LexiFlow ยท Templates and documents
Security and document data handling
Document generation runs on the server. Your templates and values must be readable by the application to produce files. The service is not end-to-end encrypted.
HTTPS and access control
The public service uses HTTPS. The application sends HSTS and security headers, hashes account passwords, protects browser forms with CSRF tokens and checks resource ownership in application controllers. API access uses bearer keys.
Storage and deletion
Uploaded templates and generated files are stored on the application server, with document records in PostgreSQL. Document deletion uses soft-deleted database records; file cleanup is a separate process. