Privacy Policy

Last updated: 21 June 2026

This Privacy Policy explains how Soria Labs AS (Org. nr. 937 457 375, Dronningens gate 5-7, Sandefjord, Vestfold, Norway — "we", "us") collects and processes personal data when you use the Lexisub browser extension and the lexisub.com website (the "Service"). We are the data controller. We follow the EU/EEA General Data Protection Regulation (GDPR) and Norwegian data-protection law.

1. Our privacy principles

2. Data we process

DataWhyWhere it lives
Email address To link and verify your subscription (entitlement check). On our billing backend (Supabase), keyed to your subscription.
Subscription & payment status To know whether your access is active. Created by Paddle, stored on our billing backend. We do not store card numbers.
Saved phrases & app settings So your collected phrases and preferences persist. In your browser's local storage on your device (and, for settings, Chrome's built-in sync under your Google account). Not sent to us.
Subtitle text you translate Only if you enable AI translation with your own API key. Sent directly from your browser to the provider you chose (DeepL/OpenAI/Google) under your own account. Not sent to us.
Technical/diagnostic data Security and error monitoring of our billing backend. Limited request metadata and error reports processed by our hosting and error-monitoring providers.

3. Legal bases (GDPR Art. 6)

4. Service providers (processors)

We share data only with providers that help us run the Service:

We do not sell or rent personal data to anyone.

5. International transfers

Some providers may process data outside Norway/EEA. Where that happens, transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses or an adequacy decision.

6. Retention

We keep your subscription email and status for as long as your account is active and as required for legal, tax, and accounting purposes. Records held by Paddle as Merchant of Record are retained under their policies. Saved phrases and settings remain on your device until you delete them or remove the extension.

7. Your rights

Under the GDPR you have the right to access, correct, delete, restrict, or port your personal data, and to object to certain processing. To exercise any of these, email contact@lexisub.com. You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) or your local supervisory authority.

8. Deleting your data

To delete your subscription email from our backend, contact us at contact@lexisub.com. To delete your saved phrases and settings, clear the extension's data or uninstall it from your browser.

9. Cookies

Our marketing website uses no advertising cookies. The checkout page loads Paddle, which may set cookies strictly necessary to process your payment; these are governed by Paddle's policies.

10. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal data.

11. Changes

We may update this policy. Changes take effect when posted here, shown by the "Last updated" date above.

12. Contact

Soria Labs AS — contact@lexisub.com
Dronningens gate 5-7, Sandefjord, Vestfold, Norway · Org. nr. 937 457 375