Privacy Policy

This Privacy Policy explains how Storksoft ("we", "us", "our") collects, uses, stores, and protects your personal data when you use the Lexi Telegram bot (@lexi_gpt_bot) and this website (lexi.storkhost.cloud).

By using Lexi, you agree to the practices described in this policy. If you do not agree, please discontinue use and delete your data using the /delete-me command.

The data controller responsible for your personal data is:

Storksoft
Email: privacy@storkhost.cloud

When you use Lexi, we collect and process the following data:

Data	Purpose
Telegram user ID & username	Account identification and message delivery
Conversation history	Providing context-aware AI responses
Uploaded media (images, voice messages, documents)	Processing your requests (e.g., image analysis, voice transcription)
Usage records (AI model used, token cost, timestamp)	Usage tracking, billing, and service improvement
AI-generated user profile summaries	Personalizing responses and remembering your preferences

We do not collect your real name, email address, phone number, or any data beyond what Telegram provides and what you voluntarily send to the bot.

We process your personal data under the following legal bases as defined by the GDPR:

• Consent (Art. 6(1)(a)): By initiating a conversation with Lexi, you consent to the processing of your messages and media for the purpose of providing AI-powered responses.
• Legitimate Interest (Art. 6(1)(f)): We maintain usage records and profile summaries to improve service quality, prevent abuse, and manage operational costs.

You may withdraw your consent at any time by using the /delete-me command or contacting us at privacy@storkhost.cloud.

Your data is stored on a dedicated server hosted by Hetzner Online GmbH in Germany (European Union). This ensures your data remains within the EU jurisdiction and is subject to GDPR protections.

We implement the following security measures:

• Server access restricted by firewall (limited open ports)
• Database access limited to the application only (no public exposure)
• Conversation data and uploaded files stored in MongoDB with GridFS
• Regular server maintenance and security updates

We share your data with the following third-party services, strictly for the purpose of providing the Lexi service:

Processor	Purpose	Data Shared
Anthropic (USA)	AI response generation (Claude)	Message content, uploaded media
OpenAI (USA)	Image generation, voice transcription and speech	Image requests, voice messages, text for read-aloud replies
Telegram (UAE/UK)	Message delivery platform	Messages, user ID (inherent to the platform)
Hetzner (Germany)	Server infrastructure hosting	All stored data (encrypted at rest on their infrastructure)

AI providers: Your messages are processed by Anthropic’s Claude API; image generation and voice features use the OpenAI API. Under both providers’ commercial API terms, API inputs and outputs are not used to train their models. See Anthropic’s Commercial Terms and OpenAI’s API Data Usage Policies.

Payments: If you subscribe to a paid plan, payments are processed entirely by Telegram via Telegram Stars. We do not collect, store, or have access to any payment card information.

We retain your data as follows:

• Active users: Data is kept for as long as you use the service.
• Inactive accounts: If you have not interacted with Lexi for 12 months, your data will be automatically deleted.
• Manual deletion: You can delete all your data at any time using the /delete-me command in the bot.

Upon deletion, all your data — including conversation history, uploaded media, usage records, and profile summaries — is permanently removed from our systems.

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access (Art. 15): Request a copy of all data we hold about you.
• Right to Erasure (Art. 17): Request deletion of all your data.
• Right to Data Portability (Art. 20): Request your data in a structured, machine-readable format.
• Right to Restriction (Art. 18): Request that we limit how we process your data.
• Right to Object (Art. 21): Object to data processing based on legitimate interest.
• Right to Lodge a Complaint: File a complaint with a supervisory authority in your EU member state.

You can exercise your rights in two ways:

1. In the bot: Send the /delete-me command to @lexi_gpt_bot to immediately and permanently delete all your data.
2. By email: Contact us at privacy@storkhost.cloud for access requests, data portability, or any other privacy-related inquiries. We will respond within 30 days.

This website (lexi.storkhost.cloud) does not use cookies and does not employ any third-party analytics or tracking scripts.

We use a single localStorage item (lexi_lang) to remember your preferred language (English or Russian). This data is stored locally in your browser, is never sent to our servers, and can be cleared at any time through your browser settings.

Lexi is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child under 16 has used the bot, please contact us at privacy@storkhost.cloud, and we will promptly delete their data.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we may notify users through the bot.

We encourage you to review this page periodically to stay informed about how we protect your data.

If you have any questions or concerns about this Privacy Policy or your personal data, please contact us:

• Email: privacy@storkhost.cloud
• Telegram: @lexi_gpt_bot (use /delete-me for data deletion)