Legal

Privacy Policy

This Privacy Policy explains how Lexifyr Technologies Pvt. Ltd. collects, uses, stores, and protects personal and business information when you use Tessa.

Last updated: March 18, 2026

1. Data Controller and Scope

This Policy applies to data processed by Lexifyr Technologies Pvt. Ltd., registered in Guwahati, Assam, India, in connection with Tessa. It covers account information, usage data, support communications, and uploaded creative assets processed to provide the platform.

2. Information We Collect

We collect account identity and contact details, authentication records, workspace activity, device and log metadata, billing and subscription data, support tickets, and creative assets uploaded or generated within your workspace.

3. How We Use Information

We use data to provide and improve services, generate requested outputs, prevent abuse, maintain security, process payments, communicate service updates, and deliver customer support. We do not sell personal information as part of our business model.

4. Legal Basis and Indian Compliance

We process personal data in accordance with applicable Indian laws, including principles under the Information Technology Act, 2000 and allied rules, and where applicable the Digital Personal Data Protection Act, 2023 and related rules when brought into force. Processing is based on service necessity, legal compliance, legitimate business interests, and consent where required.

5. Sharing and Third-Party Processors

We share data only with vetted service providers needed for hosting, cloud infrastructure, authentication, analytics, communications, and payment processing, under contractual confidentiality and security commitments. We may disclose information when required by law, lawful authority request, or to protect legal rights and platform security.

6. Retention and Security

We retain personal and business data for as long as needed for service operation, legal compliance, accounting, and dispute handling. We apply administrative, technical, and organisational controls designed to protect confidentiality, integrity, and availability of data, while recognising no system can guarantee absolute security.

7. Cross-Border Processing

Some processors may store or process data outside India. Where cross-border transfers occur, we implement reasonable contractual and operational safeguards appropriate to the nature of the data and applicable legal requirements.

8. Your Rights and Choices

Subject to applicable law, you may request access, correction, deletion, or export of personal data and may withdraw consent where processing is consent-based. You may also update account details directly through product settings where available.

9. Grievance and Contact

For privacy concerns, legal requests, or data rights queries, contact us through your official support channel in-product. We will review and respond within a reasonable period consistent with applicable law.

10. Policy Updates

We may update this policy from time to time. Material changes will be reflected with an updated effective date and communicated through product or account notices when appropriate.