LEXAI PRIVACY POLICY
www.lexai-consulting.com
Effective Date: January 2026
Data Controller: MAYA International (operates this website on behalf of LEXAI)
Introduction
This Privacy Policy explains how personal data is processed in connection with the operation of www.lexai-consulting.com by MAYA International.
Scope of this Privacy Policy
This policy covers data processing activities related to this website, including:
- Visitor data collected via cookies and analytics
- Contact forms and inquiry submissions
- Newsletter subscriptions
- Marketing communications
- Demo and trial requests
What this Privacy Policy does not cover
This policy does not cover data processing within the LEXAI Platform itself (the software service).
- Platform data processing is governed by LEX AI GmbH
- Subscription and payment data is governed by LEX AI GmbH
- Platform usage data is governed by LEX AI GmbH and its Data Processing Agreement
Once you become a customer of the LEXAI Platform, your data processing is governed by LEX AI GmbH’s Privacy Policy and Data Processing Agreement.
Data Controller distinction
- For this website (www.lexai-consulting.com): MAYA International is the Data Controller.
- For the LEXAI Platform (software service): LEX AI GmbH is the Data Controller.
Effective Date: January 2026
Responsible Person
MAYA International
Rue Charles Martel 8
B-1000 Brussels — Belgium
VAT: BE1028.805.952
MAYA International operates this website on behalf of LEXAI.
For any request related to data protection, contact: privacy@lexai-consulting.com
Overview of Processing Operations
This section summarizes the types of data processed through this website and the purposes of processing.
Types of Data We Collect
1) Website Usage Data
- IP address (anonymized)
- Browser type and version
- Operating system
- Pages visited and time spent
- Referral source
- Device information
2) Contact and Inquiry Data
- Name and title
- Email address
- Company name and industry
- Phone number (if provided)
- Message content
- Demo/trial preferences
3) Marketing Communication Data
- Newsletter subscription preferences
- Email engagement metrics (open rates, click rates)
- Content download history
Purposes of Processing
- Website operation, analytics, and optimization
- Security and fraud prevention
- Handling inquiries, demo requests, and trial requests
- Newsletter delivery and marketing communications (where permitted)
- Lead management and business development
Relevant Legal Bases
We process personal data on this website based on the legal grounds under GDPR (Regulation 2016/679) described below.
Consent (Art. 6(1)(a) GDPR)
- Newsletter subscriptions
- Marketing cookies (non-essential)
- Marketing communications where consent is required
Legitimate Interest (Art. 6(1)(f) GDPR)
- Website analytics and optimization
- Security and fraud prevention
- Improving user experience
Contract Performance / Pre-contractual steps (Art. 6(1)(b) GDPR)
- Processing demo and trial requests
- Responding to inquiries
AI Act UE Compliance
This website may use AI-powered features in limited contexts, subject to the EU AI Act (Regulation 2024/1689).
AI Systems Deployed on This Website
- Google Analytics with machine learning predictions (behavioral analytics)
- Automated chatbots or contact assistance (if deployed)
- Content recommendation algorithms (website personalization)
AI Act Classification and Transparency (Article 52)
Pursuant to Article 52 of the EU AI Act, MAYA International informs you that:
- AI systems on this website are classified as limited-risk systems (transparency obligations)
- You have the right to be informed when interacting with AI systems
- No high-risk AI systems (Annex III) are deployed on this website
- No prohibited AI systems (Article 5) are used
- AI usage is limited to analytics, user experience optimization, and visitor assistance
Your Rights Regarding AI Systems
- You may request information about AI systems processing your data
- You may object to AI-based profiling or automated decision-making
- You can disable AI-powered features through cookie settings or browser preferences
For AI systems within the LEXAI Platform itself (software service), please refer to LEX AI GmbH’s platform documentation, terms, and data processing agreement.
Security Measures
We implement appropriate technical and organizational measures to protect your personal data, including:
- SSL/TLS encryption for data transmission (HTTPS)
- Secure hosting infrastructure (10web.io with enterprise-grade security)
- Access controls and authentication for administrative systems
- Regular security assessments and vulnerability scanning
- Data minimization principles (collecting only necessary data)
- Staff training on data protection and security best practices
Transfer of Personal Data
Transfer to LEX AI GmbH
When you submit an inquiry, demo request, or trial registration through this website, your contact information may be transferred to LEX AI GmbH (Winterhuder Weg 29, 22085 Hamburg, Germany, VAT: DE344178544) to process your subscription request and provide platform access.
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) for business development and contract performance, or your consent where required.
Data Processing in Third Countries
Some of our third-party service providers are located in the United States (e.g., Freshworks CRM, 10web.io). Where data is transferred to the US or other third countries, transfers are protected by appropriate safeguards, such as:
- EU Standard Contractual Clauses (SCCs) under GDPR Article 46
- Adequacy decisions where applicable (e.g., EU–US Data Privacy Framework)
- Other safeguards required by applicable data protection laws
International Data Protection Compliance
In addition to GDPR, MAYA International aims to comply with applicable international data protection regulations where we have users, including:
- United States (California): CCPA / CPRA
- Brazil: LGPD
- China: PIPL
- India: Digital Personal Data Protection Act (DPDPA) 2023
- United Arab Emirates: Federal Decree-Law No. 45 of 2021
- Canada: PIPEDA
To exercise jurisdiction-specific rights or for more information, contact: privacy@lexai-consulting.com
Deletion of Data
We retain personal data only as long as necessary for the purposes described in this Privacy Policy, or as required by law.
