last interaction

Technical data

Anonymised error logsLegitimate interest (Art. 6.1.f)90 days

App preferences

API URL, consent (local)Performance of the contract (Art. 6.1.b)Until uninstallation

Third parties and international transfers

Anthropic (USA)

Questions submitted to the AI are processed via Anthropic's Claude API. This transfer outside the EU is governed by Standard Contractual Clauses (SCC) in accordance with Art. 46 GDPR. Anthropic policy: www.anthropic.com/privacy

Stripe (USA/IE)

Payment processing (where applicable). Stripe is PCI-DSS certified. Lexavo stores no payment data.

Railway (USA)

Hosting of the Lexavo API and the user account database (servers located in Western Europe). Transfers governed by Standard Contractual Clauses (Art. 46 GDPR).

Hostinger (European Union)

Hosting of the legal documentary database (Qdrant vector search engine) on a server located in the European Union. No transfer outside the EU for this processing.

Encoding service (outside EU)

The text of your questions is encoded (vectorised) via an embeddings API to retrieve the relevant legal texts. This transfer outside the EU is governed by Standard Contractual Clauses (SCC, Art. 46 GDPR).

PostHog (USA)

Anonymised audience measurement (usage statistics), only if you consent. No legal data or question content is transmitted. Transfer governed by SCC (Art. 46 GDPR).

Sentry (USA)

Detection of technical errors in the application (crash reports without legal content, pseudonymised data). Transfers governed by SCCs (Art. 46 GDPR).

Resend (USA)

Sending transactional emails (password reset, notifications). Only the email address is transmitted. Transfer governed by SCC (Art. 46 GDPR).

🛡️ Your data is never sold, shared for advertising purposes, or transferred to third parties not mentioned above.

Cookies

The site sets only one strictly functional cookie: 'NEXT_LOCALE', which remembers your chosen language for the duration of your visit (session cookie, no tracking). No advertising, analytics or tracking cookies are used, so no consent banner is required (exempt cookie under the Belgian Data Protection Authority guidelines).

Your rights (GDPR Art. 15-22)

Access

Obtain a copy of your personal data processed by Lexavo.

Rectification

Correct inaccurate or incomplete data concerning you.

Erasure

Request the deletion of your data ("right to be forgotten").

Portability

Receive your data in a structured, machine-readable format.

Objection

Object to the processing of your data on legitimate grounds.

Restriction

Request the restriction of processing in certain cases.

How to exercise your rights:

Send an e-mail to privacy@lexavo.be with a copy of your identity document. Response guaranteed within 30 days (Art. 12 GDPR).

Right to lodge a complaint

You have the right to lodge a complaint with the Data Protection Authority (DPA), the Belgian supervisory authority:

Rue de la Presse 35 · 1000 Brussels · +32 2 274 48 00

Lexavo SRL Privacy Policy · Version 1.0 Last updated: 31 March 2026 Any changes will be notified within the application.