Effective Date: July 7, 2025
This Privacy Policy ("Policy") explains how Avalon Platforms, Inc. (“Avalon”, “we”, “us”, or “our”) collects, uses, stores, shares, and protects your personal data when you access or use our website and SaaS platform, Lexflows (“Lexflows” or the “Service”).
This Policy is compliant with applicable data protection laws including the General Data Protection Regulation (EU) 2016/679 ("GDPR"), UK GDPR, and California Consumer Privacy Act (CCPA) where applicable. By using Lexflows, you agree to the practices described below.
1. Who We Are
Company Name: Avalon Platforms, Inc.
Registered Office: Delaware, United States
Contact Email: hi@avalonplatforms.com
Platform: Lexflows – a site and funnel creation platform for businesses and individuals.
2. Scope of This Policy
This Policy applies to all users of Lexflows, including visitors to our marketing website, trial users, and paying customers. It governs how we process personal data obtained through:
- Account registration and authentication
- Payment processing
- Site interaction and analytics
- Marketing and advertising platforms
3. Data We Collect
We collect and process the following categories of personal data:
- First and last name
- Email address (via Google OAuth authentication)
- Account credentials (managed by Clerk)
- Subscription details (linked via Stripe)
- IP address, device type, operating system
- Browser type, language preferences
- Referrer URL, time spent on pages (via Vercel analytics)
- If you consent, we may collect behavioral data via cookies or tracking pixels (e.g. Meta Pixel, Google Analytics) for marketing purposes.
4. Lawful Basis for Processing
We process your personal data under the following legal bases:
- Performance of a contract: to provide access to Lexflows and its features.
- Legitimate interests: to analyze platform usage and improve services.
- Legal obligation: to retain certain billing or transaction records.
- Consent: for marketing communications and non-essential cookies (required under GDPR/UK GDPR).
5. How We Use Your Data
Your data may be used for the following purposes:
- To register and maintain your user account
- To authenticate login credentials
- To process payments and manage subscriptions
- To analyze usage and performance of our platform
- To send transactional and (with consent) marketing communications
- To comply with legal obligations (e.g., tax, fraud prevention)
- To enforce our Terms of Service
We do not sell, lease, or rent your personal data.
6. Cookies and Similar Technologies
Lexflows uses cookies and third-party scripts to enhance user experience and enable certain functionality.
7. Data Sharing and Processors
We share your data only with trusted third-party processors that operate under data processing agreements (DPAs), including:
8. Data Transfers
Your personal data may be transferred to and processed in the United States or other countries outside the EU/UK. In such cases, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs)
- Vendor GDPR/UK GDPR certifications and DPA coverage
9. Data Retention
We retain personal data only as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required by law.
- User account data is retained for the duration of your account.
- Billing records may be retained for up to 7 years for legal compliance.
- Marketing consent records are stored for documentation purposes.
10. Your Rights Under GDPR and UK GDPR
If you reside in the European Union or United Kingdom, you have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion (“right to be forgotten”)
- Restrict or object to processing
- Request a copy of your data in portable format
- Withdraw consent at any time
- Lodge a complaint with a Data Protection Authority
11. Children’s Privacy
Lexflows is not intended for children under 13. We do not knowingly collect personal data from individuals under this age. If we discover that a child under 13 has provided personal data, we will delete it immediately.
12. Security of Your Information
We take appropriate technical and organizational measures to protect your personal data from unauthorized access, use, or disclosure, including:
- TLS encryption
- Access control policies
- Vendor security reviews
- Data minimization and anonymization
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect legal, technical, or operational changes. If material changes are made, we will notify users via email or platform alert prior to the change taking effect.
Your continued use of Lexflows after such updates constitutes your agreement to the revised Policy.
14. Contact Us
If you have questions about this Privacy Policy or your personal data, you may contact:
Avalon Platforms, Inc.
Email: hi@avalonplatforms.com
Attn: Privacy Officer
