Skip to main content

Privacy Policy

Last updated:

1. Who we are

Lexigo ("we", "us", "our") operates https://lexigo.kvnpetit.com. This policy explains what personal data we collect, why, how we store it, and your rights under the EU General Data Protection Regulation (GDPR).

2. Data we collect

  • Account data (if you sign in): email address and authentication session metadata. Credentials are processed by Better Auth; browser sessions use HttpOnly cookies.
  • Technical data: IP address, user agent, request timestamps. Processed at the edge by Cloudflare for security (DDoS, bot filtering) and retained briefly.
  • Privacy-first analytics: if configured, Cloudflare Web Analytics collects page and performance metrics without advertising cookies or marketing pixels.

3. Legal basis

We process your data under the following GDPR legal bases: our legitimate interest in keeping the service secure, and performance of contract when you use authenticated features.

4. Data storage

Identity and account data are stored in Better Auth tables in Neon Postgres. Application data is stored in Neon Postgres and accessed from Cloudflare Workers through Hyperdrive. Edge traffic flows through Cloudflare's global network.

5. Retention

Account data is retained while your account is active and for up to 30 days after a deletion request. Security logs are retained for 90 days.

6. Your rights

Under GDPR you may, at any time:

  • Request access to your personal data (right of access).
  • Request correction of inaccurate data (right to rectification).
  • Request deletion of your data (right to erasure / "right to be forgotten").
  • Request a machine-readable export (right to data portability).
  • Object to processing based on legitimate interest.
  • Lodge a complaint with your local data protection authority.

To exercise any right, use the contact method published by the project operator. We respond within 30 days.

7. Subprocessors

  • Neon - PostgreSQL storage.
  • Cloudflare - edge delivery, Workers runtime, Hyperdrive connection pooling, bot protection (Turnstile), and optional Web Analytics.

8. Changes to this policy

Material changes will be announced on this page with a new "Last updated" date. Continued use of the service after the effective date constitutes acceptance.

9. Contact

Questions about this policy or your data should be sent to the project operator.