Legal · v1.0

Privacy Policy

Last updated: September 30, 2026

1. Data Controller

AI Nexus Labs LLC (United States), commercially identified as Lixtto, with contact email privacy@lixtto.com, is responsible for processing your personal data.

2. Data we collect

• Account data: name, email, company, phone when you request a demo or an assessment.
• Business contact data: company name, email and phone that the company publishes on its website or in public directories, when we reach out to offer our services.
• Usage data: interactions with your agents, channel metrics, operational logs necessary to improve the service.
• Payment data: billed information through certified payment processor (we do not store full card numbers).
• Cookie data: see Data Policy.

3. Purposes

We use your data to: (a) provide the contracted service, (b) bill you, (c) help you when you contact support, (d) comply with legal obligations, (e) improve the service with aggregated and anonymized metrics, (f) contact companies, using the business contact data they publish in public sources, to offer our services. You can object to this last purpose at any time by replying “no” to our message or writing to privacy@lixtto.com, and we will stop contacting you.

4. Transfers

We share data with technology providers necessary to operate the service (cloud infrastructure, payment processors, support tools). All are subject to confidentiality and compliance contracts. We do not sell personal data to third parties.

5. Your rights (GDPR-aligned)

You have the right to access, rectify, cancel, oppose, and port your personal data. Exercise these rights by sending a request to privacy@lixtto.com with identification and a clear description of your request. We respond within 20 business days.

6. Retention

We retain your data while you have an active account and up to 24 months after cancellation to comply with fiscal and legal obligations. Then they are deleted or anonymized.

7. Security

We apply administrative, technical, and physical measures to protect your data. However, no platform is 100% immune to breaches. In the event of an incident affecting your data we'll notify you without undue delay.

8. California residents (CCPA)

If you reside in California you have the right to know what data we collect, request deletion, and opt out of sale. We do not sell personal data. To exercise CCPA rights use the email mentioned above.

9. Changes

If we modify this Notice we will inform you by email or in-platform with at least 15 days notice when changes are substantial.