Privacy Policy

1. Introduction

LexaKeep ("we", "our") is a browser extension and web service developed by Lumerexa that tracks the state of your business conversations in Gmail: who is waiting on whom, what was promised, what changed, and what to do next. This policy explains what data LexaKeep touches, where it lives, and the choices you have. It applies to the LexaKeep extension and the lexakeep.lumerexa.com website.

Our guiding principle is state, not content: we store what a conversation means for you, not the conversation itself.

2. Information We Collect

Account information. When you sign in with Google, we receive and store the email address and display name of your Google account, your timezone and brief preferences, and your plan (Free or Pro). We never see your Google password.

Gmail access. With your consent we read messages in threads you take part in from the last 14 or 30 days, and new messages as they arrive. Newsletters and automated mail are filtered out before analysis. We store a securely encrypted refresh token so LexaKeep can keep your sidebar current.

Structured conversation state. For each analyzed thread we store metadata (subject, participants, dates, direction) and the results of analysis: waiting state, commitments with a short source quote (up to 200 characters), detected facts and changes with a short quote (up to 150 characters), thread stage and milestones, the suggested next action, and per-contact counters. A 200-character snippet of each message is kept for display.

What we do not keep. Raw email bodies are not stored. During analysis a normalized message body is held in a temporary table for at most 15 minutes and then deleted. Reply drafts you generate are written to your Gmail Drafts and are not kept by us.

Feedback and usage counters. When you confirm, dismiss or rate a suggestion we record the verdict and the item it refers to. To enforce plan limits we keep per-day counters — numbers only.

3. How AI Processing Works

• Only the normalized text of the last ten messages of a single thread is sent to our AI provider for one analysis step. Your whole inbox is never sent in one request.
• AI output is validated against a fixed schema; it can only produce categorical results (for example a stage, a commitment sentence, a confidence level) — never free-form storage of your email.
• Our AI provider processes requests transiently under a data-processing agreement and does not use your content to train models.
• Due dates are computed by a deterministic parser, not by the AI.

4. What LexaKeep Never Does

• It never sends, archives or deletes email. It can only create drafts and add labels, and labels are off by default.
• It never requests full Gmail access. The scopes are read, modify (for labels and drafts), compose, and your email address.
• It never shows scores, percentages or predictions about people. Confidence is expressed only as high, medium or low.
• We do not embed analytics, advertising or fingerprinting trackers in the extension or on this website.
• We do not sell, rent or share your personal data with third parties for marketing purposes — ever.

5. Browser Permissions, Explained

• mail.google.com — required to show the sidebar inside Gmail. The extension itself does not read email content from the page; it only identifies which thread is open and asks our service for that thread's state.
• identity — used to sign you in through Google securely.
• storage (session) — keeps your sign-in for the current browser session only.

6. Third-Party Services

We rely on a small number of providers to run LexaKeep: Google (Gmail API and sign-in), an AI model provider for analysis, an email delivery service for the optional Morning Brief, and Lemon Squeezy for payments. Payment card details are handled entirely by Lemon Squeezy and never reach our servers.

LexaKeep's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

7. Data Retention & Deletion

• Conversation state is kept while your account is active so the sidebar stays useful.
• Temporary message bodies are deleted within 15 minutes of analysis.
• Choose Delete all my data in the extension settings: within 24 hours every record is permanently deleted, LexaKeep labels are removed from your Gmail, mailbox monitoring is stopped and Google access is revoked. You can also request this at support@lumerexa.com.
• You can revoke LexaKeep's access at any time from your Google Account permissions page.

8. Security

All traffic is encrypted in transit. Google refresh tokens are encrypted at rest with a key that is not stored in the database. Server logs contain identifiers only — never message bodies, addresses or subject lines. Access to production systems is limited to the people who operate the service.

9. Your Rights

Depending on where you live you may have the right to access, correct, export or delete your personal data, or to object to certain processing. Email support@lumerexa.com and we will respond within 30 days.

10. Children's Privacy

LexaKeep is not directed at children under 16 and we do not knowingly collect their data.

11. Changes to This Policy

We may update this policy as the product evolves. Material changes will be announced in the extension or by email before they take effect. The date at the top always reflects the latest version.

12. Contact

Lumerexa · support@lumerexa.com