This Privacy Policy describes how JSK LEX PRIVATE LIMITED ("we") collects, uses, and protects information when you use the LexMoot website and services ("Service"). We comply with the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023, and other applicable Indian laws.
1. Information we collect
- Account information: email address, display name, and (if you sign in with Google) profile picture and Google user ID.
- Learning activity: which cases you played, your answers, XP, streaks, and session history.
- Payment metadata: Razorpay order ID, payment ID, plan chosen, and payment status. We do not receive or store your card, UPI, or banking details.
- Device / usage data: a device fingerprint used only to enforce anti-abuse limits, plus standard log data (IP address, user agent, timestamps).
2. How we use your information
- To operate the Service — showing cases, tracking progress, enforcing daily limits.
- To process subscriptions and grant Premium access.
- To secure the Service against abuse and bulk extraction.
- To send transactional email (sign-in, receipts, expiry reminders).
- To improve the product based on aggregated learning patterns.
3. Legal bases
We process personal data on the basis of your consent (when you sign up) and to perform our contract with you (delivering the Service you paid for), and where necessary for our legitimate interests in preventing fraud and abuse.
4. Sharing your information
We share personal data only with:
- Razorpay — to process your payment. See Razorpay's own privacy policy at razorpay.com/privacy.
- Supabase / cloud infrastructure providers — for hosting, database, and authentication.
- Google — only if you choose Google sign-in.
- Law-enforcement or regulatory authorities where legally compelled to do so.
We do not sell your personal information to third parties, and we do not use it for advertising.
5. Data retention
- Account & learning data: kept while your account is active.
- Payment records: retained for 8 years as required by Indian tax law.
- On account deletion, personal identifiers are erased within 30 days; anonymised aggregate statistics may be retained.
6. Your rights
You can:
- Access, correct, or update your account information from your profile page.
- Request deletion of your account by emailing us.
- Withdraw consent for non-essential processing at any time.
- File a complaint with the Data Protection Board of India.
7. Security
We use HTTPS in transit, row-level security in our database, and hash secrets at rest. No system is perfectly secure — please use a strong, unique password.
8. Children
The Service is not intended for users under the age of 16. We do not knowingly collect data from children. Parents who believe their child has created an account should contact us.
9. International transfers
Our hosting provider may store data in data centres outside India. Where this happens, we ensure equivalent contractual and technical safeguards apply.
10. Contact us
For any privacy request, write to jsklex23@gmail.com or +91 81428 06267. Postal address: 6-16-49, 3rd Floor, Mekapati Pride, 16/3, Arundelpet, Guntur — 522002, Andhra Pradesh, India.
11. Changes to this policy
We may update this policy from time to time. Material changes will be notified in-app or by email at least 7 days before they take effect.