Privacy Policy

Last updated: February 19, 2026

1. Introduction

Lexport ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our contract management and e-signature platform.

By using Lexport, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Personal Information

  • Name and email address
  • Signature images (drawn, typed, or uploaded)
  • Payment information (processed securely via Stripe)
  • Contract content and metadata

Automatically Collected Information

  • IP address and approximate location
  • Browser type and device information
  • Usage data and interaction logs
  • Cookies and similar tracking technologies

3. How We Use Your Information

We use the collected information to:

  • Provide and maintain our service
  • Process e-signatures and verify identity
  • Process payments and prevent fraud
  • Create legally-binding audit trails
  • Send service-related communications
  • Improve our platform and user experience
  • Comply with legal obligations

4. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), we process your data based on:

  • Contract: Processing necessary to provide our services
  • Legitimate Interest: Improving services and preventing fraud
  • Legal Obligation: Maintaining audit trails for e-signatures
  • Consent: Marketing communications (where applicable)

5. Data Sharing and Disclosure

We may share your information with:

  • Other Contract Parties: Signers and contract owners can see relevant information
  • Service Providers: Stripe (payments), Supabase (hosting), email providers
  • Legal Requirements: When required by law or to protect rights

We do not sell your personal information to third parties.

6. Data Retention

We retain your data for as long as necessary to:

  • Provide our services
  • Comply with legal obligations (e-signature records: 7+ years)
  • Resolve disputes and enforce agreements

You can request deletion of your account at any time through your settings.

7. Your Rights (GDPR)

If you are in the EEA, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate information
  • Erasure: Request deletion of your data
  • Portability: Receive your data in a portable format
  • Objection: Object to certain data processing
  • Restriction: Limit how we use your data

To exercise these rights, visit your account settings or contact us at the email below.

8. Cookies

We use cookies for:

  • Essential: Authentication and security
  • Functional: Remembering your preferences
  • Analytics: Understanding how you use our service

You can manage cookie preferences through our cookie consent banner.

9. Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, and regular security audits. However, no method of transmission over the Internet is 100% secure.

10. International Transfers

Your data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards are in place, including Standard Contractual Clauses for EU data transfers.

11. Children's Privacy

Our service is not intended for children under 16. We do not knowingly collect information from children under 16.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or a notice on our platform.

13. Contact Us

For privacy-related questions or to exercise your rights, contact us: