Controller

Medlexion Technologies LLP (India). For privacy requests: privacy@medlexion.com.

Data we collect

• Account and contact data (name, email, phone, organisation).
• Billing and transaction metadata (payment status, invoice references). We do not store full card details.
• Usage and device data (logs, IP address, browser/device information) for security and troubleshooting.
• Customer content you provide in the product (text, documents, uploads) where applicable.

How we use data

• To provide, operate, and improve our services.
• To authenticate users, prevent fraud, and secure our systems.
• To provide support and respond to enquiries.
• To process payments and meet legal/tax obligations.

Legal bases

We process data to perform a contract, for legitimate interests (security, fraud prevention, service improvement), and where required, based on consent.

Sharing & processors

We share data only with trusted service providers (hosting, email delivery, analytics, payment processing) as needed to provide the service, and subject to appropriate contractual safeguards.

International transfers

As an India-based business, we may process data in India and other jurisdictions where our providers operate. We use contractual protections where required.

Retention

We retain personal data for as long as necessary to provide the service and meet legal obligations. You can request deletion subject to applicable requirements.

Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, object, or port your data, and to lodge a complaint with a supervisory authority. Contact us at privacy@medlexion.com.