Effective date: 2026-09-03 · Version 1.0 (EN, 2026-09-11). Together with the End-User License Agreement, this policy forms the entire agreement between you and the licensor.
lexmail is local-first software. Your original mail, archive database, attachments, indexes and preferences are stored only on your device by default. AI features (summaries, translation, thread analysis, classification fallback) connect by default only to model endpoints you configure yourself (for example a local LM Studio); analysis requests do not pass through us.
To validate a paid license, the software communicates with our licensing service. The transmitted data is limited to:
We do not collect your mail contents, account credentials, address books, or behavioral profiles. Website and licensing-service access logs (origin IP, timestamps) are retained for 14 days for security and troubleshooting only, then deleted automatically.
The website offers an optional account (email + password) used solely to: view your license keys after sign-in (recovery), claim purchases, and receive verification/order/password-reset emails. Passwords are stored as scrypt hashes (never in plaintext); your email is never used for marketing. Purchasing and using the software works fully without an account. To delete your account, contact us via the address published on this site — account data (email, sessions, key ownership) will be erased, while order and license records are retained as required for reconciliation. The international portal supports Google Sign-In: we receive only your email address and Google user ID (sub) — never your password or other Google data.
Device hashes and order data are used solely for license validation, device-count enforcement, renewal handling and duplicate-issuance prevention. They are kept for a reasonable period after the license relationship ends (reconciliation and legal obligations), then deleted or anonymized. You can unbind a device in-app at any time, or contact us to erase your licensing records.
For licensing-related personal data we hold, you may request access, correction, deletion, and withdrawal of consent (including data-subject access requests). Contact us via the address published on this site; identity-verified requests are handled within 15 business days.
The software is not offered to children under 14, and we do not knowingly collect children's personal data.
Updates are published on this page with a version tag; material changes are announced in-app. Continued use constitutes acceptance of the updated policy.