Terms of Service (International)

Service Domain: lexaris.ru
Operator: Lexaris (IE Kudryavtsev S.A.)

This document is dynamically generated based on settings configured by the Operator in the Platform Admin Panel. Placeholder values in brackets represent current settings populated at runtime.

---

1. Service Description

1.1. Platform Overview. Lexaris (the "Platform", "Service") is a cloud-based Software-as-a-Service (SaaS) platform for automated detection and anonymization of Personally Identifiable Information (PII) in documents. Users upload documents containing personal data; the Service detects PII using a multi-layer pipeline comprising optical character recognition (OCR), regular expression matching, Named Entity Recognition (NER) models, and optionally Large Language Model (LLM) inference — then replaces identified PII with structured placeholder tokens.

1.2. Core Capabilities. The Service provides:

• Automated PII detection across 13+ entity categories (names, addresses, tax identifiers, phone numbers, email addresses, dates, financial account numbers, and others);
• Token-based anonymization producing a replaceable-token mapping table;
• Reversible de-anonymization using the token mapping table within the configured session retention period;
• OCR processing of scanned documents and image-format files (JPG, PNG, TIFF, PDF);
• Programmatic API access for integration with user systems;
• Telegram bot interface (@anondocbot) for document submission via Telegram.

1.3. Operator Identity. The Platform is operated by Lexaris (IE Kudryavtsev S.A.), registered at Saint-Petersburg, Russia, registration number OGRNIP 324784700000012, country of incorporation Russian Federation (the "Operator", "we", "us"). For data protection inquiries, contact: privacy@lexaris.ru. General contact: info@lexaris.ru.

1.4. Nature of Service. The Platform is a technical processing tool, not a legal service, compliance consultancy, or data protection advisory service. The Operator is not a legal adviser, data protection authority, or representative of the User.

---

2. User Obligations and Representations

2.1. Legal Basis for Processing. By uploading any document to the Platform, the User warrants and represents that:

2.1.1. The User holds a lawful legal basis, as required by applicable data protection law (including but not limited to GDPR Article 6), to process the personal data contained in each uploaded document. Acceptable legal bases include: the performance of a contract to which the data subject is party (Art. 6(1)(b)); compliance with a legal obligation (Art. 6(1)(c)); the legitimate interests of the controller or a third party (Art. 6(1)(f)); or explicit consent of the data subject (Art. 6(1)(a));

2.1.2. The User is the data controller within the meaning of GDPR Article 4(7) (or the equivalent concept under applicable local law) for all personal data contained in uploaded documents. The Operator acts as a data processor on the User's behalf, processing document content solely to deliver the anonymization service as instructed by the User;

2.1.3. The User has conducted any required Data Protection Impact Assessment (DPIA) or equivalent risk assessment under applicable law before uploading documents containing special categories of personal data or large-scale processing of personal data;

2.1.4. The User is responsible for verifying the quality and completeness of the anonymization output before using or distributing anonymized documents. The Operator's automated processing constitutes a draft output requiring human review. The User must not treat anonymization output as legally certified or complete without conducting their own review.

2.2. Account Eligibility. The User represents that they are at least 18 years of age (or the age of majority in their jurisdiction, whichever is higher), legally capable of entering into binding contracts, and not prohibited from receiving the Service under applicable law.

2.3. Accuracy of Information. The User warrants that all registration information provided is accurate and current, and will be updated promptly upon change.

2.4. Account Security. The User is solely responsible for maintaining the confidentiality of their account credentials and API keys, and for all actions taken under their account.

