Security
People upload passports, contracts and unpublished books to LexaOCR. Here is how we protect them.
Last updated 14 October 2026
| Encryption | HTTPS for everything in transit; documents and databases encrypted at rest. |
|---|---|
| Access | Each document is visible only to the account that uploaded it. Image and file links are signed and expire. Staff access is limited and used only for support you ask for, or when security or the law requires it. |
| Where data is stored | India (Mumbai region). AI processing partners may process pages in the EU and other regions; they may not train on your content. |
| Retention | Deleted automatically 30 days after upload. You can delete a document and all its files at any time from My documents. |
| Deletion | Deleting removes the original, page images, text, corrections, Word files and audio. |
| Sign-in | One Lexa account shared with LexaTranslate, with Google sign-in or email and password. |
| Reliability | Long books run on the server and are saved page by page, so an interrupted run continues where it stopped. |
Reporting a security issue
If you find a vulnerability, email hello@arabianailab.com with the subject “Security”. Please give us reasonable time to fix it before disclosing it. We do not take action against good-faith research.
More
Read the privacy policy and the terms of service.