Legal
Last updated 8 September 2026.
This describes what this website and Lexoro's advertising tooling actually collect. If something here stops being true, this page changes.Lexoro is a digital infrastructure studio. This policy covers two things: the website at www.lexoro.studio, and the Meta app Lexoro operates to run advertising for its clients (lexoro-ads-sync, App ID 2266034044156283).
It does not cover the systems we build and operate inside a client's own business. Those are governed by our agreement with that client.
This site has no accounts, no login, and no database of visitors. There are four places information reaches us.
On the contact page the form takes your name, email address, business name (optional) and message. Submitting it sends those four fields to Formspree, a third-party form service, which forwards them to Lexoro by email. Nothing is stored on this site.
The calendar on the contact page does not collect anything itself. Picking a date and time opens Calendly in a new tab with your choice pre-filled. Whatever you enter there goes to Calendly and reaches us as a booking, under Calendly's own privacy policy.
The homepage has a tool that scores a website. When you run it:
The tool asks for a website address, not personal details — but if the site you enter identifies you, that address is what gets sent and emailed as described above.
Lexoro also generates these reports for businesses we are contacting directly. In that case the report is built from a first name, company, city and state we already hold for that business, plus the public scan of its website. If you received one and want the underlying record deleted, email us and it will be.
The audit and email endpoints read the requesting IP address to limit how often they can be called. It is held in the running server's memory for ten minutes and written to no database. Vercel, which hosts this site, logs ordinary request metadata as part of serving it.
Every page loads Google Analytics 4 (measurement ID G-JYWD9QDDKN). It records page views and how the site is used, sets cookies in your browser, and sends that data to Google under Google's terms. A browser setting, a content blocker, or Google's own opt-out add-on will stop it.
That is the only tracking on this site. There is no advertising pixel, no retargeting tag, no session recording, and no third-party tracker other than the services named in this policy. The site does not store anything in your browser beyond those analytics cookies.
Lexoro operates a Meta app called lexoro-ads-sync (App ID 2266034044156283). We use it to build, monitor and report on Meta ad campaigns for clients whose advertising we manage.
It is not a consumer product. Nobody signs up for it, logs into it, or installs it. This app has no end users other than Lexoro staff, working on accounts our clients have asked us to work on.
Access comes from the client. The app reads data only for ad accounts and Pages a client has authorised Lexoro on, and only for as long as that authorisation stands.
What it accesses, for those authorised accounts only:
What it does with it. Builds and updates campaigns in those same client accounts, watches them for problems, and reports performance back to the client whose accounts they are. Nothing else.
What it does not do. This data is not sold. It is not shared with third parties for their own use. It is not used to build audiences or profiles for anyone else, and it is not used for any purpose beyond running that client's own campaigns.
Where it is held. Campaign and performance data retrieved from Meta is synced daily into Airtable, which Lexoro uses as its working record. Automated spend and delivery alerts are sent to Lexoro by email (via Resend) and by text message. Campaign notes and results are also kept in a private, access-controlled repository hosted on GitHub. These are Lexoro's own working systems; the data is not sold, published, or shared with anyone outside Lexoro and the client it belongs to.
Access and deletion. A client can ask what the app has accessed for their accounts and ask for it to be deleted — email information@lexoro.studio and we will act on it. Removing Lexoro's access in Meta Business Manager cuts the app off immediately.
We do not sell personal information, and nothing here feeds an automated decision about anyone.
These are the services involved, and the only reason each one sees anything:
Each gets only what it needs to do that job. We do not share personal information for anyone else's marketing.
Contact form messages and audit report requests arrive as email and stay in Lexoro's mailbox until we delete them. We have not set a fixed deletion schedule for them, and we would rather say so than invent one. Formspree and Resend keep their own copies under their own policies.
Rate-limiting IP data lives in server memory for ten minutes and is never written down. Ask us to delete anything you have sent us and we will.
Email information@lexoro.studio. Tell us what you sent us and we will tell you what we still hold, correct it, or delete it. This is a small studio — a person reads that inbox.
For advertising data, requests come from the client who owns the ad account. See section 04.
If what we collect changes, this page changes with it and the date at the top moves. There is no mailing list to notify.