LexelanePrivacy policy
This notice explains what Lexelane processes when you browse the website, manage an account, buy API credit, or send a model request.
Account and authentication
Operator-provisioned accounts store an email address, name and salted password hash; plaintext account passwords are not stored. Google sign-in, when enabled, provides a verified email, name and optionally a profile picture, without sharing your Google password. These details support account access, abuse prevention and service communication. Password-account roles are assigned separately from Google verification. Session tokens and API keys are stored as hashes; full API secrets are shown only at creation.
API content and usage records
Your prompts, messages, and tool payloads are transmitted to model service providers to fulfill your requests. Their processing and retention policies also apply. Our usage database records model identifiers, token counts, timing, status, request IDs, and charges; it does not deliberately persist prompt or generated-text bodies. Do not submit secrets or personal information you are not authorized to share.
Payment and billing data
Waffo hosts checkout and processes payment details. Lexelane keeps order references, amounts, currencies, statuses, and transaction records needed to credit balances, reconcile usage, handle refunds, and meet accounting obligations. We do not store full payment-card numbers.
Website measurement and cookies
Necessary cookies support login and OAuth security. First-party operational analytics may record the public page path, referring hostname, coarse browser category, and a daily pseudonymous visitor identifier. Raw IP addresses, complete user-agent strings, query strings, and private console pages are not stored in this analytics dataset. Daily identifiers do not identify unique people across days. Country may come from an explicitly trusted proxy or a transient lookup in a local DB-IP Country Lite database. We do not send visitor IPs to an external geolocation service. IP geography is approximate, can reflect VPNs or proxies, and does not verify residence; unavailable or non-public addresses remain unknown. Do Not Track and Global Privacy Control signals disable these page measurements.
Retention and access
Public-page analytics are automatically removed according to the configured retention period, up to 90 days. Account and operational records are retained while needed to provide the service and resolve security or billing matters. Billing records may be retained longer where legally required. Administrative access is restricted and account changes are audited.
Your choices and requests
You can revoke keys and sign out from the workspace. Contact support to request account access, correction, export, or deletion. We may verify ownership and retain records required for unresolved transactions, security, or law. Data may be processed in countries where our service providers operate; review the service before submitting regulated data.
IP Geolocation by DB-IP · CC BY 4.0 · When enabled, country estimates are aggregated from the unmodified local Country Lite dataset.
Contact and service operator
Chen Hongtao · support@lexelane.com