Privacy Policy

Last Updated: May 30, 2026

← Back to Home

1. Introduction & Overview

Welcome to Lexino AI ("Service", "we", "us", or "our"), operated in India and accessible via lexinoai.in. We provide an intelligent AI mentor and preparation operating system tailored for students (preparing for exams such as UPSC, JEE, NEET, GATE, and university degrees) and software developers.

This Privacy Policy explains how we collect, process, store, protect, and delete your personal information in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act, India) and applicable information technology regulations. By creating an account or using Lexino AI, you acknowledge and consent to the data practices described herein.

2. Data We Collect & Specific Purposes

We collect personal data strictly on a need-to-know basis to operate, personalize, and secure the Service. The categories of data collected include:

a. Account & Identity Information:
When you register, authentication is securely managed via Clerk. We store your full name, email address, profile avatar URL, and user identifier. We never collect or store your raw account passwords on our servers.
b. Student Verification Data (Consent-Based):
To qualify for our subsidized Student Plan (₹49/month), we ask you to provide your college/school/coaching institute name, target exam or degree course, and student roll number / enrollment ID.
Legal Basis & Purpose: Collected strictly with your explicit consent solely to verify discount eligibility. We do not use student verification data for behavioral advertising, profiling, or cross-platform tracking, nor do we sell or disclose it to third parties.
c. Conversation History & Uploaded Documents:
We store your chat messages, code snippets, prompt history, session titles, pinned chats, and uploaded study materials (e.g. PDFs, notes) so you can access synchronized conversation threads across your devices.
d. Payment & Billing Information:
All payments are processed securely through Razorpay, an RBI-authorized, PCI-DSS Level 1 compliant payment gateway. Lexino AI never receives or stores your full credit/debit card numbers, CVVs, net banking credentials, or UPI MPINs. We only receive confirmation metadata (such as Razorpay Order ID, Payment ID, timestamp, currency INR, and subscription tier status).
e. Technical Usage & Telemetry Data:
We process automated technical metrics (e.g. token consumption, daily query counters, API latency, IP address, device operating system, and browser headers) via Vercel Analytics and server logs to monitor uptime, prevent bot abuse, and enforce plan quotas.

3. Third-Party Processors & AI Models

To generate intelligent responses and provide reliable infrastructure, Lexino AI transmits relevant prompt context to trusted third-party sub-processors:

  • AI Foundation Providers (OpenAI, Anthropic, Groq): Chat prompts and contextual messages are sent via enterprise/commercial API endpoints to generate answers. Under standard commercial API data policies, these providers do not use prompt data submitted via their APIs to train their public foundation models.
  • Authentication (Clerk): Secure identity verification, multi-factor authentication, and session cookie management.
  • Database & Cloud Hosting (Neon / PostgreSQL & Vercel): Encrypted database storage and serverless edge execution nodes.
  • Payment Processing (Razorpay): Tokenized, encrypted payment transactions in INR.

4. Data Retention & Automatic Purging

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy:

• Active Chat Sessions: Retained while your account remains active so you can review your study notes and code history. Older inactive threads may be automatically compressed for storage efficiency.
• Student Verification Metadata: Maintained during the active term of your Student Plan subscription and purged once verification is concluded or upon subscription cancellation.
• Account Deletion: When you delete your account, all associated personal profiles, conversation threads, uploaded files, and preferences are permanently deleted from our active database.

5. User Rights Under the DPDP Act 2023 (India)

As a Data Principal under the Digital Personal Data Protection Act, 2023, you enjoy comprehensive statutory rights:

  • Right to Access: You may request a summary of the personal data processed by Lexino AI.
  • Right to Correction & Updating: You may update inaccurate or incomplete information directly via your account profile or by contacting support.
  • Right to Erasure (Right to be Forgotten): You can delete individual chats at any time or permanently delete your entire account via the Account Profile Settings page.
  • Right to Withdraw Consent: You may withdraw your consent for future data processing at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
  • Right of Grievance Redressal: You have the right to register a grievance with our designated Grievance Officer.

To exercise any of these rights outside the in-app controls, email us at support@lexinoai.in.

6. Data Security, Storage & Breach Notification

• Encryption & Access Controls: All communications between your browser and Lexino AI are encrypted in transit via Transport Layer Security (TLS 1.3). Database records are encrypted at rest using industry-standard AES-256 protocols.

• Cross-Border Transfer & Storage: Data is hosted across enterprise cloud servers and edge networks in India and international cloud regions compliant with DPDP Act cross-border data transfer guidelines.

• Breach Notification Commitment: In the unlikely event of a personal data breach impacting your information, Lexino AI will notify affected users and the Data Protection Board of India promptly and without unreasonable delay, detailing the nature of the breach and mitigation steps taken.

7. Cookies & Local Browser Storage

We use essential session cookies and browser localStorage items strictly to maintain your logged-in state, remember your preferred wallpaper theme, and enforce token quotas. We do not use invasive third-party ad trackers or cross-site tracking cookies.

8. Children & Minors (Age Policy)

Lexino AI is designed for students aged 13 years and older. Users under the age of 18 must use the Service under parental or legal guardian supervision and consent. We do not knowingly collect personal data from children under 13. If we discover that an account has been created by a child under 13 without verifiable parental authorization, we will immediately delete that account and all associated data.

9. Policy Updates & Notice Process

We may update this Privacy Policy from time to time to reflect technological upgrades, legal requirements, or service enhancements. When material updates are made, we will notify you through a prominent announcement banner on the chat dashboard or via email to your registered account address at least 7 days before the modifications take effect. The "Last Updated" date at the top of this page will always indicate the latest revision.

10. Grievance Officer & Contact Details

In accordance with the Digital Personal Data Protection Act, 2023 and Information Technology rules, our designated Grievance Officer details are:

Data Protection & Grievance Officer: Sumit Ravindra Choudhary (Founder & Operator, Lexino AI)
Official Support Email: support@lexinoai.in
Grievance Escalation: grievance@lexinoai.in
Response SLA: All grievances are acknowledged within 48 hours and resolved within 30 days of receipt.
Location: Maharashtra, India