Privacy Policy

This policy explains how Lexipedia handles information when you use the public website or connect to the Lexipedia MCP service.

Last updated: July 31, 2026

Information we process

The public MCP tools do not require a Lexipedia account. The search_document, get_document, read_document, and list_values tools process the query, filters, source identifier, or field name supplied in a tool call so they can return public Swiss legal information.

If you explicitly confirm a data-quality report, Lexipedia stores the report description, category, severity, permitted reproduction context, source, and workflow status. Do not include personal data, credentials, secrets, access tokens, or private legal records in a report.

For reliability and abuse prevention, our systems process request metadata such as route, method, status, duration, request identifier, and network address. A network address may be used temporarily for rate limiting. MCP analytics contain only the tool name, success status, duration, error class, and result count; they do not contain tool arguments, search queries, legal text, report bodies, result payloads, session identifiers, or MCP client metadata.

Separate website features may process account and session information, bookmarks, search activity, subscription status, and browser analytics when you choose to use those features. Payment card details are handled by the payment provider rather than stored by Lexipedia.

How we use information

We use information to answer tool calls, operate and secure the service, prevent abuse, diagnose failures, improve source quality, provide account or subscription features you request, and comply with legal obligations. We do not sell personal information or use MCP tool data for advertising.

Service providers and disclosures

We disclose information only as needed to providers that support hosting, databases, security, payments, logging, and analytics; to comply with law; or to protect users and the service. Depending on the feature and deployment, providers may include Vercel, PostHog, and Stripe. They process information under their own terms and our applicable agreements.

When you access Lexipedia through an MCP client such as ChatGPT, the client provider separately processes your conversation and tool traffic under its own privacy policy. Lexipedia receives the tool-call data needed to provide the requested result.

Retention

Tool inputs and results are processed transiently and are not retained in MCP analytics. Aggregate MCP analytics and rotated operational logs are retained for up to 30 days. Security records may be kept longer where reasonably necessary to investigate abuse or meet a legal obligation.

Confirmed quality reports are retained while they are investigated and for up to 12 months after closure. Account, bookmark, search-history, and subscription records are kept while the related account or feature is active and then deleted or anonymized when no longer needed, subject to legal and fraud-prevention requirements. Deleted information may remain in encrypted backups for up to 30 additional days.

Your choices and rights

You may ask to access, correct, or delete information associated with you, or object to or restrict certain processing, where applicable. You may also request deletion of a report you submitted. We may need enough detail to locate the record and verify that the request is legitimate. Applicable law may allow or require us to retain limited information.

Security and international processing

We use technical and organizational safeguards intended to limit unauthorized access, disclosure, alteration, and loss. No internet service can guarantee absolute security. Providers may process information outside your country; where required, we use appropriate safeguards for those transfers.

Changes and contact

We may update this policy as the service or legal requirements change. The date above identifies the current version. For privacy questions or a data request, email support@lexipedia.io or use the support page.