Lexiara — Privacy Notice

Last updated: 28 July 2026

Who we are

Lexiara is operated by Taliara Limited, a company registered in England and Wales (company number 17228820), registered office 167-169 Great Portland Street, London, W1W 5PF — the controller of the personal data described here. Contact: in writing to the registered office.

What we collect, and why

We collect only what operating a metered API requires:

• Account details — the name and email address associated with an API key. Basis: performance of our contract with you.
• Credentials — a cryptographic hash of your API key. We cannot recover the key itself. Basis: our legitimate interest in securing the Service.
• Usage records — per-key request counts by endpoint and period, used for quotas, rate limits and (where applicable) billing. Basis: performance of the contract, and our legitimate interest in metering and abuse prevention.
• Server logs — transient operational logs (including IP addresses) kept by our hosting infrastructure for security and debugging. Basis: legitimate interest in running a secure service.

We do not sell personal data, use it for advertising, or use it to train machine-learning models. The legislative texts the Service serves are public documents and contain no data about you.

Where it lives

The Service runs on Cloudflare (edge) with data stored on Neon (PostgreSQL, EU region). Both act as our processors. Requests reaching the Cloudflare edge may transit outside the UK/EEA; contractual safeguards (including standard contractual clauses in those providers' terms) apply.

How long we keep it

Account details and usage records: for the life of the key and up to 24 months after revocation, for billing and audit. Operational logs: short rotation set by the infrastructure provider.

Your rights

UK GDPR gives you rights of access, rectification, erasure, restriction, portability and objection. Write to the registered office to exercise them. You may complain to the Information Commissioner's Office (ico.org.uk).

Changes

We will notify key holders of material changes to this notice, and the version served at lexiara.org/privacy is the current one.