Privacy Policy
Effective date: February 24, 2026 · Last updated: October 4, 2026
Introduction
Lexega LLC ("Lexega", "we", "us", "our") provides a CLI-based toolkit for pre-execution SQL risk analysis and policy enforcement. This Privacy Policy describes how we collect, use, and protect information when you visit our website at lexega.com, request a trial license, or buy a license.
By using our website, requesting a trial license or buying a license, you acknowledge that you have read and understood this policy.
Data Controller
Lexega LLC is the data controller responsible for your personal data. For questions about this policy, contact [email protected].
Information We Collect
Trial License Requests
When you request a trial license key, we collect the following:
| Information | Purpose | Legal Basis | Retention |
|---|---|---|---|
| Email address | License identification and key delivery | Contract performance | Trial period + 30 days |
| IP address | Abuse prevention and rate limiting | Legitimate interest | 24 hours (stored in pseudonymized form) |
| Bot-detection token | Automated abuse prevention | Legitimate interest | Not stored by Lexega; processed by Cloudflare |
Purchases
Team licenses bought by card are sold by Paddle, our reseller and merchant of record. Paddle runs the checkout and collects your payment details, billing address and tax information under its own privacy policy. Lexega never receives your card number.
Paddle passes us what we need to issue and renew your license, and we keep:
| Information | Purpose | Legal Basis | Retention |
|---|---|---|---|
| Email address | License identification, key delivery, renewal and support messages | Contract performance | While the license is active, and afterwards for as long as accounting, tax and dispute records require |
| Order details (order and subscription identifiers, amount, currency, dates, discount) | Fulfilment, renewals, refunds and accounting | Contract performance; legal obligation | Same as above |
Online Playground
When you use the SQL playground at lexega.com, the following data is processed:
| Information | Purpose | Legal Basis | Retention |
|---|---|---|---|
| SQL text you submit | Server-side formatting or risk analysis | Legitimate interest (product demonstration) | Not retained — processed in memory and discarded immediately |
| IP address | Rate limiting and abuse prevention | Legitimate interest | Not stored by Lexega; may be logged by Cloudflare per their standard request processing |
| Selected dialect | Route analysis to the correct parser | Legitimate interest | Not retained |
Important: SQL submitted through the playground is processed on Cloudflare Workers infrastructure and is never stored, logged, or used for any secondary purpose. Do not submit SQL containing production credentials, personal data, or other sensitive information.
Information We Do Not Collect
- Passwords or payment information
- SQL queries, schemas, or any data processed by the Lexega CLI
- Browser fingerprints, advertising identifiers, or tracking pixels
- Usage telemetry or analytics from the CLI — Lexega operates entirely offline
How We Use Your Information
We use the information we collect solely to:
- Issue and deliver your trial license key
- Issue, deliver and renew a license you bought, and handle refunds
- Prevent misuse of the trial issuance service
- Communicate with you about your trial (e.g., expiration notices)
We do not sell or rent your personal information, and we share it only with the service providers listed below, which process it for us.
Data Security
We implement appropriate technical and organizational measures to protect your information:
- Data is encrypted at rest and in transit (TLS/HTTPS)
- Signing keys are stored as secrets in our infrastructure and are never exposed to client-side code
- We do not use cookies or client-side storage on this website. The checkout on the buy page is operated by Paddle and may set its own cookies, as its privacy policy describes
- Access to personal data is limited to essential operations
Your license key, trial or paid, includes your email address as the user identifier. This is necessary for offline cryptographic signature verification — the CLI validates your license locally without contacting any external server. Treat your license key as a credential and avoid committing it to public repositories.
International Data Transfers
Our services use Cloudflare's global infrastructure. As a result, your data may be processed in jurisdictions outside your country of residence. For information about how Cloudflare handles international data transfers, please refer to Cloudflare's Privacy Policy.
Your Rights
Depending on your jurisdiction, you may have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — request correction of inaccurate data
- Erasure — request deletion of your personal data
- Data portability — request your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interest
- Restriction — request that we limit how we use your data
To exercise any of these rights, email [email protected]. We will respond within 30 days.
Third-Party Services
We use the following third-party service providers:
| Provider | Services | Privacy Policy |
|---|---|---|
| Cloudflare | Content delivery, DNS, compute infrastructure, key-value storage, bot protection (Turnstile) | cloudflare.com/privacypolicy |
| Microsoft | Email (Microsoft 365): delivery of license emails, and our support and sales correspondence | privacy.microsoft.com/privacystatement |
| Paddle | Checkout, payment processing, sales tax and VAT, receipts and subscription billing, as merchant of record | paddle.com/legal/privacy |
Cloudflare may collect aggregated web analytics (e.g., page views, country-level traffic) as part of its platform. All requests to this website and our API are routed through Cloudflare's network, which may process IP addresses and request metadata in accordance with their privacy policy. We do not use additional third-party analytics, advertising networks, or social media tracking tools on this website.
Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date at the top of this page. Your continued use of our services after any changes constitutes acceptance of the updated policy.
Contact Us
For privacy-related questions, data requests, or concerns, contact us at:
Email: [email protected]
Need Help?
Can't find what you're looking for? Check out our GitHub or reach out to support.