Privacy Policy

Last updated: October 2025

Texxary UG (haftungsbeschränkt) (“Texxary”, “we”, “our”, or “us”) operates the web application available at lamron.texxary.com (“Lamron” or the “Service”). We take the protection of your personal data very seriously and process it in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Controller

Texxary UG (haftungsbeschränkt)
Segeberger Strasse 3-5
23617 Stockelsdorf, Germany
Email: support@texxary.com

2. Data We Collect

Account Data: name, email address, and authentication information (managed via Clerk).
Billing Data: billing address and payment information (processed securely by Stripe).
Usage Data: IP address, browser type, pages visited, and usage statistics (via Google Analytics).
Uploaded Files: data or files you upload to the Service. If you consent to AI training, these files may be stored indefinitely for that purpose.

We do not collect sensitive data (e.g., biometric or health-related information).

3. Purpose and Legal Basis for Processing

Purpose	Legal Basis
To provide and maintain the Service (account creation, file processing, etc.)	Art. 6(1)(b) GDPR (performance of a contract)
To manage payments and subscriptions via Stripe	Art. 6(1)(b) GDPR
To ensure security, stability, and performance	Art. 6(1)(f) GDPR (legitimate interest)
To analyze usage and improve user experience (Google Analytics)	Art. 6(1)(a) GDPR (consent)
To store and use uploaded files for AI training (if consented)	Art. 6(1)(a) GDPR (consent)

4. Data Retention

We store personal data as long as your account is active. When you delete your account or request deletion, we will erase or anonymize your data unless legal retention periods apply.

Uploaded files used for AI training (based on your consent) may be stored indefinitely.
Transaction data may be retained up to 10 years to comply with German tax and accounting laws (§147 AO).

5. Third-Party Services

We use the following processors and services that may handle your data:

Clerk – User authentication and account management (USA, GDPR SCCs)
Stripe – Payment processing (Ireland / USA, GDPR SCCs)
Render – Website hosting (EU / USA, GDPR SCCs)
AWS (Amazon Web Services) – Temporary data storage bridge (EU, Frankfurt)
Cloudflare – CDN and DDoS protection (Global, GDPR SCCs)
Google Analytics – Usage analytics (USA, GDPR SCCs)
Neon – Database hosting (EU, GDPR compliant)

All third-party services are bound by Data Processing Agreements (DPAs) and Standard Contractual Clauses (SCCs) when outside the EU.

6. Data Transfers Outside the EU

Some service providers (e.g., Clerk, Stripe, Cloudflare, Google) are based in the United States. In such cases, we rely on Standard Contractual Clauses (Art. 46 GDPR) to ensure adequate data protection.

7. Data Security

All connections are secured via SSL/TLS encryption.
Database and stored files are protected using industry-standard security practices.
Access to personal data is restricted to authorized personnel only.

8. Your Rights Under the GDPR

Access (Art. 15 GDPR)
Rectification (Art. 16 GDPR)
Erasure (“Right to be Forgotten”) (Art. 17 GDPR)
Restriction of Processing (Art. 18 GDPR)
Data Portability (Art. 20 GDPR)
Objection to Processing (Art. 21 GDPR)
Withdrawal of Consent (Art. 7(3) GDPR)

To exercise any of these rights, contact us at support@texxary.com.

You also have the right to lodge a complaint with a supervisory authority:
Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD)
Holstenstraße 98, 24103 Kiel, Germany
www.datenschutzzentrum.de

9. Children’s Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors.

10. Changes to This Privacy Policy

We may update this policy from time to time to reflect changes in our Service or legal requirements. The latest version will always be available at lamron.texxary.com/privacy.

11. Contact

Texxary UG (haftungsbeschränkt)
Segeberger Strasse 3-5
23617 Stockelsdorf, Germany
Email: support@texxary.com