This policy explains what Lexique collects, why it is collected, how it is used, and how to contact us about your data.
Last updated: May 12, 2026.
This policy applies to visitors, account holders, and early-access customers who use Lexique, including the Lexique website, dashboard, repository import features, API token sync, billing flows, and support channels.
Lexique collects account information from OAuth providers, including email address, display name, avatar URL, and provider account identifiers. Lexique also stores projects, supported languages, translation keys, translation values, tags, descriptions, project settings, import and export metadata, API token metadata, billing identifiers, and basic operational logs needed to run the service.
If you connect GitHub or GitLab, Lexique stores the connection details needed to authenticate requests and read selected repository metadata or translation files. Lexique uses these integrations to list available repositories, detect translation files, import selected files, and keep translation workflows connected to your codebase. Lexique does not intentionally scan unrelated repositories or files that you do not select through the product flow.
When you create a Lexique project API token, the plain token is shown once. Lexique stores token metadata, scopes, expiry state, revocation state, last-used timestamp, IP address, user agent, and a hashed token secret so the token can be verified without storing the original plain token.
Payments are processed by Stripe. Lexique stores Stripe customer identifiers, subscription identifiers, subscription status, price identifiers, renewal or cancellation metadata, and related billing state. Lexique does not store card numbers or full payment method details.
When AI translation is used, Lexique may send the selected source text, target locales, translation keys, descriptions, existing translations, and relevant project context to the configured AI provider to generate translations. You should not use AI translation for secrets, credentials, or other content you are not allowed to share with an AI provider.
Lexique may use analytics and monitoring tools, including Google Tag Manager and Sentry, to understand product usage, diagnose errors, measure performance, and improve reliability. Diagnostic data may include page URLs, browser details, device information, event timestamps, error stack traces, and a logged-in user identifier when needed for support and debugging. Lexique configures browser error monitoring to avoid intentionally sending default personally identifiable information beyond what is needed to operate the service.
Lexique uses cookies and browser storage for authentication sessions, CSRF protection, security, preferences, analytics, and product behavior. Some cookies are required for the service to work. Analytics or diagnostic tooling may set additional cookies depending on the production configuration.
Lexique uses information to authenticate users, provide project and translation workflows, import and export files, enable API sync, process billing, enforce plan limits, prevent abuse, protect the service, debug issues, respond to support requests, improve the product, and communicate about account or service matters.
Where applicable, Lexique processes personal data to perform a contract with you, pursue legitimate interests such as security and product improvement, comply with legal obligations, and process data with consent when consent is required.
Lexique shares information with service providers only as needed to operate the product, such as hosting, database infrastructure, OAuth providers, Stripe for payments, Sentry for error monitoring, analytics providers, email providers, and AI providers when AI translation is used. Lexique may also disclose information if required by law, to protect rights and security, or during a business transfer such as a merger or acquisition.
Lexique currently relies on third-party services that may include Google, GitHub, GitLab, Stripe, Sentry, OpenAI, hosting infrastructure, email delivery, and analytics tooling. The exact providers used can vary by environment and product configuration. Contact us if you need the current subprocessor list for a company review.
Lexique keeps account and project data while your account is active or as needed to provide the service. Deleted projects are archived first and are scheduled for permanent deletion after the product's deletion grace period. Billing, security, and operational records may be retained longer when needed for accounting, fraud prevention, dispute handling, legal compliance, or service reliability.
Lexique uses technical and organizational safeguards intended to protect account, project, and integration data. No internet service can guarantee absolute security, so you should only connect repositories and upload content that you are authorized to process in Lexique. If you believe your account or token has been compromised, revoke affected tokens and contact us promptly.
Lexique and its service providers may process information in countries other than your own. When required, Lexique relies on appropriate transfer mechanisms or provider safeguards for international data transfers.
Depending on where you live, you may have rights to access, correct, export, delete, restrict, or object to certain processing of your personal data. You can disconnect GitHub or GitLab from your account settings, revoke project API tokens from project settings, and request account or data deletion by contacting us.
For access, correction, export, deletion, privacy, security, or company review questions, contact hello@lexique.app. We may need to verify your identity before acting on account or data requests.
Lexique may update this policy as the product, providers, or legal requirements evolve. Material updates will be reflected on this page with a new update date.