LEXIO
Privacy Policy
1. Data Controller
ASC (Agence SEO Connect)
SIREN: 385 312 376
Legal representative: Friant Daniel, Joseph
Status: Individual entrepreneur (EI)
Country: France
Email: daniel.friant@agence-seo-connect.tech
Application: https://app.agence-seo-connect.tech
2. Data Collected and Purposes
2.1 Account Data
- Data: email address, name, Google identifier (if signing in with Google)
- Purpose: creation and management of your user account
- Legal basis: performance of contract (Terms of Service)
2.2 Third-Party Service Connection Data
Google Search Console & Google Analytics
When you connect your Google account to Lexio:
- Data accessed: SEO performance data and GA4 audience metrics
- Purpose: SEO analysis, opportunity detection, report generation
- Storage: access tokens encrypted (AES-256-GCM)
- Sharing: no Google data is shared with third parties
- Legal basis: explicit consent (OAuth flow)
Facebook / Meta
- Data accessed: page name, page identifier, publication token
- Purpose: automated publishing to your Facebook Page
- Storage: token encrypted (AES-256-GCM)
- Legal basis: explicit consent (Meta OAuth flow)
WordPress
- Data: site URL, encrypted WordPress application credentials
- Purpose: automated article publishing to your site
- Legal basis: performance of contract
2.3 Billing Data
Processed by Stripe — Lexio does not store any credit card data. Stripe Privacy Policy
2.4 Usage Data
- Technical logs, action history (audit log), usage statistics
- Purpose: security, debugging, service improvement
- Retention: 12 months
3. Hosting and Sub-processors
| Sub-processor | Role | Location |
|---|---|---|
| Hostinger | VPS Hosting | EU |
| Supabase | Database, file storage | EU |
| Anthropic | AI content generation (Claude) | USA |
| OpenAI | Image generation | USA |
| Stripe | Billing | USA |
| Resend | Transactional email | USA |
Transfers outside the EU are governed by Standard Contractual Clauses (SCCs).
4. Retention Periods
| Data | Retention |
|---|---|
| User account | Duration of subscription + 3 years |
| Google/Facebook OAuth tokens | Until disconnection or revocation |
| Audit logs | 12 months |
| Billing data | 10 years (legal obligation) |
5. Your Rights (GDPR)
You have the rights of access, rectification, erasure, portability, objection and withdrawal of consent.
To exercise your rights: daniel.friant@agence-seo-connect.tech
If unresolved: CNIL (French data protection authority)
6. Revoking OAuth Access
From Lexio: Settings → Connections → Disconnect
Google: myaccount.google.com/permissions
Facebook: Settings → Apps and Websites
7. Security
- AES-256-GCM encryption at rest
- HTTPS exclusively
- Strict multi-tenant isolation
8. Cookies
Secure session cookie (__Secure-next-auth.session-token) for authentication only.
No advertising cookies.
9. Changes
Active users will be notified by email 30 days before any material change.
10. Contact
ASC — Agence SEO Connect
Legal representative: Friant Daniel, Joseph
daniel.friant@agence-seo-connect.tech