In brief
Your prompts and the models' replies go from your browser or your own software straight to the provider. The service is designed so that they never pass through us, and we never log them. We don't ask for an email address, a name, a card or an ID. What we keep is what it takes to bill you, refund you and keep the site up: your account, your payments, how much each key has cost, your wallet connections, and server logs with your IP address. We sell nothing about you, run no analytics or advertising, and set one cookie, for your session. The docs show who sees what in a table; this is the formal version.
What we collect
- Your account: its number, a username if you chose one, a hash of your password (or your account code, encrypted), your settings, whether it's paused, and when it was created and changed.
- Your wallet connections: the credential that lets us pay from the wallet, encrypted at rest; its status; and a one-way hash of the wallet's identity, so that a debt on one account follows the wallet to any other.
- Your payments and refunds: amounts in dollars and in sats, the exchange rate, times, status, the invoice and its payment hash, and which wallet paid or was refunded.
- Your keys and usage: each key, encrypted, since we hold it to cap and pause it; its name at the provider, which is our account number there; and what it has cost, per day, as the provider reports it. Not your prompts, and not which models you used.
- What happened to your account: a log of events such as payments, pauses and wallet changes, so your dashboard can explain itself and we can help if something goes wrong.
- Server logs: the IP address you reach the site from, with the time, the path, the response status and your browser's user-agent string. The IP address also keys our rate limits, in memory. Our own service's logs hold account numbers and errors, not IP addresses.
- Support: whatever you write us, kept to deal with your request.
Prompts, replies, images and voice: never. Chat keeps your conversations in your own browser's storage, and sends recordings and images from your browser to the provider only. Delete a chat, or your browser's data for this site, and they're gone.
How we use it
To run the service and bill for it: issuing and capping keys, making and refunding payments, enforcing limits, preventing abuse, keeping the site secure, answering support, and meeting legal obligations such as accounting. Where European data protection law applies, our legal bases are performing our contract with you, our legitimate interests in security and fraud prevention, and compliance with law.
Who else sees it
We share information only with the companies it takes to provide the service, and only what each needs:
- Tinfoil (US) and TrustedRouter (Lore Hex Corp, US) run the models your keys call. Each sees your requests and your IP address when you use a key, and the key's usage. Neither sees your payments or who you are: your key belongs to our company account. TrustedRouter routes requests on to the model's maker (Anthropic, OpenAI, Google and others), which processes them under its own terms. On Tinfoil, models run in secure enclaves designed so that nobody, including Tinfoil, can read your requests.
- Exa (US) answers the web searches a model writes when Chat's search is on. The provider's enclave sends them, so Exa sees the searches and the enclave's IP address, not yours. Tinfoil sends them under a zero-data-retention agreement; TrustedRouter doesn't have one, so Exa keeps those searches under its own policy.
- Lexe is us: our Lightning node runs on Lexe, our own product, so it sees the payments between your wallet and ours. If you pay from a Lexe wallet, the Lexe Privacy Policy covers the wallet.
- Your wallet's service, if you connect one over Nostr Wallet Connect (Coinos, Alby Hub and others), receives our payment requests through it, under its own terms.
- Hetzner (EU) hosts our server and database.
- Exchange-rate feeds (Bitstamp, Kraken, Coinbase) give us the bitcoin price. They receive nothing about you.
We'll also disclose information when the law requires it, to protect rights or safety, or in a merger, financing or sale of the business. We never sell personal information or share it for advertising.
Where
Our server is in the European Union, and the providers are in the United States, so your information is processed in both.
How long we keep it
- Server logs: the web server's logs, with your IP address, for 14 days. Our service's own logs for 30 days.
- Sessions: 30 days, then you log in again.
- Everything else for as long as your account exists, and afterwards for as long as accounting, tax, fraud prevention and disputes require. Payment records and the ledger stay; so does the hash of a wallet that still owes money.
Your choices and rights
You can see your payments, usage and events on your dashboard, revoke keys, and remove wallet connections at any time. To access, correct, export or delete your information, or to object to or restrict how we use it, write to privacy@lexe.app. We'll ask you to prove you control the account, since we have no other way to know it's you, and we'll keep what the law requires us to keep. Residents of California and the European Economic Area, the UK and Switzerland have these rights under their own laws; we honor them for everyone.
Security
Secrets are encrypted at rest, passwords are stored as hashes, every connection uses TLS, and rate limits slow down anyone guessing. The best protection is what we never have: your prompts, your identity, and a way to reset your password. No system is perfectly secure.
Children
The service is for adults. We don't knowingly collect information from anyone under 18.
Changes
We may update this policy as the service changes. We'll post the new version here and change the effective date, and note material changes on the site.
Contact
Lexe Corporation · privacy@lexe.app