Privacy Policy
Effective date: March 9, 2026
Lexibop ("we", "us", or "our") is a French language reading tool that adapts text to your CEFR level. This policy explains what information we collect, how we use it, and what rights you have over it. We've written it in plain language because we think you deserve to actually understand it.
1. What we collect
Your email address. When you sign in with a magic link, we store your email address to identify your account. That's the only personal information we ask for.
Usage data. We track how many rewrites and word lookups you've performed each month so we can enforce plan limits. We store a count, not the content itself.
Session data. We use a secure, HTTP-only cookie to keep you signed in across sessions. This cookie contains a signed token with your user ID and email — nothing else.
The text you paste. When you paste French text and request a rewrite or word definition, that text is sent to our API and then to Anthropic's Claude API for processing. We do not store the text you paste. It is processed in memory and discarded. It is never written to our database.
2. How we use your information
- To authenticate you and maintain your session
- To enforce your monthly usage quota
- To send you magic link sign-in emails
- To respond to support requests if you contact us
We do not use your information for advertising. We do not sell your data. We do not share your data with third parties except as described below.
3. Third-party services we use
Supabase — We use Supabase to store your account information (email address and usage counts). Supabase is hosted on AWS infrastructure. You can read their privacy policy at supabase.com/privacy.
Anthropic — The text you paste is sent to Anthropic's Claude API for processing. Anthropic's API data retention policies apply to this data. Per Anthropic's API terms, data submitted via the API is not used to train their models. You can read their privacy policy at anthropic.com/privacy.
Railway — Our API runs on Railway's infrastructure. Request logs may be retained briefly for debugging purposes. You can read their privacy policy at railway.app/legal/privacy.
Resend — We use Resend to deliver magic link emails. Your email address is passed to Resend solely for the purpose of sending you a sign-in link. You can read their privacy policy at resend.com/legal/privacy-policy.
4. Your text is not stored or used for training
To be explicit: the French text you paste into Lexibop is never stored in our database, never logged to persistent storage, and never used to train any AI model. It exists only in memory for the duration of the API request, then it's gone.
5. Your rights
You have the right to:
- Request a copy of the data we hold about you (your email and usage counts)
- Request deletion of your account and all associated data
- Correct your email address
To exercise any of these rights, email us at hello@lexibop.com. We'll respond within 30 days.
6. Data retention
We retain your account data for as long as your account is active. If you request deletion, we will remove your email address and usage records within 30 days. Usage counts are reset at the start of each calendar month.
7. Cookies
We use a single session cookie to keep you signed in. It is HTTP-only (not accessible to JavaScript), secure (only sent over HTTPS), and expires after 14 days. We do not use tracking cookies, advertising cookies, or analytics cookies.
8. Children
Lexibop is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with their information, please contact us at hello@lexibop.com.
9. Changes to this policy
If we make material changes to this policy, we'll update the effective date at the top and notify users by email if the changes are significant. Continued use of Lexibop after changes are posted constitutes acceptance of the updated policy.
10. Contact
Questions about this policy? Email us at hello@lexibop.com. We're a small team and we actually read these.