Data Retention Periods
- Contact form data: 3 years from submission (follow-up and business development)
- Newsletter subscriptions: until unsubscribe or withdrawal of consent
- Website analytics data: 26 months (Google Analytics default)
- Cookies: up to 2 years depending on type
- CRM data (Freshworks): 5 years from last interaction or until deletion is requested
Business Services
We process data submitted through this website to manage inquiries, demo/trial requests, newsletters, and marketing communications.
Demo and Trial Requests
When you request a demo or trial through this website, we process your contact and inquiry data to respond and to enable the next steps with LEXAI (including transfer to LEX AI GmbH where applicable).
Marketing Communications
Where permitted, we may send you communications related to our services, newsletter content, or product updates. You can opt out at any time.
Payment Procedures
This website does not process subscription payments for the LEXAI Platform. Subscription and payment data are governed by LEX AI GmbH under the platform terms and related data processing documentation.
Provision of the Online Offer and Web Hosting
Website Hosting
-
Service: 10web.io (website builder and hosting)
Provider: 10Web LLC, 340 S Lemon Ave #1085, Walnut, CA 91789, USA
Data processed: website files, visitor logs, technical data
Privacy policy: https://10web.io/privacy-policy/
Special Notes on Applications (Apps)
This section is not applicable to www.lexai-consulting.com. For data processing within the LEXAI Platform (software service), please refer to LEX AI GmbH’s platform Privacy Policy and Data Processing Agreement.
Purchase of Applications via App Stores
This section is not applicable to www.lexai-consulting.com. If you access LEXAI via an app store or dedicated application, the applicable terms and privacy notices will be provided by the relevant platform and by LEX AI GmbH.
Registration, Login and User Account
This website does not provide user accounts for platform access. For LEXAI Platform registration and accounts, please refer to LEX AI GmbH’s documentation.
Community Functions
This website does not offer community features. If community features exist within the LEXAI Platform, they are governed by LEX AI GmbH.
Blogs and Publication Media
If this website publishes articles or media, processing is limited to what is necessary for delivery and security. Where third-party services are used, they are listed below in the relevant sections.
Contact and Inquiry Management
When you contact us through this website (e.g., contact form, email), we process your data to handle your inquiry and follow up.
CRM and Marketing
-
Service: Freshworks CRM
Provider: Freshworks Inc., 2950 S Delaware St Suite 201, San Mateo, CA 94403, USA
Data processed: contact information, inquiry history, email engagement, lead management data
Privacy policy: https://www.freshworks.com/privacy/
Promotional Communication via E-Mail, Mail, Fax or Telephone
Where legally permitted, we may use your contact details to send marketing communications. You can opt out at any time.
Web Analytics, Monitoring and Optimization
We use analytics to understand how visitors use this website and to improve performance and user experience.
Analytics
-
Service: Google Analytics
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Data processed: website usage patterns, anonymized visitor data, machine learning predictions
Privacy policy: https://policies.google.com/privacy
Online Marketing
We may process personal data for online marketing purposes, including measuring effectiveness and personalizing content where permitted.
Plugins and Embedded Functions as Well as Content
We may integrate functional or content elements from third-party providers (e.g., analytics, social plugins). These providers may process technical data (such as IP address, device data) necessary to deliver the content.
Third-Party Tools Listed in This Policy
- 10web.io (hosting)
- Google Analytics (analytics)
- Freshworks CRM (CRM and marketing)
- LinkedIn Plugins (social)
Modification and Updating of the Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our processing activities, legal requirements, or website features. The effective date at the top of this document indicates the latest version.
Rights of the Data Subjects
You have rights regarding your personal data under GDPR and applicable international data protection laws, including:
- Right of Access (GDPR Art. 15): request a copy of your personal data
- Right to Rectification (GDPR Art. 16): correct inaccurate or incomplete data
- Right to Erasure (GDPR Art. 17): request deletion of your data
- Right to Restriction (GDPR Art. 18): limit how we process your data
- Right to Data Portability (GDPR Art. 20): receive your data in a structured, machine-readable format
- Right to Object (GDPR Art. 21): object to processing based on legitimate interest or for direct marketing
- Right to Withdraw Consent (GDPR Art. 7(3)): withdraw consent at any time
- Right to Lodge a Complaint (GDPR Art. 77): file a complaint with your national data protection authority
To exercise your rights, contact: privacy@lexai-consulting.com
Governing Law and Jurisdiction
This Privacy Policy is governed by Belgian law. Any disputes related to this Privacy Policy or data processing by MAYA International shall be subject to the exclusive jurisdiction of the courts of Brussels, Belgium.
For matters related to the LEXAI Platform service, please refer to LEX AI GmbH’s Terms of Use (governed by German law, Hamburg courts).
Definitions of Terms
- Personal data: any information relating to an identified or identifiable natural person.
- Processing: any operation performed on personal data (e.g., collection, storage, use, transfer, deletion).
- Controller: the entity that determines the purposes and means of processing personal data.
- Cookies: small text files or similar technologies stored on your device to support website functionality and analytics.
Contact Information
MAYA International
Rue Charles Martel 8, B-1000 Brussels, Belgium
VAT: BE1028.805.952
Email: privacy@lexai-consulting.com
— END OF DOCUMENT —
© 2026 MAYA International