Privacy policy

This policy covers lexiprotocol.com, operated by the LEXI Protocol founding team (contact below). It is written to be read, and it will be updated as the operating entity and the product go live.

What this site collects

• Visit statistics. Every page loads Plausible Analytics. For each visit it records the page address, the site that sent you here, your browser, operating system and device type, your approximate location (country, region and city, worked out from your IP address), and how far down the page you scroll and for how long. Plausible sets no cookies and does not store your IP address. It combines the address with your browser details and a salt that changes daily to make a hashed visitor identifier, then deletes each salt after 24 hours, so visits on different days cannot be linked. The site also sends Plausible a named event when you click certain links and buttons, such as "Request early access", together with the page you were on. Plausible also records, automatically, when you follow a link to another website (with that link's address), when you download a file (with the file's address), and that a form on this site was submitted. When you use the contact form, the event Plausible receives includes the option you picked under "You are". Your email address, organisation and message are never sent to Plausible.
• What you send us. The contact form asks who you are writing as (an exchange, VASP or Licensed Distributor; a protocol or token issuer; a licensed lawyer; an investor; press; or something else), your work email, and, if you choose to add them, your organisation and a message. When you press "Send request", those fields go to Formspree, a form-handling service. Formspree emails them to the founding team's inbox and keeps a copy in our Formspree account. If sending fails, the page offers to prepare the same request as an email for you to send yourself; that text is composed on your device and nothing is sent until you send it. If you write to us directly, we receive whatever your email contains.
• Cookies and fonts. This site sets no cookies and runs no advertising trackers. Its fonts are served from lexiprotocol.com itself, so loading a page makes no request to a font service.
• The Google preferred-source link. Briefing pages carry a link that opens Google's "preferred sources" settings with lexiprotocol.com filled in. It is a plain link: no Google code loads on our pages, and nothing goes to Google unless you click it. If you click it, you are on Google's site, and Google's privacy policy (opens in a new tab) covers what happens there, including any preference you save to your Google account. Plausible records the click as described above.

Why, and on what basis

We use contact information to respond to your request, assess early-access and signatory applications, and keep records of those conversations. The legal basis is our legitimate interest in responding to people who write to us, and the steps needed before entering an engagement. We use visit statistics to see which pages people read and where visitors come from, which is also a legitimate interest.

Where data lives

Plausible processes and stores visit statistics in the EU. Formspree runs its service on Amazon Web Services in the United States (opens in a new tab), so contact form submissions are processed and kept there. Vercel, a US company, serves this site from its global network and processes request data there. Email correspondence lives with our email provider. The protocol's confidential document store is designed to be EU-hosted with encrypted storage; product data handling will be documented in full before onboarding begins.

Service providers

• Plausible Analytics (visit statistics) receives each page request, including your IP address and browser details, and the named events described above. It keeps visit and event records, but not your IP address or raw browser string. See Plausible's data policy (opens in a new tab).
• Formspree (contact form) receives the form fields and may also collect technical details of the request, such as your IP address and browser type. It emails each submission to the founding team and keeps it in our account. See Formspree's privacy policy (opens in a new tab).
• Vercel (hosting) processes technical request data, such as your IP address and the location derived from it, to deliver and secure this site. See Vercel's privacy notice (opens in a new tab).

Your rights

Depending on where you are, you have rights under the GDPR, India's DPDP Act 2023, or similar laws, such as access, correction and deletion. Under the GDPR you can also object to processing, ask us to restrict it, receive your data in a portable form, and complain to your data protection authority. Write to us and we will act on them. We do not sell personal data, full stop.

Retention

Correspondence, including contact form submissions in our inbox and in our Formspree account, is kept while a conversation or engagement is live and for a reasonable period afterwards, then deleted on request or when no longer needed. Formspree keeps its own service logs as its privacy policy describes.

Contact

Privacy questions and rights requests: info@lexiprotocol.com.