Privacy Policy
Last updated: 7 September 2026
1. Data controller
The controller of your personal data is Oleksii Pylypchuk, sole proprietor (JDG) registered in Poland, operating the website lexpy.ai ("Lex Py"). Contact: hello@lexpy.ai.
2. What data we collect
- Application form: name, email, messenger contact (WhatsApp or Telegram, optional) and your message. Submissions are stored in Netlify Forms and forwarded to our private mailbox.
- Payments: if you purchase an individual program or session, the payment is processed by Stripe (name, email, billing address, payment details). We never store your card data.
- Invoicing: Polish law requires us to issue invoices; invoice data (name, address) is processed in Fakturownia (fakturownia.pl).
- Community: if you join AI Creative on Skool, your account data is processed by Skool under Skool's own privacy policy.
- Technical: our hosting provider (Netlify) keeps standard server logs (IP address, request time) for security. Web fonts are served by Bunny Fonts, an EU-based no-log service. This site currently does not use analytics or advertising cookies; if we add such tools in the future (for example, analytics or ad measurement), we will update this Policy and, where required, ask for your consent.
3. Why we process it
We process personal data (GDPR Art. 6) to: answer your application and take steps before a contract (Art. 6(1)(b)); perform the contract with you (Art. 6(1)(b)); meet legal obligations such as tax and accounting rules (Art. 6(1)(c)); and protect our legitimate interests such as site security and defence of legal claims (Art. 6(1)(f)). We do not send marketing emails without your consent.
4. How long we keep data
- Applications — up to 12 months after our last contact;
- Contract and invoice data — as required by Polish tax law (currently 5 years from the end of the relevant tax year);
- Server logs — according to the hosting provider's retention policy.
5. Who receives your data
Netlify (hosting and form submissions), Stripe (payment processing), Fakturownia (invoicing), Skool (community platform), our email provider and our accounting office — each only to the extent needed. Some providers (for example, Netlify and Stripe) are based in the United States; transfers rely on the EU–US Data Privacy Framework and/or Standard Contractual Clauses.
6. Your rights
You have the right to access, rectify, erase and port your data, to restrict or object to processing, and to lodge a complaint with a supervisory authority — in Poland, the President of the Personal Data Protection Office (UODO, uodo.gov.pl). To exercise your rights, write to hello@lexpy.ai.
7. Changes
We may update this Policy; the current version is always available at lexpy.ai/privacy.