Privatlivspolitik

Lexii Privacy Policy Lexii Privacy Policy Lexi Technologies ApS · CVR no. 45484017 · Denmark Version 1.0 Effective from 18 April 2026 Contact hey@lexii.io This Privacy Policy applies when Lexii acts as controller of personal data. For situations where Lexii processes personal data on behalf of a customer, the Lexii Data Processing Agreement applies instead. Both documents are available at lexii.io.

This Privacy Policy describes how Lexi Technologies ApS, CVR no. 45484017, Denmark (“Lexii”, “we”, “us”) processes personal data when Lexii acts as controller, including on website visits, account creation, login, sales, support and administration.

1. Who is the controller?

• Lexi Technologies ApS, CVR no. 45484017, Denmark.
• Contact: hey@lexii.io.

2. What data do we process?

• Name, email address, phone number, company name, position, login credentials and account information.
• Support inquiries and communications.
• Billing and payment information.
• Technical information, including IP address, browser information, device data and log data.
• Information you yourself submit via forms, demo requests or contact with us.

3. What do we use the data for?

• Creation and administration of user and customer accounts.
• Providing access to the Lexii platform.
• Customer service and support.
• Administration of subscriptions, payment and invoicing.
• Operations, security, troubleshooting and improvement of the platform.
• Communications regarding the service, including service messages.
• Handling of inquiries, meeting bookings and sales.
• Compliance with legal obligations and protection against misuse, fraud and security incidents.

4. Legal basis

• Performance of a contract with the data subject or the company the data subject represents (GDPR art. 6(1)(b)).
• Compliance with legal obligations, e.g. the Danish Bookkeeping Act (GDPR art. 6(1)(c)).
• Lexii’s legitimate interests, e.g. operations, IT security, support, documentation, product improvement and ordinary B2B sales contact (GDPR art. 6(1)(f)).
• In specific cases, consent (GDPR art. 6(1)(a)), e.g. for newsletters or non-essential cookies.

5. Where do we obtain the data?

• Directly from you.
• From your employer or the company you represent.
• Through your use of our website or platform.
• From payment, hosting or support providers.
• From publicly available sources (e.g. CVR, LinkedIn) in sales or customer processes.

6. Who do we share data with?

• Hosting and infrastructure providers.
• AI and model providers supplying components of the service.
• Support and operations partners.
• Payment and accounting providers.
• Professional advisors (auditor, lawyer).
• Public authorities, where legally required.

An updated list of key processors is set out in Annex 3 of the Lexii Data Processing Agreement.

7. Transfers to countries outside the EU/EEA

• Certain of our vendors are established outside the EU/EEA, including in the USA. Where we transfer personal data there, we do so on the basis of the European Commission’s Standard Contractual Clauses (SCCs) and relevant supplementary measures.
• You may request a copy of the transfer mechanism by contacting us.

8. Cookies

• The website and platform use necessary cookies to function and, subject to consent, analytics and preference cookies. Separate cookie information is available on the website.

9. Retention

• Personal data is retained for as long as necessary for the purposes for which it was collected, including as long as you or your company is our customer and for a subsequent period for backup, security, documentation and statutory retention.
• Accounting records are retained for 5 years from the end of the financial year to which the records relate, cf. the Danish Bookkeeping Act.
• Support inquiries and sales leads are generally retained for up to 24 months from the last activity.
• Other account data is deleted or anonymised no later than 90 days after the end of the customer relationship, unless legislation requires longer retention.

10. Your rights

• You generally have the right to access, rectification, erasure, restriction of processing, data portability and objection to processing.
• You may withdraw any consent without this affecting the lawfulness of prior processing.
• You may lodge a complaint with Datatilsynet (the Danish Data Protection Agency), Carl Jacobsens Vej 35, 2500 Valby (dt@datatilsynet.dk), if you are dissatisfied with our processing of your personal data.

11. Contact and changes

• Questions regarding this Privacy Policy may be directed to Lexii at hey@lexii.io.
• Lexii may update this Privacy Policy from time to time. The latest version is always available on the website and in the platform. Material changes will be communicated by email or in the platform.