Privacy Policy
At LexonIT, your privacy is fundamental to everything we do. This policy explains how we collect, use, and protect your personal information.
Quick Navigation
1. Introduction
LexonIT ("we," "our," or "us") is a UAE-based technology company providing AI automation, web development, and digital solutions. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website at lexonit.com or engage with our services.
This policy applies to all users of our website and clients of our services. By accessing or using our services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of our services.
We are committed to complying with applicable data protection laws, including the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL) and the EU General Data Protection Regulation (GDPR) where applicable.
Information We Collect
Information You Provide
When you interact with our services, we may collect information you directly provide, including: name, email address, company name, phone number, project requirements, and any other information you submit via our contact forms, booking tools, or audit tools.
Automatically Collected Information
When you visit our website, we automatically collect certain technical data including: IP address, browser type and version, pages visited, time spent on pages, referring URLs, device type, operating system, and cookie identifiers. This data helps us improve our services and user experience.
AI Chat Interactions
If you use our AI chatbot or AI demo tools, the messages and queries you submit may be processed to provide responses. We do not permanently store personal chat conversations beyond what is necessary for service delivery.
How We Use Your Data
Service Delivery
We use your information to respond to inquiries, provide project quotes, deliver contracted services, and communicate about ongoing projects. Your contact details are used solely for business communication related to your request.
Service Improvement
Aggregated and anonymized usage data helps us understand how visitors interact with our website, which allows us to improve our design, content, and AI tools. We analyze performance metrics to ensure our services meet the highest standards.
Marketing Communications
With your explicit consent, we may send you newsletters, updates about our services, AI industry insights, and promotional offers. You can opt out at any time by clicking the unsubscribe link in any email or contacting us directly.
Legal Compliance
We may process your data to comply with applicable laws and regulations, respond to lawful requests from public authorities, protect our legal rights, and prevent fraud or misuse of our services.
Data Storage & Retention
Where We Store Data
Your data is stored on secure cloud infrastructure. We primarily use AWS (Amazon Web Services) and Supabase for data storage, both of which maintain industry-leading security certifications including SOC 2 Type II and ISO 27001.
Retention Periods
We retain your personal information only for as long as necessary to provide services and fulfill the purposes outlined in this policy. Contact inquiry data is retained for up to 2 years. Project-related data is retained for the duration of our engagement plus 5 years for legal and accounting purposes. Analytics data is retained for 26 months.
Data Deletion
Upon request, we will delete or anonymize your personal data unless we are required to retain it for legal obligations, dispute resolution, or enforcement of our agreements. Deletion requests will be processed within 30 days.
Security
Technical Safeguards
We implement robust technical measures to protect your data, including: TLS/SSL encryption for all data in transit, AES-256 encryption for data at rest, secure HTTPS-only access, regular security audits and penetration testing, and multi-factor authentication for our internal systems.
Organizational Measures
Access to personal data is restricted to authorized personnel who require it to perform their job functions. All team members undergo regular privacy and security training. We enforce the principle of least privilege across all systems.
Incident Response
In the event of a data breach that affects your rights and freedoms, we will notify the relevant authorities within 72 hours and inform affected individuals without undue delay, as required by applicable data protection laws.
Third-Party Services
Service Providers
We work with trusted third-party service providers to operate our business. These include: Supabase (database and authentication), AWS (cloud hosting), Stripe (payment processing), OpenAI (AI model services), Vercel (website hosting), and Google Analytics (website analytics). Each provider is contractually bound to protect your data.
Data Sharing
We do not sell, trade, or rent your personal information to third parties for marketing purposes. We only share data with service providers where necessary to deliver services you have requested, and only the minimum data required for that specific purpose.
International Transfers
Some of our service providers may process data outside your country of residence. When transferring data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or equivalent mechanisms.
Your Rights
Access & Portability
You have the right to request a copy of the personal data we hold about you in a structured, commonly used, and machine-readable format. We will provide this information within 30 days of your request.
Correction & Erasure
You can request that we correct inaccurate data or erase your personal information where there is no legitimate reason for us to continue processing it. We will fulfill such requests within 30 days, subject to any legal obligations we may have.
Objection & Restriction
You have the right to object to processing of your personal data for direct marketing at any time. You may also request that we restrict processing while a complaint is being investigated. Opt-out requests will be honored within 10 business days.
How to Exercise Your Rights
To exercise any of these rights, please contact us at hr@lexonit.com with the subject line "Data Rights Request." We may need to verify your identity before processing your request to protect your privacy and security.
Children's Privacy
Age Restriction
Our services are intended for business use and are not directed at individuals under the age of 16. We do not knowingly collect personal information from children under 16 years of age.
If We Discover Child Data
If we become aware that we have inadvertently collected personal information from a child under 16, we will take immediate steps to delete that information from our systems. If you believe we may have collected information from a child, please contact us immediately at hr@lexonit.com.
Policy Updates
How We Notify You
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email or through a prominent notice on our website.
Your Continued Use
Your continued use of our services after any changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this page periodically to stay informed about how we protect your data.
Contact Us
If you have questions about this Privacy Policy, wish to exercise your data rights, or have a privacy concern, please reach out to us.
We aim to respond to all privacy-related inquiries within 5 business days.
© 2025 LexonIT. All rights reserved.
This Privacy Policy is effective as of June 22, 2025.