Privacy Policy

This Privacy Policy describes how Lexium Industries Ltd (“Lexium,” “we,” “us,” or “our”) processes personal data when you visit lexium.cc or use Lexium Studio’s video preparation, workflow, scheduling, channel connection, and distribution services (the “Service”). Lexium Industries Ltd is the data controller for this processing.

This policy does not govern TikTok, Google, YouTube, Meta, or another third-party platform. Those providers process information under their own privacy policies when you use or connect their services.

Depending on the features you use, we collect:

• Account information: name, email address, profile image, account role, and identifiers supplied by Google sign-in.
• Connected-channel information: provider name, provider account or channel identifier, authorized scopes, token expiry, and encrypted access and refresh tokens. We do not ask for your social-media password.
• Content and workflow information: uploaded video files, technical media metadata, titles, captions, destination selections, schedules, timezones, transformation settings, workflow history, and publishing status.
• Usage and security information: request times, feature activity, job results, error codes, browser and device information, IP address or a derived security fingerprint, session records, and audit events.
• Communications: information you provide when you contact us for support, privacy requests, security reports, or feedback.

We receive information directly from you, automatically from your use of the Service, from Google when you sign in, and from a connected platform after you authorize access. We only request platform scopes needed for the features presented to you, and the provider’s consent screen identifies the requested access.

We use personal data to:

• authenticate accounts and maintain secure sessions;
• inspect, prepare, transform, and deliver videos according to your instructions;
• connect channels, refresh authorized tokens, and report publishing status;
• save workflows, schedules, automation drafts, and destination preferences;
• enforce quotas, prevent fraud and abuse, diagnose failures, and protect infrastructure;
• provide support and communicate operational, security, or policy updates;
• comply with law, valid legal process, and provider obligations; and
• produce aggregated operational statistics that do not identify individual users.

We do not sell personal data or use uploaded videos for third-party advertising. We do not use your videos to train a general-purpose artificial-intelligence model.

Where a legal basis is required, we process information to perform our contract with you, based on your consent for connected-platform authorization, to comply with legal obligations, and for legitimate interests such as securing the Service, preventing abuse, maintaining reliability, and improving operations. You may withdraw consent by disconnecting a provider, but withdrawal does not affect processing already lawfully completed.

We disclose information only as reasonably necessary:

• At your direction: video files, captions, and publishing details are transmitted to destinations you select, such as TikTok or YouTube.
• Service providers: hosting, database, cache, storage, security, monitoring, and communications providers may process data under contractual confidentiality and security obligations.
• Legal and safety: we may disclose information when required by law or reasonably necessary to protect rights, safety, users, providers, or the Service.
• Business changes: information may transfer as part of a merger, financing, acquisition, restructuring, or sale, subject to applicable law.

We do not disclose connected-platform data to data brokers.

TikTok authorization currently permits Lexium to submit a video to your TikTok inbox as a draft using the Content Posting API. You complete review, editing, and posting in TikTok. TikTok independently processes, moderates, transcodes, and distributes content under its own rules.

When future import or monitoring features are enabled, we will request the relevant read scope, such as access to a list of your public videos, through the provider’s authorization screen before accessing that data. You can deny an optional scope or revoke access through the provider.

We retain different categories for only as long as reasonably needed:

• incomplete or inspected temporary uploads generally expire after 15 minutes;
• prepared downloadable outputs generally expire after one hour;
• an automation-draft source may be retained for up to seven days;
• operational and security events are generally retained for up to 90 days;
• account details, workflow definitions, schedules, and encrypted provider tokens remain while your account or connection is active; and
• limited records may be retained longer when required for legal compliance, dispute resolution, fraud prevention, or security.

Cleanup is automated but may not be instantaneous. Deletion from backups and provider systems may follow separate cycles. Disconnecting a provider stops future Lexium access but does not delete content already sent to that provider.

Lexium uses essential cookies and similar browser storage for sign-in sessions, OAuth state, security, and core preferences. These technologies are necessary to provide requested features. We do not currently use third-party advertising cookies. If we introduce optional analytics or advertising technology, we will update this policy and provide choices where required.

We use safeguards designed for the nature of the information, including encrypted provider tokens, access controls, private media paths, expiring signed media links, rate limits, security logging, and transport encryption in production. No system is completely secure, so we cannot guarantee absolute security. Report a suspected vulnerability to security@lexium.cc.

Lexium and its providers may process information outside your country, including where a connected platform or infrastructure provider operates. Where required, we use recognized safeguards for international transfers and assess whether the recipient provides an appropriate level of protection.

Depending on your location, you may have rights to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent, and to lodge a complaint with a data-protection authority. Nigerian users may complain to the Nigeria Data Protection Commission.

Send requests to privacy@lexium.cc from the email associated with your account. We may need to verify your identity and may retain information where an exception or legal obligation applies. You may also revoke connected-platform access through that provider’s account settings.

The Service is intended for adults and is not directed to anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided information, contact privacy@lexium.cc so we can investigate and delete it where appropriate.

We may update this policy to reflect product, legal, or operational changes. We will post the updated version, revise the effective date, and provide additional notice for material changes where appropriate.

Questions, requests, and complaints may be sent to privacy@lexium.cc. Contractual questions are governed by our Terms of Service.