Privacy Policy
About Us
This Privacy Policy ("Privacy Policy") explains how we process and protect your personal data when you use our website https://lexnovo.ai or the services offered thereon (collectively, the "Website").
The Website is operated by Techurve v.o.f., located at Zwiepseweg 158, 7241 PV Lochem, Netherlands (hereinafter "Lexnovo," "we," "us," or "our"). This Privacy Policy complies with the General Data Protection Regulation (GDPR) and applicable Dutch privacy laws.
1. Which Personal Data We Collect
We collect the following categories of personal data, particularly when you use the contact form on our Website, create an account, or otherwise interact with our services:
- Contact details (e.g., name, email address, telephone number)
- Account information (e.g., username, password, profile information)
- Content of your inquiries and communications with us
- Information about your professional role and organization
- Usage data (e.g., IP address, browser type, device information, interactions with the Website)
- AI interaction data (e.g., queries, prompts, and generated content when using our AI services)
- Payment information (when using paid services, processed through secure payment providers)
- Technical data (e.g., log files, cookies, device identifiers)
2. How We Collect Personal Data
We collect information about you:
Directly:
- When you visit or interact with our Website
- When you create an account or profile
- When you voluntarily provide your data (e.g., via contact forms)
- When you subscribe to our newsletter or other communications
- When you use our AI services and tools
- When you communicate with us by email or through other electronic means
- When you make purchases or payments for our services
Indirectly:
- Through cookies and similar technologies
- Through third-party providers such as analytics, CRM, or payment processing services
- Through your interactions with our AI models and services
3. Legal Basis and Purposes of Processing
Contract (Article 6(1)(b) GDPR): To fulfill our contractual obligations or to take steps prior to entering into a contract:
- To provide our AI services and tools
- To handle contact requests and customer support
- To process payments and billing
- To manage user accounts and profiles
Consent (Article 6(1)(a) GDPR): Where you have given your explicit consent:
- For sending newsletters and marketing content
- For optional data processing activities
- For certain cookies and tracking technologies
Legitimate Interest (Article 6(1)(f) GDPR): Where we process your data based on a legitimate interest:
- To improve our Website and AI services
- To develop new features and services
- To ensure security and prevent fraud
- To analyze usage patterns and optimize performance
- To conduct research and development
Legal Obligation (Article 6(1)(c) GDPR): Where we are legally required:
- To comply with statutory requirements
- To respond to legal requests and court orders
- To fulfill tax and accounting obligations
4. Retention Period
We only store personal data for as long as is necessary to fulfill the respective processing purposes or for as long as we are legally obligated to store them. Specific retention periods include:
- Account data: Retained while your account is active and for up to 2 years after account deletion
- Usage data: Typically retained for 12-24 months for analytics purposes
- Communication records: Retained for up to 3 years for customer service purposes
- Payment data: Retained as required by applicable tax and accounting laws (typically 7 years)
- AI interaction data: May be retained to improve our services, with appropriate anonymization where possible
5. Service Providers and Third Parties
We use service providers ("processors") to ensure the operation of our Website and AI services. These service providers only receive access to your data to the extent necessary for their respective tasks and are bound by strict data protection agreements.
Example service providers include:
Analytics Services:
- Google Analytics: For analyzing website usage. Privacy policy: https://policies.google.com/privacy
AI and Machine Learning Services:
- OpenAI: For AI model services. Privacy policy: https://openai.com/privacy/
- Anthropic: For AI model services. Privacy policy: https://www.anthropic.com/privacy
Infrastructure and Hosting:
- Cloud hosting providers for secure data storage and processing
Payment Processing:
- Stripe: For payment processing. Privacy policy: https://stripe.com/privacy
Communication Services:
- Email service providers for transactional and marketing communications
6. Data Transfers Outside the EU/EEA
Your data may be processed and transferred to countries outside the European Union or European Economic Area, including the United States. We ensure through appropriate safeguards that your rights remain protected, including:
- Adequacy decisions by the European Commission
- Standard Contractual Clauses (SCCs) or other contractual guarantees
- Certification schemes and binding corporate rules
- Additional technical and organizational measures when necessary
7. Data Sharing
We may share personal data only in the following circumstances:
- When legally or officially required to do so (e.g., court orders, regulatory requests)
- To protect our rights, safety, or property or that of our users
- To prevent or investigate misuse of our services
- With service providers as described in Section 5, under strict data protection agreements
- In case of business transfers (mergers, acquisitions), with appropriate notice and protection measures
- With your explicit consent for specific purposes
8. Data Security
We employ comprehensive technical and organizational security measures to protect your data, including:
- Encryption of data in transit and at rest
- Access controls and authentication systems
- Regular security assessments and updates
- Employee training on data protection
- Incident response procedures
- Secure development practices
Our employees and service providers are obliged to maintain strict confidentiality.
9. Your Rights Under GDPR
You have the following rights regarding your personal data:
- Right to Access (Article 15): Information about the data stored concerning you
- Right to Rectification (Article 16): Correction of inaccurate or incomplete data
- Right to Erasure (Article 17): Deletion of your data under certain circumstances
- Right to Restriction (Article 18): Limitation of processing under certain conditions
- Right to Data Portability (Article 20): Transfer of your data in a structured format
- Right to Object (Article 21): Opposition to processing based on legitimate interest
- Right to Withdraw Consent: For processing based on consent, without affecting prior processing
- Right to Lodge a Complaint: With the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)
To exercise these rights, please contact us at [email protected].
10. Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Essential functions: Enable basic website functionality
- Analytics: Understand how our website is used
- Personalization: Customize your experience
- Marketing: Deliver relevant advertisements (with your consent)
You can manage your cookie preferences through your browser settings or our cookie consent tool. Note that disabling certain cookies may affect website functionality.
11. AI-Specific Data Processing
When you use our AI services:
- Input data (your queries and prompts) may be processed by our AI models
- Generated content is created based on your inputs and our AI models
- Interaction data may be used to improve our services and train our models
- Privacy-preserving techniques are employed where possible to protect your data
- Content filtering is applied to ensure appropriate use of our services
You retain ownership of your input data and generated content, subject to our Terms of Service.
12. Children's Privacy
Our services are not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected such data, we will take steps to delete it promptly.
13. Links to Third Parties
Our Website may contain links to external websites and services. We are not responsible for their content or data protection practices. We encourage you to review the privacy policies of any third-party sites you visit.
14. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy as necessary to reflect changes in our practices, services, or applicable laws. We will notify you of material changes through:
- Email notification to registered users
- Website notice prominently displayed
- Version dating to track changes
Changes take effect upon publication on our Website unless otherwise specified.
15. Contact Information
If you have any questions regarding data protection or wish to exercise your rights, please contact us:
Email: [email protected]
Postal Address: Techurve v.o.f. Zwiepseweg 158 7241 PV Lochem Netherlands
Data Protection Officer:
Msc. Stijn Schuurman
Zwiepseweg 158 7241 PV Lochem Netherlands
Email: [email protected]
Supervisory Authority: Autoriteit Persoonsgegevens (Dutch Data Protection Authority) Website: https://autoriteitpersoonsgegevens.nl/