---

3. Prohibited Uses

3.1. Absolute Prohibitions. The following uses of the Service are strictly prohibited under any circumstances:

3.1.1. Concealment of criminal evidence — using the anonymization functionality to alter, obscure, or sanitize documents for the purpose of concealing evidence of criminal conduct, evading law enforcement investigations, or obstructing justice;

3.1.2. Children's data without parental consent — processing personal data of children under the age of 16 (or such higher threshold as required by applicable local law) without verified parental or guardian consent as required by applicable data protection law, including GDPR Article 8 and equivalent provisions;

3.1.3. Malware and executable code — uploading files containing malicious code, viruses, trojan horses, ransomware, spyware, or any other form of harmful software, regardless of whether PII anonymization is the stated intent;

3.1.4. Bulk automated abuse — submitting bulk automated upload requests that exceed published rate limits, using scripts or bots to circumvent usage controls, creating multiple accounts to aggregate free-tier allowances, or otherwise undermining the fair use of shared infrastructure;

3.1.5. Reverse engineering — attempting to reverse-engineer, decompile, disassemble, extract, or replicate the detection pipeline, NER models, token-mapping algorithms, or any other proprietary component of the Platform, whether through systematic probing, timing attacks, or any other method;

3.1.6. Unauthorised data — uploading documents containing personal data for which the User has no lawful authority to process, including stolen datasets, databases obtained unlawfully, or data subject to court-imposed processing restrictions;

3.1.7. Child sexual abuse material (CSAM) — uploading any content depicting or describing the sexual abuse or exploitation of minors;

3.1.8. Terrorism and extremism — uploading content that promotes, glorifies, or facilitates acts of terrorism, violent extremism, or incitement to hatred on the basis of race, religion, ethnicity, gender, sexual orientation, disability, or similar grounds;

3.1.9. Fraud facilitation — using the Platform to process documents for the purpose of facilitating financial fraud, identity theft, or forgery.

3.2. Consequences. Violations of Section 3.1 may result in immediate account suspension or termination without refund, preservation of evidence for disclosure to law enforcement, and civil liability for damages caused to the Operator or third parties.

---

4. Intellectual Property

4.1. Operator's Intellectual Property. All rights, title, and interest in and to the Platform — including software, detection algorithms, NER models, token-mapping logic, databases, user interface design, logos, trademarks, trade names, and documentation — are and remain the exclusive property of the Operator or its licensors. Nothing in these Terms transfers any ownership right in the Platform to the User.

4.2. User's Rights to Content. The User retains all rights, title, and interest in and to documents uploaded to the Platform and in the anonymized output produced by the Service. The Operator acquires no ownership rights in User content by virtue of processing it.

4.3. Limited Processing Licence. By uploading a document, the User grants the Operator a limited, non-exclusive, royalty-free licence to process that document solely for the purpose of providing the anonymization service. This licence terminates automatically when the document is deleted or the session retention period expires.

4.4. No Training on User Data. The Operator shall not use the content of User-uploaded documents to train, fine-tune, or evaluate machine learning models without the User's explicit prior written consent.

4.5. Feedback. If the User provides feedback, bug reports, or feature suggestions, the Operator may use such information to improve the Service without obligation or compensation to the User.

---

5. Limitation of Liability

5.1. "As Is" Disclaimer — Anonymization Accuracy. The Service and its anonymization output are provided "as is" and "as available". The Operator makes no warranty, express or implied, regarding the completeness, accuracy, fitness for a particular purpose, or legal sufficiency of anonymization results. Automated detection may miss PII, particularly in non-standard document formats, handwritten text, complex table structures, low-resolution scans, or text in unsupported languages.

5.2. User's Responsibility to Verify. The Operator is not liable for any loss, damage, regulatory penalty, or legal consequence arising from the User's reliance on unverified anonymization output. The User bears sole responsibility for reviewing and approving anonymized documents before use.

5.3. No Indirect Liability. To the maximum extent permitted by applicable law, the Operator shall not be liable for any indirect, incidental, consequential, punitive, or exemplary damages, including but not limited to lost profits, loss of data, reputational harm, or regulatory fines, arising out of or in connection with the Service or these Terms, even if the Operator has been advised of the possibility of such damages.

5.4. Liability Cap. The Operator's total aggregate liability to the User for all claims arising under or in connection with these Terms in any rolling twelve (12) month period shall not exceed the total subscription fees actually paid by the User to the Operator during those twelve months. For free-tier users, the Operator's total liability is capped at EUR 50.

