Privacy

Privacy Policy

Last updated: 18 April 2026.

Who we are

euaiactnyc is a trade name operated by Lexara Advisory LLC ("we", "us"), a Wyoming limited liability company with mailing address at 30 N Gould St, Ste N, Sheridan WY 82801, United States. Contact: advisory@lexaraadvisory.com.

Information we collect

We collect three categories of information:

1. Analytics data (Google Analytics 4)

When you accept analytics cookies through our banner, Google Analytics 4 collects standard web analytics data — page views, referrer, device type, approximate geographic location derived from IP address, and interactions with site elements. Our GA4 property uses Consent Mode v2: until you accept, GA4 runs in denied mode and does not set cookies. Analytics data is stored by Google under their terms.

2. Chatbot conversations

Our site includes an AI assistant powered by Anthropic's Claude API. When you interact with the chatbot, your messages are sent to the Claude API for processing and a truncated version of each question and response (up to 300 characters each) is logged on our server for service improvement and security monitoring. Conversations are associated with an approximate geographic location derived from IP address. We do not deliberately collect identifying information through the chatbot — please do not share confidential, personal, or sensitive data in chat. The chatbot is not a secure channel.

3. Contact and audit engagement data

When you email us or submit an engagement inquiry, we collect your name, company, email, phone (if provided), and the content of your communication. If we enter an audit engagement, we collect the data required to perform the audit under DCWP Final Rules — including AEDT metadata, output data, and protected-category counts relevant to bias statistics. Audit engagement data is handled under a separate confidentiality agreement.

Legal basis (GDPR) and purpose

We process analytics data based on your consent (GDPR Art. 6(1)(a)). We process contact and engagement data based on the legitimate interest of responding to your inquiry and, where applicable, contract performance (GDPR Art. 6(1)(b)). Chatbot conversations are processed on the basis of consent implied by your voluntary interaction with the widget and our legitimate interest in maintaining and improving the service.

Processors and sub-processors

International data transfers

Data processed by the processors above may be transferred to the United States and other jurisdictions. Cross-border transfers from the EU/UK are covered by applicable transfer mechanisms operated by the processors (Standard Contractual Clauses, adequacy decisions where available, or Data Privacy Framework where applicable).

Retention

Analytics data: retained according to your GA4 property settings (default 2 months to 14 months). Chatbot log: up to 12 months. Contact and engagement data: duration of the engagement plus the period required by professional and tax recordkeeping obligations.

Your rights

Subject to applicable law (GDPR for EU/UK residents; CCPA/CPRA for California residents; and others), you have rights of access, rectification, erasure, restriction, portability, and objection regarding personal data we hold about you. To exercise these rights contact advisory@lexaraadvisory.com. You may also lodge a complaint with your national data protection authority.

Cookies

We use a minimal set of cookies. Strictly necessary cookies (consent preference storage in localStorage) are always active. Analytics cookies (GA4: _ga, _ga_<GA_ID>) only activate after you accept. We do not use advertising or tracking cookies.

Changes to this policy

We may update this policy from time to time. Material changes will be notified via a banner on the site. The "Last updated" date above reflects the most recent change.

Not legal advice

This privacy policy describes our practices. It is not legal advice and does not create an attorney-client relationship.