Privacy Policy
GDPR compliant (Regulation EU 2016/679) Belgian Act of 30 July 2018
Data controller
- Company
- Lexavo SRL
- Registered office
- Brussels, Belgium
- CBE
- en cours d'attribution (SRL en cours d'immatriculation)
- DPO
- privacy@lexavo.be
Data collected and processed
Legal questions
- Text of questions submitted to the AILegitimate interest (Art. 6.1.f)Session only (not stored)
E-mail (Emergency)
- E-mail address provided voluntarilyConsent (Art. 6.1.a)12 months after the last interaction
Technical data
- Anonymised error logsLegitimate interest (Art. 6.1.f)90 days
App preferences
- API URL, consent (local)Performance of the contract (Art. 6.1.b)Until uninstallation
Third parties and international transfers
Anthropic (USA)
Questions submitted to the AI are processed via Anthropic's Claude API. This transfer outside the EU is governed by Standard Contractual Clauses (SCC) in accordance with Art. 46 GDPR. Anthropic policy: www.anthropic.com/privacy
Stripe (USA/IE)
Payment processing (where applicable). Stripe is PCI-DSS certified. Lexavo stores no payment data.
Railway (USA)
Hosting of the Lexavo API and the user account database (servers located in Western Europe). Transfers governed by Standard Contractual Clauses (Art. 46 GDPR).
Hostinger (European Union)
Hosting of the legal documentary database (Qdrant vector search engine) on a server located in the European Union. No transfer outside the EU for this processing.
Encoding service (outside EU)
The text of your questions is encoded (vectorised) via an embeddings API to retrieve the relevant legal texts. This transfer outside the EU is governed by Standard Contractual Clauses (SCC, Art. 46 GDPR).
PostHog (USA)
Anonymised audience measurement (usage statistics), only if you consent. No legal data or question content is transmitted. Transfer governed by SCC (Art. 46 GDPR).
Sentry (USA)
Detection of technical errors in the application (crash reports without legal content, pseudonymised data). Transfers governed by SCCs (Art. 46 GDPR).
Resend (USA)
Sending transactional emails (password reset, notifications). Only the email address is transmitted. Transfer governed by SCC (Art. 46 GDPR).
🛡️ Your data is never sold, shared for advertising purposes, or transferred to third parties not mentioned above.
Cookies
The site sets only one strictly functional cookie: 'NEXT_LOCALE', which remembers your chosen language for the duration of your visit (session cookie, no tracking). No advertising, analytics or tracking cookies are used, so no consent banner is required (exempt cookie under the Belgian Data Protection Authority guidelines).
Your rights (GDPR Art. 15-22)
Access
Obtain a copy of your personal data processed by Lexavo.
Rectification
Correct inaccurate or incomplete data concerning you.
Erasure
Request the deletion of your data ("right to be forgotten").
Portability
Receive your data in a structured, machine-readable format.
Objection
Object to the processing of your data on legitimate grounds.
Restriction
Request the restriction of processing in certain cases.
How to exercise your rights:
Send an e-mail to privacy@lexavo.be with a copy of your identity document. Response guaranteed within 30 days (Art. 12 GDPR).
Right to lodge a complaint
You have the right to lodge a complaint with the Data Protection Authority (DPA), the Belgian supervisory authority:
Rue de la Presse 35 · 1000 Brussels · +32 2 274 48 00
Lexavo SRL Privacy Policy · Version 1.0 Last updated: 31 March 2026 Any changes will be notified within the application.