5.5. Exceptions. Nothing in these Terms limits the Operator's liability for death or personal injury caused by negligence, fraudulent misrepresentation, or any other liability that cannot be limited or excluded by applicable law.

---

6. Data Processing

6.1. Reference to Privacy Policy. The collection, use, retention, and protection of personal data in connection with the Service is governed by the Lexaris GDPR Privacy Policy, available at lexaris.ru/gdpr-privacy-policy, which is incorporated into these Terms by reference.

6.2. Session-Based Processing. Documents uploaded to the Platform are processed within a user-configured session. Session retention periods are:

6.3. No Human Review. The Operator does not access, read, or review the content of documents uploaded by Users for any purpose other than automated PII detection and replacement. There is no human review of document content.

6.4. Data Deletion. Upon expiry of the configured session retention period, all uploaded documents, anonymization outputs, and token mapping tables are permanently and irreversibly deleted from the Operator's systems. The User is responsible for exporting required data before session expiry.

6.5. Data Controller / Processor Relationship. For personal data contained in uploaded documents: the User is the data controller; the Operator is a data processor acting on the User's instructions. The Operator processes such data solely to deliver the anonymization service and does not use it for any other purpose. Organisations requiring a formal Data Processing Agreement (DPA) under GDPR Article 28 should contact info@lexaris.ru.

---

7. Subscription and Payment

7.1. Freemium Model. The Service is offered under a freemium model. Free-tier access is available subject to monthly document and processing limits. Paid subscription tiers provide expanded limits, extended retention periods, and additional features as described at lexaris.ru/pricing.

7.2. Payment Providers. Paid subscriptions are processed through:

• Paddle (international bank card and regional payment methods): Paddle acts as Merchant of Record for international transactions;
• NOWPayments (cryptocurrency): supported crypto currencies listed at lexaris.ru/pricing.

7.3. Auto-Renewal. Paid subscriptions renew automatically at the end of each billing period unless cancelled by the User prior to the renewal date. The User will be notified of the upcoming renewal at least 7 days in advance.

7.4. Cancellation. The User may cancel their subscription at any time through their account settings or by contacting info@lexaris.ru. Cancellation takes effect at the end of the current billing period. No partial refunds are issued for unused time within a paid period except as required by applicable consumer protection law.

7.5. Right of Withdrawal. Where required by applicable law (including EU Directive 2011/83/EU on consumer rights), the User may have a statutory right of withdrawal from a subscription contract within 14 days of purchase, provided that the User has not commenced use of the paid features. Exercising the right of withdrawal is subject to applicable statutory provisions.

7.6. Price Changes. The Operator reserves the right to change subscription pricing. Users will be notified of price changes at least 30 days before they take effect. Continued use after the effective date of a price change constitutes acceptance.

---

8. Account Termination

8.1. Termination by User. The User may terminate their account at any time through account settings or by contacting info@lexaris.ru. Upon termination, all User data (documents, token mapping tables, account information) will be deleted in accordance with the applicable retention schedule stated in the Privacy Policy.

8.2. Termination by Operator. The Operator may suspend or terminate a User's account, with or without prior notice, in the following circumstances:

8.2.1. For cause (with notice where practicable): material breach of these Terms, including violations of Section 3 (Prohibited Uses); fraudulent conduct; persistent non-payment of subscription fees; uploading content that creates legal or security risk to the Platform or third parties;

8.2.2. With 30 days notice: discontinuation of the Service or a material change to the Service that fundamentally alters its nature;

8.2.3. Immediately and without notice: upload of CSAM, terrorist content, or other content mandated for immediate removal by law or court order.

8.3. Effect of Termination. Upon termination for any reason: the User's right to access the Service ceases immediately; all User data will be deleted in accordance with the Privacy Policy retention schedule; outstanding payment obligations survive termination; provisions that by their nature should survive termination (intellectual property, limitation of liability, governing law) remain in full force.

