Privacy Policy

1. Introduction

Dorlexa (“we”, “us”, or “our”) operates the website dorlexa.ai. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. If you do not agree with the terms, please discontinue use of the site.

2. Data Collection

We may collect the following types of information:

• Account information: Email address and name when you register for a premium subscription or join our waitlist.
• Usage data: Anonymous, aggregated page view and interaction data collected through privacy-friendly analytics (Plausible Analytics). No personal identifiers are tracked.
• Authentication data: If you sign in via a third-party provider, we receive only the minimal profile information necessary (e.g., email address).

3. Use of Data

We use your information to:

• Provide and maintain the Service, including premium features.
• Send product updates, scoring reports, and service announcements.
• Improve the user experience based on anonymous usage patterns.
• Respond to support requests and inquiries.

We process your data on the legal basis of (a) your consent, (b) performance of a contract (e.g., your subscription), and (c) our legitimate interests in improving the Service.

4. Cookies

Dorlexa.ai does not use tracking cookies. Our analytics provider, Plausible Analytics, is fully cookie-free and compliant with GDPR, CCPA, and PECR. No personal data is collected through analytics. Essential cookies may be used for authentication sessions if you have a premium account.

5. Third-Party Services

We use the following third-party services to operate the platform:

• Supabase — Database hosting and authentication. Data is stored in secure, SOC 2-compliant infrastructure.
• Vercel — Website hosting and serverless functions. Vercel processes requests in accordance with their privacy policy.
• Plausible Analytics — Privacy-friendly, cookie-free web analytics. No personal data is collected or stored by Plausible.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. You may request deletion of your data at any time by contacting us.

8. Your Rights

Under the GDPR and applicable data protection laws, you have the right to:

• Access your personal data and receive a copy of the information we hold about you.
• Rectification — request correction of inaccurate or incomplete data.
• Erasure — request deletion of your personal data (“right to be forgotten”).
• Restrict processing of your data in certain circumstances.
• Data portability — receive your data in a structured, machine-readable format.
• Object to processing based on legitimate interests.
• Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at hello@dorlexa.ai. We will respond within 30 days.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

10. Contact

For questions about this Privacy Policy or to exercise your data rights, contact us at: hello@dorlexa.ai