Privacy Policy

LangDex ("we", "us", "our") operates the LangDex linguistic database and API. This Privacy Policy explains how we collect, use, and protect information when you use our Service.

2.1 Where Your Data Is Stored

LangDex uses Supabase as our database and authentication provider. Your data is stored on Supabase's cloud infrastructure powered by AWS.

• Linguistic data: Static dataset (~75GB) containing language, lexeme, and translation data from open sources
• User data: Stored separately with Row-Level Security (RLS) ensuring you can only access your own data

2.2 Data Categories

3.1 Account Registration

When you create an account, we collect:

• Email address
• Display name (optional)
• Timezone and locale preferences

3.2 API Usage (for API subscribers)

When you use the API, we collect:

• API requests (endpoint, method, response time)
• IP addresses (for rate limiting and security)
• Request/response sizes
• Timestamps

3.3 Billing Information

For paid subscriptions:

• Subscription tier and status
• Billing cycle dates
• Payment transaction IDs (via DodoPayments - we do not store card details)

3.4 Information We Do NOT Collect

• We do not track individual word lookups for profiling or advertising
• We do not store payment card details (handled by DodoPayments)
• We do not sell or share personal data with third parties for advertising

We use collected information to:

• Provide and maintain the Service
• Enforce rate limits and prevent abuse
• Communicate about service updates
• Improve the Service based on usage patterns
• Comply with legal obligations

We do not sell personal data. We may share data with:

• Service providers - Supabase (hosting), DodoPayments (billing), and infrastructure providers who process data on our behalf
• Legal requirements - When required by law, court order, or government request
• Business transfers - In connection with a merger, acquisition, or sale of assets

We implement appropriate security measures including:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest for sensitive data
• Access controls and authentication
• Regular security reviews

However, no system is completely secure. We cannot guarantee absolute security.

Depending on your jurisdiction, you may have rights to:

• Access - Request a copy of your personal data
• Correction - Request correction of inaccurate data
• Deletion - Request deletion of your data
• Portability - Request your data in a portable format
• Objection - Object to certain processing activities

To exercise these rights, contact: privacy@langdex.co

Our servers are hosted on Supabase's infrastructure (AWS). By using the Service, you consent to the transfer of data to countries that may have different data protection laws than your country of residence.

For EU users: Supabase maintains appropriate data protection agreements and safeguards for international transfers.

We use minimal cookies for:

• Session management
• Authentication (Supabase Auth)
• Security (CSRF protection)

We do not use tracking cookies or third-party advertising cookies.

The Service is not directed at children under 13. We do not knowingly collect personal information from children. If you believe we have collected such information, contact us immediately.

We may update this Privacy Policy periodically. We will notify users of material changes via:

• Email (for registered users)
• Notice on our website

The "Effective Date" at the top indicates the last revision.

For privacy-related questions or requests:

• Email: privacy@langdex.co

For EU residents, you may also contact your local data protection authority.