Privacy ledger

Privacy policy

Effective 31 July 2026

This policy explains the information LexVision actually handles when you browse, use the requirements assistant, send a project inquiry, or operate a public interactive demo—and how you can control it.

Scope and role

This policy covers the brand content, project inquiry, AI requirements assistant, and interactive demos available from lexvision.jurislm.com. LexVision determines why and how these application data flows operate.

Concept work is not a separate client service. A form, assistant, cart, or payment data flow starts only when you choose to use that interaction.

Information we handle

This ledger reflects the current application, database, and configured service boundaries. Each row separates the information, purpose, retention, recipients, and control.

Project inquiries

Information: Name, email, optional organisation and phone, requested services, problem, desired outcome, budget, timing, referral source, reference URLs, and additional message.
Purpose: Reply to the inquiry, evaluate a possible engagement, prepare a meeting or proposal, and keep necessary business records.
Retention: Kept while evaluating or managing the relationship and reviewed at least annually; deleted when the purpose ends unless law, contract, or a dispute requires longer retention.
Recipients and access: Restricted LexVision operators and the site database. Inquiries are not public.
Your control: Optional fields may be left blank. After submission you may request access, correction, restricted use, or deletion.

Privacy-rights requests

Information: Name, email, request type, and the request details you provide. Do not attach identity documents or unnecessary sensitive information.
Purpose: Understand the request, verify identity with the least information necessary, exercise your data rights, and retain a necessary handling record.
Retention: The site database currently has no automatic deletion schedule. Completed requests are reviewed at least annually and deleted when the purpose ends, except where law, a dispute, or evidence of handling requires longer retention. The restricted mailbox copy follows the same purpose.
Recipients and access: Restricted LexVision operators and the site database; Resend transmits the full request to a restricted operating mailbox.
Your control: Provide only what is needed to handle the request. You may also ask to correct, restrict, or delete earlier data, and LexVision will explain any limit that prevents immediate action.

Inquiry notifications

Information: The inquiry content and submission time form an operational email notification.
Purpose: Allow LexVision to identify and respond to a valid inquiry promptly.
Retention: Retained under the same inquiry purpose and restricted mailbox controls, then cleared when that purpose ends.
Recipients and access: Resend transmits the message for LexVision to a restricted operating mailbox.
Your control: If this necessary notification path is not acceptable, do not submit the form and use another contact route already known to you.

AI requirements assistant

Information: Up to 500 characters entered into the assistant. Do not include identity numbers, payment details, or unnecessary sensitive information.
Purpose: Analyse the described need and suggest potentially relevant service modules.
Retention: The LexVision application does not write the text to its database. OpenAI may retain abuse-monitoring records under its current API data controls.
Recipients and access: When the OpenAI API is configured, input is sent to OpenAI; if unavailable, a local rules engine is used.
Your control: The assistant is optional. You can browse services or contact LexVision without submitting text.

Language and entrance experience

Information: Chosen language, whether the entrance animation has appeared in this session, and privacy preferences.
Purpose: Deliver the language you request, avoid repeating the entrance animation, and remember a reversible analytics choice.
Retention: Language for one year, entrance state until the browser session ends, and privacy preference for 180 days.
Recipients and access: Stored in your browser on the LexVision first-party domain.
Your control: Switch language, clear browser data, or reopen Cookie preferences from the footer.

Optional site analytics

Information: Pseudonymous first-party analytics accepts only these individually closed fields: eventId (UUID); sessionId (UUID); sessionSequence (integer 1-2147483647); name (page_view / cta_clicked / inquiry_started / inquiry_submitted / search_submitted / search_result_selected / share_opened / link_copied / related_content_selected / web_vital); locale (zh-tw / en); acquisitionSource (direct / organic_search / paid_search / social / email / referral); acquisitionMedium (none / organic / cpc / social / email / referral); pageKind (home / about / services / service / process / projects / project / journal / journal_article / contact / contact_success / search / privacy / cookies / legal / site_map); placement (hero / header / navigation / service_card / project_card / journal_card / inline / footer / contact_form); target (contact / services / projects / journal / process); context (project / meeting / general / partnership / media / careers); filter (all / service / project / journal); queryLength (integer 0-500); resultCount (optional integer 0-500); contentType (service / project / journal); sourceType (service / project / journal); metric (CLS / FCP / INP / LCP / TTFB); value (finite number 0-120000); rating (good / needs_improvement / poor); navigationType (navigate / reload / back_forward / prerender). It does not collect names, email addresses, full URL query strings, content titles, or form contents.
Purpose: After you allow it, understand site use and conversion journeys to improve content and performance. It is not used for advertising audiences, cross-site tracking, or to identify you.
Retention: Live analytics events are retained for 90 days. Scheduled deletion can be extended by an expiring backup cycle of up to 14 days.
Recipients and access: Restricted LexVision first-party database and operations staff; no third-party analytics SDK receives these events.
Your control: Withdraw analytics from the footer to stop future collection and clear browser analytics session data.

Commerce and donation demos

Information: If you operate these demos: cart, name, email, phone, address, order items, amount, donor message, and payment state.
Purpose: Demonstrate checkout, order, donation, and payment-callback flows. The pages identify themselves as demos.
Retention: Cart state remains in the browser until cleared. Created transaction-demo records currently have no automatic deletion schedule and are handled through rights requests subject to necessary transaction records.
Recipients and access: The LexVision database and, when you proceed to payment, ECPay for required transaction fields.
Your control: Do not enter unnecessary real information in a demo. Leave before submission or use the privacy-request path afterwards.

Comments, events, and general demo forms

Information: Depending on the demo: name, email, comment, event session, headcount, and a hashed IP identifier.
Purpose: Demonstrate moderated comments, event registration, general inquiries, and abuse prevention.
Retention: Kept while the demonstration and moderation purpose remains; correction or deletion may be requested, subject to necessary security or dispute records.
Recipients and access: Restricted demo database and admin tools; an operational notification may be transmitted by Resend.
Your control: Fields are shown before submission. Do not submit another person’s details or unnecessary sensitive information.

Security and operations

Information: The server handles request IP, headers, time, and error context. Inquiry rate limiting uses IP in memory and does not write the raw IP into the inquiry record.
Purpose: Keep services available, prevent abuse, diagnose faults, and respond to security events.
Retention: Kept for the minimum operational period, with longer handling only for an active incident, legal duty, or incomplete backup cycle.
Recipients and access: LexVision and restricted hosting, network, or operations services.
Your control: Security processing generally cannot be disabled per request; you may still ask about identifiable records related to you.

Providers and international processing

Providers are used only for the described function. Resend, OpenAI, and ECPay may process information outside Taiwan under their locations and service terms.

LexVision does not sell personal information or turn project inquiries into an undisclosed advertising list. A material provider or purpose change will first update this policy and the relevant choice interface.

Resend privacy policy OpenAI API data controls ECPay official site

Your rights and contact route

Subject to applicable law, you may request access or a copy, correction or supplementation, cessation of collection, processing, or use, and deletion of personal information about you. Identity, legal, contractual, or claims requirements may limit a request.

The public request form collects only enough information to locate a record and does not ask for identity documents up front. To protect your information, we may verify identity later through an established contact channel.

Submit a privacy request Taiwan PDPC Preparatory Office

Safeguards and policy changes

Controls include restricted access, encrypted transport, input validation, same-origin checks, rate limits, and protected administration. No online system can promise zero risk.

A revision changes the effective date on this page. A material new purpose or optional technology will receive a prominent notice or renewed choice when required.