LexFunis
Sign inGet started — it's free
Legal

Privacy Policy.

How LexFunis collects, uses and protects your personal data.

Last updated: 1 June 2026

LexFunis (“we”, “us”, “our”) is committed to protecting the privacy and personal data of every person who interacts with our platform. This Privacy Policy explains what data we collect, how we use it, and your rights under applicable Indian law — including the Digital Personal Data Protection Act 2023 (DPDP Act).

By creating an account or using LexFunis services, you agree to the collection and use of your data as described in this Policy.

01

Who We Are

LexFunis is an MSME-registered educational technology platform based in India. We offer courses, workshops, and academic content in law and forensic science. Our registered contact email is info@lexfunis.com.

02

Data We Collect

We collect the following categories of personal data:

Account data

Name, email, mobile, password hash, profile photo

Profile data

Occupation, org, designation, city, state, DOB, gender, LinkedIn, bio

Certificate data

Your legal name as entered in your profile

Enrollment data

Course enrollments, payment amounts, Razorpay IDs, status

Learning data

Video watch progress, quiz scores, certificate requests

Technical data

IP address, browser, device info, session data

Communications

Messages sent via email or contact form

03

How We Use Your Data

  • To create and manage your account
  • To enroll you in courses and process payments
  • To generate and issue verifiable digital certificates
  • To track your learning progress and determine certificate eligibility
  • To send you transactional emails (OTPs, enrollment confirmations, certificate notifications)
  • To respond to your enquiries and provide customer support
  • To improve our platform, courses, and user experience
  • To comply with our legal and regulatory obligations

We do not use your data for advertising, do not sell your data to third parties, and do not use your data for any purpose beyond what is described here.

04

Data Sharing

We share your data only with the following service providers who help us operate the platform, under strict data processing agreements:

Supabase / PostgreSQL

Database hosting (data stored in cloud infrastructure)

Razorpay

Payment processing — receives your payment details and transaction data

Resend

Email delivery — processes email addresses and message content

Cloudflare R2

File storage for certificates and profile photos

Vercel

Hosting and serverless infrastructure

We do not share your data with any other third parties, including for marketing purposes.

05

Certificate Verification

Certificate verification pages at lexfunis.com/verify/[certificate-id] are publicly accessible without login. They display only the certificate holder’s name, the course title, and the issue date — no other personal data is shown publicly.

06

Data Retention

We retain your personal data for as long as your account remains active. If you request account deletion, we delete your personal data within 30 days, except where retention is required by law (e.g., payment records for tax compliance) or where data is embedded in issued certificates (which cannot be retracted once distributed).

07

Your Rights Under the DPDP Act 2023

Under the Digital Personal Data Protection Act 2023, you have the right to:

Access the personal data we hold about you
Correct inaccurate personal data
Erase your personal data (subject to legal retention obligations)
Withdraw consent for data processing
Nominate another person to exercise your rights in the event of your death or incapacity

To exercise any of these rights, email info@lexfunis.com with the subject line “Data Rights Request”. We will respond within 30 days.

08

Security

We implement industry-standard security measures including HTTPS encryption, password hashing (bcrypt), HMAC signature verification for payments, and role-based access controls. However, no system is completely secure and we cannot guarantee absolute security of your data.

09

Cookies

LexFunis uses only essential session cookies required for authentication. We do not use advertising cookies, tracking pixels, or third-party analytics cookies. We use Umami, a privacy-first, cookie-free analytics tool, to understand aggregate platform usage.

10

Children’s Privacy

LexFunis is not directed at children under 18. We do not knowingly collect personal data from minors. If you believe a minor has created an account, contact us immediately at info@lexfunis.com.

11

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes by email. The “Last updated” date at the top of this page reflects when the Policy was last revised.

12

Contact

For any privacy-related questions, write to us at info@lexfunis.com.