§
§ Legal

Privacy policy.

Version dated 25 August 2026

1. Data controller

The controller of your personal data is Webnest Michał Piszczek, operator of Lextron.ai. For any data-protection matter, e-mail [email protected].

2. What we collect and why

Contact form and e-mail. We process your e-mail address and, if provided, your name, company name and message. We use this information to respond, discuss potential cooperation, take steps before entering into a contract or perform a contract (Article 6(1)(b) GDPR). Where an enquiry does not lead towards a contract, we rely on our legitimate interests in handling correspondence and protecting against legal claims (Article 6(1)(f) GDPR).

Technical data. The server may record your IP address, request date and time, requested URL, browser type (user agent), referrer and error information. We use this data to keep the service secure, detect abuse, diagnose faults and maintain the website (Article 6(1)(f) GDPR).

Google Analytics 4 and Microsoft Clarity. When the website is opened, we automatically start Google Analytics 4 through Google Tag Manager and Microsoft Clarity. These tools may process online identifiers, IP address, approximate location, device and browser information, visited URLs, acquisition source and interactions with the website, including clicks, scrolling, heatmaps and interaction recordings. We use this information to measure traffic, verify the deployment, identify usability problems and improve the website.

3. Whether you must provide data

Providing data through the form is voluntary. Your e-mail address is necessary for us to reply; all other fields are optional. Technical data is generated automatically when you use the website. Ticking the box below the form confirms that you have read this policy — it is not marketing consent and is not the legal basis for processing.

4. Retention

We keep a submission stored through the form for as long as needed to handle the matter, but no longer than 24 months after the form was submitted. Related correspondence is retained while discussions continue. If a contract is concluded, or information is needed to establish, exercise or defend legal claims, relevant data may be retained until the applicable statutory periods expire. Technical logs are kept for no longer than 12 months, unless a specific record is needed for longer to investigate a security incident.

5. Recipients and transfers outside the EEA

Hosting, IT infrastructure, e-mail (including Postmark) and technical-support providers may process data only to the extent necessary to provide their services to us. Analytics data is also received by Google Ireland Limited / Google LLC and Microsoft Ireland Operations Limited / Microsoft Corporation. We do not sell personal data or disclose it to others for their own marketing. If a service provider causes data to be transferred outside the European Economic Area, we use GDPR transfer mechanisms, in particular a European Commission adequacy decision or Standard Contractual Clauses.

6. Cookies, profiling and automated decisions

Google Analytics 4 and Microsoft Clarity may store cookies or similar identifiers in the browser. In the current test version, they are loaded automatically when the page is opened. You can block or remove these identifiers in your browser settings. When you submit the form, a short-lived essential cookie may also be stored to protect it against forged requests; it is deleted after submission. We do not use analytics data to make decisions about visitors based solely on automated processing or for our own advertising campaigns.

7. Your rights

You may request access to, rectification, erasure or restriction of your data and, where applicable, data portability. You may object to processing based on our legitimate interests. You also have the right to complain to the President of the Personal Data Protection Office in Poland or another competent supervisory authority. To exercise your rights or ask a question, e-mail [email protected].