1. Service provider and contact

LexoraGPT is a service provided by Roberto Imbimbo, Calwer Straße 16, 72202 Nagold, Germany. For any question relating to this policy you can reach us at support@lexora-law.com.

2. Data we collect

When you use LexoraGPT we process the following categories of data:

Account and email — the email address provided for authentication (magic link) and the user identifier linked to your account.
Chat content — the messages you send to the chat and the generated responses, stored to provide conversation history in your account.
Uploaded documents — if you upload documents for analysis (Pro users) they are stored encrypted for the time required for processing.
Technical usage data — application logs, device identifiers, diagnostic and performance data necessary to operate the service.

3. How we use your data

We use the data we collect for the following purposes:

Provide the service — authenticate you, display conversation history, generate responses to your questions.
Improve the service — aggregate usage analysis to identify bugs, optimize performance and prioritize new features.
Security — prevent abuse, fraud and unauthorized access; safeguard the integrity of the service.

4. Third-Party AI Processing

The messages and documents you send in the chat are processed by Groq, Inc. (United States), a third-party AI provider, to generate the responses of the LexoraGPT service.

Purpose of processing. The sole purpose of transmission to Groq is to generate the responses you request. Groq acts as a service provider for Lexora.

Data shared. The contents of your conversations (message text and any uploaded documents) and the minimum technical metadata required for inference. We do not share direct user identifiers (name, email address, postal address).

Contractual safeguards.

Groq does not use your data to train its models.
Groq does not retain the data beyond the period strictly necessary to operate the service.
Processing is governed by Groq's terms of service, which include a GDPR-compliant Data Processing Addendum and prohibit the use of customer data for model training.

For more information see Groq's Privacy Policy: https://groq.com/privacy-policy.

Consent. Before you first use the chat you are shown a specific notice and asked for your explicit consent to this processing. You may withdraw consent at any time by discontinuing use of the service. For California residents, additional rights are described in the "Your California Privacy Rights" section of this Privacy Policy.

5. Legal basis and your rights

We process your data on the following bases:

Performance of a contract — to provide the service you have requested.
Legitimate interest — for security, abuse prevention and aggregate analytics.
Consent — for the third-party AI processing described above, which you can withdraw at any time.

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Request a portable copy of your data
Object to certain processing

To exercise these rights write to support@lexora-law.com.

6. Data retention

Account data and conversations are kept while your account is active. After prolonged inactivity the account and associated data may be deleted after 24 months. Technical application logs are retained for a maximum of 30 days. You can request deletion of your account at any time: in that case all personal data is removed within 30 days, subject to legal retention obligations (e.g. billing).

7. Cookies and essential storage

LexoraGPT does not use tracking cookies nor advertising profiling tools. We only store, locally in your browser (localStorage), essential UI preferences and the consent record. This data remains on your device and is not sent to third-party servers.

8. Changes to this policy

We reserve the right to update this policy to reflect changes to the service or regulatory requirements. In case of material changes we will notify you by email at the address associated with your account or via an in-app banner. The date of the latest update is shown at the top of this page.