Privacy — LexaDesk

IN SHORT

It drafts. You send.

LexaDesk helps a shop owner answer buyers and keep listings compliant. It drafts work for you to review; it never sends a message to a buyer on your behalf. Buyer names, addresses and message text are never written to our logs, our analytics, or the data we use to improve drafts.

Buyer data is encrypted and erased 90 days after delivery.
Logs contain identifiers only — never a buyer’s name or address.
We do not sell your data, and we do not advertise with it.

SIGNING IN WITH GOOGLE

Three things, one purpose

If you choose “Continue with Google”, Google tells us three things: your email address, your name, and a stable identifier for your Google account. We use them for exactly one purpose — to create your account and let you sign back into it.

We do not receive or ask for access to your Gmail, Drive, Contacts, Calendar or any other Google service, and we never post anything on your behalf. We do not use this data for advertising, we do not sell it, and we do not share it with anyone beyond the processors listed below. You can sign in with an emailed link instead if you would rather not use Google at all, and disconnecting is as simple as deleting your organisation.

THE EXTENSION

Your own shop pages, nothing else

The translation feature works with no account and no sign-in. When you translate a message, the selected text is sent to our server, translated, and returned. It is not stored afterwards. To apply a fair daily limit we keep a random device identifier that the extension generates itself — it is not linked to you, your shop, or any Etsy account.

The extension runs only on your own Shop Manager pages (etsy.com/your/* and etsy.com/messages*). It has no access to any other site. On those pages it reads the conversation and order identifiers it needs to match what you are looking at with the work waiting in your queue.

The extension contains no remote code: everything it runs ships inside the reviewed package. It downloads configuration (which page elements to look for) as plain data only.

WHAT WE STORE

When you connect a shop

Your email address, so you can sign in.
Your Etsy authorisation tokens, encrypted (AES-256-GCM). We only request the permissions the product needs, and you can disconnect at any time.
Orders and listings from your shop, so the agent can spot work: totals, dates, shipping deadlines and listing text.
Buyer messages, encrypted, so replies can be drafted with the right context. A buyer is identified only by the opaque id the platform gives us.
The drafts we produced and the decisions you made on them.

WHAT WE NEVER STORE

The lines we do not cross

Buyer names and delivery addresses in plain, searchable columns. They stay inside the encrypted order record, and are erased 90 days after delivery.
Any buyer personal data in our application logs — logs contain identifiers only.
Buyer names, emails, phone numbers, addresses or tracking numbers in the data used to improve future drafts. That text is masked before it is stored or processed.
Card numbers. Payments are handled entirely by our payment provider; we never see them.

PROCESSORS

Who else touches your data

Etsy — read and update your shop, with your authorisation.
Our AI provider — receives the message text needed to draft a reply or translate. Buyer identifiers are masked first.
Our email provider — sends sign-in links and the notifications you switch on.
Lemon Squeezy — handles payment and subscription if you buy a paid plan.

We do not sell your data, and we do not use it to advertise to you or anyone else.

YOUR CHOICES

Leave whenever you like

You can disconnect a shop, delete your organisation, or ask us to erase your data by emailing us. Disconnecting revokes our access to your shop immediately. Deleting your organisation removes its shops, orders, messages and drafts.

Questions about this policy or a data request: support@lumerexa.com.

Privacy policy