Privacy Policy

1. Information We Collect

We collect minimal information necessary to operate the service:

• Email address — collected voluntarily when you submit it through the download gate or waitlist form. Used only to notify you of Lexify updates and new features.
• Usage data — we use Plausible Analytics, a privacy-friendly analytics tool that does not use cookies, does not collect personal identifiers, and does not track users across websites. We collect aggregate page views, referrer sources, and feature usage counts to improve the product.
• Server logs — our hosting provider (Railway) automatically logs request timestamps, IP addresses (truncated), and HTTP status codes for security and reliability purposes. Logs are retained for 30 days.

2. Policy Text You Submit

Anthropic's own data handling practices apply to content processed through their API. You can review Anthropic's privacy policy at anthropic.com/legal/privacy.

Important: Lexify is not designed to accept Protected Health Information (PHI) or any individually identifiable health data. Our platform processes clinical policy text — rules, thresholds, and criteria — only. Do not input patient records, names, dates of birth, or any other PHI.

3. How We Use Your Information

• Email addresses are used solely to send product updates, feature announcements, and waitlist notifications. We do not sell, rent, or share your email with third parties.
• Aggregate analytics data is used to understand product usage and improve Lexify.
• Server logs are used for security monitoring and debugging.

4. Third-Party Services

Lexify uses the following third-party services:

• Anthropic API — processes policy text to generate outputs. Subject to Anthropic's privacy policy.
• Railway — hosting provider. Subject to Railway's privacy policy.
• Formspree — email form submission processing. Subject to Formspree's privacy policy.
• Plausible Analytics — cookieless, GDPR-compliant analytics. No personal data collected. Subject to Plausible's privacy policy.
• Google Fonts — font delivery. Subject to Google's privacy policy.
• Cloudflare CDN — script delivery for PDF.js, mammoth, and JSZip. Subject to Cloudflare's privacy policy.

5. Cookies and Local Storage

Lexify does not use advertising cookies or tracking cookies. We use browser sessionStorage to remember your email submission within a single session so you are not asked to re-enter it. We use browser localStorage to store your saved policy library locally on your device. This data never leaves your browser and is not accessible to us.

6. Data Retention

• Email addresses: retained until you unsubscribe or request deletion.
• Server logs: 30 days, then automatically deleted.
• Policy inputs: not retained — processed in real time and discarded.
• Local policy library: stored in your browser only, deleted when you clear browser data.

7. Your Rights

You have the right to request access to, correction of, or deletion of any personal data we hold about you (email address). To exercise these rights, contact us at hello@lexify.health. We will respond within 30 days.

8. Children's Privacy

Lexify is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date at the top of this page when we do. Continued use of Lexify after changes constitutes acceptance of the updated policy.

10. Contact

For privacy-related questions or requests, contact us at hello@lexify.health.