Privacy

Last updated: October 2026

Data controller

Henley Franc UG (haftungsbeschränkt)
Sigererstr. 3c
81249 München
Deutschland
Managing director: Andreas Hilbert
Email: contact@lxi.be

Overview

We process personal data as needed to operate this website, provide your services, handle billing and support, and maintain security. With your voluntary consent, we use local acquisition analytics. We do not use external analytics or advertising networks. The website and services run on servers at IONOS in the European Union.

Server logs

On each access, the web server stores IP address, date and time, accessed address, referrer and browser identifier. This serves secure and stable operation and defense against attacks (Art. 6(1)(f) GDPR). The log files are deleted after 14 days.

Cookies

We use a technically necessary session cookie to keep you signed in (§ 25(2) No. 2 TDDDG, Art. 6(1)(b) GDPR). It is transmitted over an encrypted connection and expires after twelve hours or when you sign out. Selecting “Stay signed in for 7 days” additionally sets a necessary login cookie for up to seven days. For optional acquisition analytics, we save your choice for 180 days. Source attribution is used within the session only after consent. You can withdraw your consent below at any time.

Customer account, contracts and billing

For registration, customer account, booked services and billing we process name, email address, optionally company, contract and usage data (Art. 6(1)(b) GDPR). We retain invoice-relevant data for up to ten years due to commercial and tax obligations (Art. 6(1)(c) GDPR in conjunction with § 147 AO and § 257 HGB).

Contact and project inquiries

We process details from contact, support and enterprise inquiries to respond and, where applicable, to prepare a contract (Art. 6(1)(b) and (f) GDPR). They are deleted once the inquiry has been finally processed and no statutory retention obligations exist.

Support for business inquiries

For enterprise inquiries we additionally collect country and postal code to find suitable support. LXI may handle the inquiry itself or make the provided contact and project data accessible to a responsible independent LXI sales partner. For a personal partner inquiry link we show the intended contact in the form. If business support already exists, we take this assignment into account. The responsible persons use the details for the desired consulting and quotation; an inquiry does not subscribe you to a newsletter and does not open a customer account.

For regional assignment we process the address provided by sales partners. Location matching is done with locally stored postal code data. No contact or address data are transmitted to an external map service for this. The private partner address is not displayed in the public inquiry form.

Product updates

If you consent during registration, we will send you product news by email (Art. 6(1)(a) GDPR). You can revoke consent at any time with effect for the future, e.g. via the unsubscribe link in each email or by message to support@lxi.be.

Email delivery

We send system messages such as confirmations and invoices via our own mail server.

Payments

Payments are processed via PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. For this we transmit the data required for payment to PayPal (Art. 6(1)(b) GDPR). PayPal processes these data under its own responsibility; details can be found in PayPal's privacy policy.

Domains

For domain registrations and domain transfers we transmit the required holder data to our registration partner Openprovider (Hosting Concepts B.V., Netherlands) and to the responsible registry of the respective extension, for example DENIC eG for .de domains (Art. 6(1)(b) GDPR). For a commissioned domain transfer the required auth code is also processed. We store it encrypted and remove it from the order after confirmed transfer completion. Depending on the extension, registries may process data outside the EU or display it in public directories.

AI tools

We process content you send to Maker, AI Chat, AI Translator or Studio, including uploaded files, to generate the requested results (Art. 6(1)(b) GDPR). Depending on the operating mode, this happens on our own servers or with external AI providers. Our own servers are located in the European Union. For the AI features we currently use DeepSeek and Agnes AI, both based in the People's Republic of China. Content may be transferred to countries outside the European Union for which there is no adequacy decision by the EU Commission. Please do not enter particularly sensitive personal data into the AI tools. Projects, chats and files remain stored until you delete them or close your account. Credentials and integration keys are stored encrypted.

Partner program and company accounts

If you voluntarily take part in the partner program, we process your enrollment and confirmations, the chosen sponsor, the attribution of new customers, qualified paid revenue, commissions, refunds, training registrations and payouts. Your payout and tax data are stored encrypted. For the transfer, PayPal or the executing bank receives the necessary recipient and payment data.

Within your partner network, the up to four parent partners can see your name, partner code, status, rank, join date and summarized direct customer revenue. Private payment and tax data and customer email addresses are not shown there. Company owners manage the members they invited and shared quotas.

Personal referral links are attributed via the current session. For visit statistics, instead of the IP address we store an identifier generated with a secret key from the IP address and browser identifier, plus the day of the visit. These visit entries are deleted after 90 days. Enrollment records, invoices and statements are retained according to their purpose and statutory retention obligations. You can end partner participation in the partner area; for information or further privacy concerns, contact us.

Retention period

We store personal data only as long as necessary for the respective purpose or as long as statutory retention obligations exist. After your account is closed, we delete your data unless a retention obligation prevents this.

Your rights

Within the statutory framework, you have the right of access, rectification, erasure, restriction of processing and data portability, as well as the right to object to processing based on legitimate interests. You can withdraw consent at any time. To do so, contact support@lxi.be.

Right to complain

You can lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach.

Data security

All connections to our services are TLS-encrypted. Credentials and keys for integrations are stored encrypted.