Data Deletion Policy

Effective Date: January 1, 2025  |  Last Updated: July 2025  |  Applies to: lexora.vip

At Lexora, we respect your right to control your personal data. This Data Deletion Policy explains your rights under applicable privacy laws — including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) — and describes the exact steps to permanently delete your data from our platform.

1. Your Right to Data Erasure

Under the GDPR (Article 17) and CCPA, you have the right to request the permanent deletion of your personal data and your legal workspace at any time, subject to limited exceptions (such as data we are legally required to retain). Lexora honors these rights without requiring justification and processes verified requests within 48 hours.

2. What Data Is Deleted

Upon a confirmed deletion request, Lexora permanently removes the following categories of data associated with your account:

• Full name, email address, phone number, and profile photo
• Law firm or company workspace details (name, address, logo, configuration)
• Case files, session records, contract documents, and uploaded attachments
• Client profiles, payment records, and billing history
• Authentication credentials and active session tokens
• OAuth connection data (including Facebook Login tokens and permissions)
• System logs, activity history, and analytics associated with your account
• API keys and third-party integration configurations

3. How to Delete Your Data

You have multiple methods to request or execute data deletion:

3.1 — Via Your Account Dashboard

3.2 — Via Email Request

Send a deletion request from your registered email address to lexoravip@hotmail.com with the subject line: "Data Deletion Request – [Your Account Email]". Include your full name and the email address associated with your account. Our team will verify your identity and process the request within 48 hours.

3.3 — Removing Lexora from Facebook (OAuth)

If you authenticated with Lexora using Facebook Login, follow these steps to revoke Lexora's access from your Facebook account and trigger automatic deletion of your OAuth-linked data on our servers:

4. Data Retention Exceptions

Lexora may retain certain data beyond your deletion request only where legally required:

• Financial / Tax Records: Aggregated billing records may be retained for up to 7 years as required by applicable tax regulations. These records are anonymized and cannot be used to identify you personally.
• Legal Obligations: If your account is subject to an active legal hold, court order, or regulatory investigation, deletion may be deferred until the obligation is resolved. You will be notified in such cases.
• Fraud Prevention: A hashed, non-reversible identifier may be retained for a maximum of 12 months to prevent the creation of fraudulent duplicate accounts.

5. Backup Purge

Lexora maintains encrypted off-site backups for disaster recovery purposes. Upon deletion, your data is immediately removed from all primary databases. Encrypted backup copies containing your data are purged from backup systems within a maximum of 30 days as part of our standard backup rotation cycle.

6. Third-Party Services

Lexora may share minimal data with trusted third-party processors (e.g., payment processors, cloud hosting providers) solely to operate the Service. Upon your deletion request, Lexora notifies relevant sub-processors to delete your data in accordance with their own Data Processing Agreements (DPAs) and applicable law. Sub-processors maintain their own deletion timelines, which we cannot fully control but have contractually required to comply with GDPR/CCPA standards.

7. Confirmation of Deletion

Upon successful execution of your deletion request, Lexora will send a written confirmation to your registered email address (or the email provided in your deletion request). This confirmation serves as your official record of erasure.

8. Contact Us