Privacy Policy — LexLearn
Version: 23 October 2026 — 2026-10-23-v6
Information we process
Basic account and study information, registered courses, student answers, assessment results, response times, learning progress and educational review records. We avoid collecting personal information unnecessary for learning.
Why we process it
To provide adaptive training, assess progress, enable authorized supervisors to help students and protect the service.
Registration and approval
For the conference period, students can create an account and sign in immediately with a generated username and a password of their choice, without supervisor approval or contact verification. Email and WhatsApp are both optional contact details and are not verified identities. Without verified contact information, self-service password recovery might not be possible. Supervisors can suspend or disable accounts under the published rules.
Assessment technology
The short public demo may submit the written answer (without the visitor's name or contact details) to an AI model provider for meaning-based grading when enabled. The answer and available automated result are saved for authorized supervisor access. If AI grading is unavailable, limited rule-based checks may run instead. Where evidence is insufficient, the service should abstain from assigning a reliable score and allow supervisor review. Educational indications are not official university grades.
For signed-in students, LexLearn submits saved free-text diagnostic and training responses to OpenAI under the single registration acceptance of the disclosed learning-data and AI-assessment terms, recorded on the student's account. Subsequent grading for the same purpose reuses that saved choice without prompting again. Requests include the answer, grading question, rubric and approved legal extracts, but not the student's name or contact information. No additional acceptance is requested during assessment or training. Automated grades remain preliminary and subject to academic review.
Who sees the information?
The student may access their records when active. Authorized staff can access student records within their approved permissions. Passwords are not disclosed to supervisors as readable records.
Exports and deletion
Authorized staff may create printable reports, PDFs and copyable text containing student records; these documents must be stored and shared securely. Accounts may be paused or disabled while preserving progress. Permanent deletion may irreversibly remove related answers and evaluations, subject to applicable retention requirements; limited administrative audit records may remain.
Retention
Institutional partners will determine specific retention periods before a formal university pilot, subject to the applicable requirements.
Conference contact options
The LexLearn Web Summit Qatar 2027 conference page offers an optional contact form. It collects your name, role (student, university or investor/partner), preferred contact details (email or WhatsApp), and optionally your organisation. We use these details only to respond to your inquiry and follow up about relevant LexLearn academic pilots or partnerships. Secure storage requires a separate, unticked consent box and a successful security check; the page confirms receipt only after storage succeeds. If secure intake has not been enabled, visitors may instead contact us directly by WhatsApp or email, and their form details are not stored in the conference inquiry database.
Inquiries are processed in Supabase with server-only permissions and cannot be read by other visitors. Limited technical information, including a keyed pseudonymous network fingerprint, is used to prevent abuse; Cloudflare Turnstile checks are used when secure intake is active. Our intended retention limit for inactive inquiries is 12 months, subject to an operational review and deletion process and applicable legal requirements; limited consent or compliance evidence may be retained when necessary. You may request access, correction or deletion of conference contact data by emailing info@lexlearnsmart.com; verification of the requester's identity may be required to protect personal data. Direct WhatsApp and email communications are also subject to the chosen provider's policies. Proposed university pilot reporting will be aggregated and anonymised, subject to required approvals.
Website usage statistics
From 28 October 2026, we record the page name, visit time, a random browser identifier stored locally, and a visit identifier renewed after a gap of more than 30 minutes between pages. Signed-in visits are linked to the account ID so authorized supervisors can review usage frequency. This counter does not send full URLs, query strings, answers or email addresses, and uses no advertising services. Measurement stops when Do Not Track or Global Privacy Control is enabled. You can opt out with these browser settings and clear the identifier from site storage. Visit details are retained for up to 90 days, with expired records removed by hourly cleanup triggered by incoming visits. A rotating network HMAC is used for rate limiting and cleaned up after two hours; raw network addresses are not stored in the analytics tables.