Privacy Policy

The company LEXOPTI, a simplified joint stock company with a share capital of 1,000 euros, registered with the Nice Trade and Companies Registry under number 104 115 191, with its registered office at Entresol Immeuble Simonetta, 17 Impasse Jeanne Marlin, 06300 Nice (hereinafter "LexOpti", "we", or "our"), is the data controller within the meaning of Regulation (EU) 2016/679.

LexOpti publishes an AML/CFT compliance software solution intended for regulated professionals, accessible via the websites lexopti.com and app.lexopti.com (the "Service").

2.1 During your registration and throughout your use of the Service, you provide us with information: identification data and professional contact details, information about your organization and activity, and elements necessary for due diligence analyses. Certain data is essential for providing the Service and indicated as such during entry; its absence prevents access to the relevant features. Your exchanges with our team or incident reports may also be processed. A member of your organization or our service providers (technical subcontractors, payment) may also communicate data about you to us.

2.2 Certain information is automatically recorded: connection and browsing data, information about your device, opening of our emails, and links clicked. This data is used to ensure the security of the Service, its proper functioning, and its improvement.

2.3 Regarding the persons you submit for verification as part of your due diligence obligations, you are the data controller. LexOpti acts as a data processor in accordance with Article 28 of Regulation (EU) 2016/679 and processes this data exclusively according to your instructions. The conditions of this processing are detailed in the Data Processing Agreement. The responsibility to inform the persons concerned lies with you.

2.4 Collected data may be anonymized to prevent any subsequent identification. Once anonymized, it no longer falls under the GDPR and may be used for statistical purposes or Service improvement. Failing irreversible anonymization, data remains pseudonymized and governed by this policy.

3.1 Processing is based on the grounds provided in Article 6 of Regulation (EU) 2016/679: contract performance (Service provision, account and subscription management), compliance with our legal obligations (invoicing), and our legitimate interest (security, maintenance, Service improvement). For due diligence data relating to third parties you analyze, the processing responds to your own legal obligations under Articles L.561-5 et seq. of the French Monetary and Financial Code.

3.2 The Service integrates artificial intelligence tools designed to facilitate the analysis of information from public sources. These tools produce decision-support elements (potential matches, suggested risk levels) that do not constitute automated decisions within the meaning of Article 22 of the GDPR. The final assessment and decision responsibility remain with you. Data submitted to these tools is not used to train learning models.

3.3 You receive by electronic means the communications essential to Service operation: account notifications, compliance alerts, information on developments. Sending these messages results from contract performance.

3.4 Regarding our news or new features, the information is based on your consent or, where regulations permit, on our legitimate interest within the meaning of Article L.34-5 of the French Postal and Electronic Communications Code. An unsubscribe link is included in each message.

4.1 LexOpti commits to never marketing your data or transferring it to third parties for prospecting purposes. Access to your information is limited to authorized members of our team. We use technical service providers (hosting, payment, email sending) acting as processors in accordance with Article 28 of Regulation (EU) 2016/679, who process your data only according to our documented instructions.

4.2 By exception, your data may be transmitted upon request from an authorized authority or in execution of a judicial decision. LexOpti, as a software publisher, is not subject to the reporting obligations of Article L.561-15 of the French Monetary and Financial Code. Only professional users are required to file reports with TRACFIN.

5.1 All your data is stored on servers located in the European Union. Since absolute security of digital exchanges cannot be guaranteed, we apply protective measures in accordance with Article 32 of the GDPR: encryption, access restriction, backups.

5.2 Certain service providers we use may process data outside the European Economic Area. These transfers are governed by the instruments provided for in Chapter V of the GDPR.

5.3 The retention period corresponds to the time required by the processing purposes and our legal requirements. For due diligence, this period is five years following file closure or the end of business relations, as provided by Article L.561-12 of the French Monetary and Financial Code. Account-related information is archived in accordance with limitation periods. Beyond this, data is deleted or permanently anonymized.

5.4 In case of a security incident that may pose a significant risk to your freedoms, you will be notified as soon as possible, in accordance with Articles 33 and 34 of the GDPR.

6.1 European regulations and the French Data Protection Act allow you to access your information and obtain a copy, rectify it, request its deletion or restriction of processing, object to certain uses, retrieve your data in a reusable format, and formulate directives about their fate after your death. If processing is based on your consent, it can be withdrawn at any time.

6.2 Any request may be sent to contact@lexopti.com. Identity verification may be performed beforehand. We have one month to respond, which may be extended by two months for complex requests. In case of dispute, you may lodge a complaint with the CNIL (3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr).

7.1 The Service uses cookies essential to its proper functioning (session management, preference storage). These trackers do not require your consent.

7.2 Our showcase website uses audience measurement cookies to analyze traffic. You can disable them via your browser settings.

8.1 This policy applies to all Service features, including those deployed after its publication. Accessing the Service or creating an account acknowledges having read this document. Terms not defined here have the meaning given by our Terms of Service.

8.2 Redirects to other platforms may be present in the Service. These sites apply their own data protection rules, independent of ours. Please review them before sharing any information.

8.3 This document may be modified. Any notable change will be communicated by electronic notification or directly in the Service. The effective version bears the date shown in the header.

8.4 Your questions about your data or this document may be sent to contact@lexopti.com.