Privacy Policy

Protecting your privacy is a priority at Lexy.fm ("Lexy," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our trivia platform, including our website at lexy.fm, mobile applications, call-in trivia games, and all related services (collectively, the "Service").

By using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with our policies and practices, please do not use the Service.

Controller/Processor Role

For users who create accounts directly on lexy.fm, Lexy acts as a data controller. Where Lexy processes data on behalf of enterprise customers or partners, Lexy acts as a processor/service provider under applicable law. Where Lexy acts as a processor, the applicable Data Processing Addendum (DPA) governs in the event of any conflict with this Privacy Policy.

1. Information We Collect

We collect information you provide directly, information collected automatically, and information from third parties.

Information You Provide

When you register for an account, create content, or contact us, you may provide: your name and email address; phone number (required for call-in trivia functionality); payment and billing information; trivia games, questions, and answers you create; profile information and preferences; and communications you send to us.

Information Collected Automatically

When you use the Service, we automatically collect: device information (type, operating system, unique identifiers); IP address and approximate location; browser type and settings; pages visited and features used; game play data and scores; referral URLs and widget embed sources; and cookies and similar tracking technologies.

Phone Number Validation

To ensure service quality and prevent abuse, we use third-party phone validation services to verify phone numbers during registration. This may include checking: whether the number is valid and active; the carrier and line type (mobile, landline, VoIP); the country and region associated with the number; and risk indicators such as whether the number is disposable or associated with fraud. We do not use phone validation data for marketing purposes.

2. How We Use Your Information

We use the information we collect to: provide, maintain, and improve the Service; process your transactions and manage your account; enable call-in trivia gameplay and voice interactions; personalize your experience and recommend content; send transactional communications (account verification, game notifications); send promotional communications (with your consent, and you may opt out); analyze usage patterns and improve our platform; detect, prevent, and address fraud, abuse, and security issues; train and improve our AI models using de-identified data; and comply with legal obligations.

3. Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Service, remember your preferences, analyze usage, and deliver relevant content. Types of cookies we use include:

Essential Cookies: Required for basic functionality such as authentication and security.
Preference Cookies: Remember your settings and preferences.
Analytics Cookies: Help us understand how users interact with the Service.
Advertising Cookies: May be used to deliver relevant advertisements (you can opt out).

You can control cookies through your browser settings. Blocking certain cookies may affect your ability to use some features of the Service. We honor Global Privacy Control (GPC) signals where required by law.

4. How We Share Your Information

We may share your information in the following circumstances:

Service Providers: We share data with third parties who perform services on our behalf, including: Twilio (telecommunications and SMS); Deepgram (speech-to-text transcription); SpeechGen (text-to-speech audio generation); OpenAI (AI content generation); Stripe (payment processing); and analytics and monitoring services. These providers are contractually obligated to protect your data.

Legal Requirements: We may disclose information if required by law, subpoena, or other legal process, or to protect the rights, property, or safety of Lexy, our users, or others.

Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any such change.

With Your Consent: We may share information for other purposes with your explicit consent.

We do not sell your personal information to third parties for their marketing purposes.

5. International Data Transfers

Lexy operates globally and your information may be transferred to and processed in countries other than your own, including the United States. These countries may have different data protection laws than your jurisdiction.

For transfers from the European Economic Area (EEA), United Kingdom, or Switzerland, we use appropriate safeguards such as Standard Contractual Clauses approved by the European Commission, the UK International Data Transfer Agreement (IDTA), or other legally approved mechanisms.

6. Data Retention

We retain your personal data for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy. Specifically:

Account Data: Retained while your account is active and for a reasonable period thereafter.
Voice Recordings: Retained for up to 90 days for quality assurance, then deleted or anonymized.
Transcriptions: May be retained longer in de-identified form for AI training.
Game Content: Retained as long as you maintain the game or indefinitely if made public.
Usage Data: Retained in aggregate form for analytics purposes.

When data is no longer needed, we securely delete or anonymize it.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encryption of data in transit and at rest, access controls, regular security assessments, and incident response procedures.

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Incident Notification: If we become aware of a data breach affecting your personal data, we will notify you and relevant authorities as required by applicable law.

8. Your Rights and Choices

General Rights

Depending on your location, you may have the right to: access the personal data we hold about you; correct inaccurate or incomplete data; delete your personal data; restrict or object to certain processing; data portability (receive your data in a structured format); and withdraw consent where processing is based on consent.

Communication Preferences

You may opt out of promotional emails by clicking the "unsubscribe" link in any email. You may opt out of promotional SMS by replying STOP. You cannot opt out of transactional communications essential to the Service while maintaining an active account.

GDPR Rights (EEA/UK Users)

If you are in the European Economic Area or United Kingdom, you have additional rights under the General Data Protection Regulation, including the right to lodge a complaint with your local data protection authority. We rely on contract, legitimate interests, and consent as lawful bases for processing.

CCPA/CPRA Rights (California Residents)

California residents have the right to: know what personal information we collect and how it is used; request deletion of personal information; opt out of the "sale" or "sharing" of personal information (we do not sell your data); and not be discriminated against for exercising these rights. To exercise your rights, contact us at hello@lexy.fm.

9. Children's Privacy

The Service is not intended for children under 13 years of age (or under 16 in the EEA). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at hello@lexy.fm, and we will take steps to delete such information.

10. Third-Party Links

The Service may contain links to third-party websites or services not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website, updating the "Last Updated" date, and where required by law, sending you an email notification. Your continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:

We will respond to your request within the timeframes required by applicable law (typically 30 days, or 45 days for CCPA requests).