Privacy Policy

Introduction

Rexlora ("we", "us", "our") runs the Rexlora website and AI workspace at https://rexlora.com. This Privacy Policy explains what information we collect, why we collect it, how we use it, and the choices you have.

By creating an account or using Rexlora, you agree to this policy. If you do not agree, please do not use the service.

Information we collect

We collect information in these ways:

• Account information: email address, name (if you provide it), password (stored in hashed form), and sign-in method (email or Google).
• Profile and usage: conversations, messages, files you upload, model choices, credit balance, purchases, exports, projects, prompts, and settings.
• Payment information: we do not store full card numbers. Paystack and Flutterwave process payments; we receive confirmation, amount, currency, and references needed to credit your account.
• Device and session data: IP address, browser type, device signals used to prevent abuse (such as duplicate free accounts), and session tokens to keep you signed in.
• Communications: messages you send through our contact form, support emails, and newsletter sign-ups if you opt in.
• Optional program data: if you turn on AI data contribution in settings, you allow certain usage to be used to improve Rexlora. This is off unless you opt in.

How we use your information

We use your information to:

• Provide the service: run AI requests, store your chats, process credits, and deliver files you create or download.
• Process payments and prevent fraud, including welcome-credit abuse and referral misuse.
• Secure accounts: rate limiting, bot protection, and investigating suspicious activity.
• Improve Rexlora: fix bugs, understand usage patterns, and develop features (using aggregated or de-identified data where possible).
• Communicate with you: account verification, password reset, payment receipts, important service notices, and replies to contact messages.
• Meet legal obligations and respond to lawful requests from authorities when required.

AI models and third-party providers

When you use Rexlora, your prompts, attachments, and related context are sent to third-party AI providers (such as OpenRouter and the model companies behind GPT, Claude, Gemini, and others) so they can generate responses. Those providers have their own privacy policies.

We choose providers that contractually limit use of API data for training where those terms are available. You should not send information you are not allowed to share or that you need to keep strictly confidential unless you accept that risk.

Web search, image generation, and payment features involve additional providers. Each processes only what is needed for that feature.

When we share information

We do not sell your personal information. We share data only:

• With service providers who help us run Rexlora (hosting, email, payments, analytics, error monitoring) under confidentiality obligations.
• With AI and infrastructure providers to fulfill your requests, as described above.
• With other users only when you choose team or organization features that share credits or content within your group.
• When required by law, court order, or to protect rights, safety, and security of Rexlora, users, or the public.
• In connection with a merger, acquisition, or sale of assets, with notice where the law requires it.

How long we keep data

We keep your account and conversation data while your account is active. You may delete conversations or close your account subject to our Terms.

We retain payment and ledger records as long as needed for accounting, tax, and dispute resolution.

Security logs and abuse-prevention records may be kept for a limited period after use.

Backups may retain deleted data for a short time before they are overwritten.

Security

We use industry-standard measures such as encryption in transit (HTTPS), hashed passwords, access controls, and isolated environments for sensitive processing (for example, data analysis sandboxes).

No online service is perfectly secure. You are responsible for keeping your password confidential and using a strong, unique password.

Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or export your personal data, or to object to certain processing.

You can update profile details in settings, opt out of AI data contribution there, and contact us to request access or deletion. We will respond within a reasonable time.

If you are in Nigeria, we aim to handle personal data in line with the Nigeria Data Protection Act and related guidance.

You may unsubscribe from marketing emails using the link in those emails or by contacting us.

Children

Rexlora is not intended for children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.

International transfers

Our servers and providers may be located outside your country. By using Rexlora, you understand that your information may be processed in Nigeria and other countries where our partners operate, with appropriate safeguards where required.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the new version on this page and update the date above. Important changes may also be emailed or shown in the product.

Contact us

Questions about privacy? Email contactus@rexlora.com or use the contact page at https://rexlora.com/contact.