Privacy Policy

Last updated: 25 October 2026

1. Data controller

The controller of your personal data is Oleksii Pylypchuk, sole proprietor (JDG) registered in Poland, operating the website lexpy.ai ("Lex Py"). Contact: hello@lexpy.ai.

2. What data we collect

• Application form: name, email, messenger contact (WhatsApp or Telegram, optional) and your message. Submissions are stored in Netlify Forms and forwarded to our private mailbox.
• Payments: if you purchase an individual program or session, the payment is processed by Stripe (name, email, billing address, payment details). We never store your card data.
• Invoicing: Polish law requires us to issue invoices; invoice data (name, address) is processed in Fakturownia (fakturownia.pl).
• Community: if you join AI Creative on Skool, your account data is processed by Skool under Skool's own privacy policy.
• Technical: our hosting provider (Netlify) keeps standard server logs (IP address, request time) for security. Web fonts are served by Bunny Fonts, an EU-based no-log service. This site currently does not use analytics or advertising cookies; if we add such tools in the future (for example, analytics or ad measurement), we will update this Policy and, where required, ask for your consent.

3. Why we process it

We process personal data (GDPR Art. 6) to: answer your application and take steps before a contract (Art. 6(1)(b)); perform the contract with you (Art. 6(1)(b)); meet legal obligations such as tax and accounting rules (Art. 6(1)(c)); and protect our legitimate interests such as site security and defence of legal claims (Art. 6(1)(f)). We do not send marketing emails without your consent.

4. How long we keep data

• Applications — up to 12 months after our last contact;
• Contract and invoice data — as required by Polish tax law (currently 5 years from the end of the relevant tax year);
• Server logs — according to the hosting provider's retention policy.

5. Who receives your data

Netlify (hosting and form submissions), Stripe (payment processing), Fakturownia (invoicing), Skool (community platform), our email provider and our accounting office — each only to the extent needed. Some providers (for example, Netlify and Stripe) are based in the United States; transfers rely on the EU–US Data Privacy Framework and/or Standard Contractual Clauses.

6. Pinterest integration

We use the Pinterest API only with our own Pinterest business account, to read our boards and Pins and to organize Pins into boards for internal creative research. We do not access other Pinterest users' data, do not sell or share Pinterest data with third parties, and do not use it for advertising. Access tokens are stored securely and can be revoked at any time in Pinterest settings. Pinterest data is deleted when it is no longer needed for this purpose.

7. Your rights

You have the right to access, rectify, erase and port your data, to restrict or object to processing, and to lodge a complaint with a supervisory authority — in Poland, the President of the Personal Data Protection Office (UODO, uodo.gov.pl). To exercise your rights, write to hello@lexpy.ai.

8. Changes

We may update this Policy; the current version is always available at lexpy.ai/privacy.