---

9. Governing Law and Dispute Resolution

9.1. Governing Law. These Terms and any dispute or claim arising out of or in connection with them (including non-contractual disputes) are governed by and construed in accordance with the laws of Russian Federation and the jurisdiction in which Lexaris (IE Kudryavtsev S.A.) is established, without regard to conflict of law principles.

9.2. Pre-Dispute Resolution. Before commencing formal proceedings, the parties agree to attempt to resolve disputes informally by notifying the other party in writing at info@lexaris.ru and allowing 30 days for resolution.

9.3. Arbitration. If informal resolution fails, disputes shall be referred to and finally resolved by binding arbitration in accordance with the arbitration rules of a recognised arbitration institution agreed upon by the parties, or — in the absence of agreement — by arbitration under UNCITRAL Arbitration Rules. The seat of arbitration and the language of proceedings shall be as agreed by the parties, or as determined by the arbitral tribunal. The arbitral award shall be final and binding on both parties.

9.4. Consumer Rights. Nothing in Section 9.3 limits any statutory rights a consumer User may have under the mandatory consumer protection laws of their country of residence, including the right to bring proceedings in the courts of that country.

---

10. Amendments to These Terms

10.1. Notice of Material Changes. The Operator may amend these Terms at any time. For material changes — including changes to pricing, data processing practices, liability limitations, or dispute resolution — the Operator will provide at least 30 days' advance notice by:

• Posting the updated Terms at lexaris.ru/user-agreement-en with a revised version date;
• Sending email notification to the User's registered email address;
• Displaying an in-platform notification upon login.

10.2. Acceptance by Continued Use. Continued use of the Service after the effective date of any amendment constitutes the User's acceptance of the revised Terms.

10.3. Right to Terminate. If the User does not accept the amended Terms, they may terminate their account before the effective date of the change without penalty. Prepaid subscription fees for unused periods beyond the termination date will be refunded on a pro-rata basis if required by applicable law.

10.4. Minor Changes. Corrections of typographical errors, updates to contact details, or changes that do not materially affect User rights may be made without advance notice.

---

11. General Provisions

11.1. Severability. If any provision of these Terms is held to be invalid, illegal, or unenforceable by a court or arbitral tribunal of competent jurisdiction, that provision shall be modified to the minimum extent necessary to make it enforceable, or severed if modification is not possible. The remaining provisions shall continue in full force and effect.

11.2. Entire Agreement. These Terms, together with the Privacy Policy, Acceptable Use Policy, and any additional policies referenced herein, constitute the entire agreement between the User and the Operator with respect to the Service and supersede all prior agreements, representations, or understandings, whether written or oral, relating to the same subject matter.

11.3. Assignment. The User may not assign, transfer, or sub-licence any rights or obligations under these Terms without the Operator's prior written consent. The Operator may assign these Terms, in whole or in part, to an affiliate or in connection with a merger, acquisition, or sale of all or substantially all of the Operator's assets, provided that the assignee assumes all obligations under these Terms.

11.4. Waiver. Failure by either party to enforce any provision of these Terms shall not constitute a waiver of the right to enforce that provision or any other provision in the future.

11.5. No Third-Party Beneficiaries. These Terms do not confer any rights or remedies on any third party.

11.6. Force Majeure. Neither party shall be liable for failure or delay in performance caused by circumstances beyond their reasonable control, including natural disasters, acts of government, infrastructure failures, or denial-of-service attacks.

---

12. Contact

For any questions regarding these Terms of Service, please contact:

Lexaris (IE Kudryavtsev S.A.)
Address: Saint-Petersburg, Russia
Registration: OGRNIP 324784700000012, Russian Federation

General enquiries and support: info@lexaris.ru
Data protection and privacy: privacy@lexaris.ru
Security disclosures: info@lexaris.ru

Website: lexaris.ru

---

These Terms of Service take effect on the date stated at the top of this document. Previous versions are available upon written request to info@lexaris.ru.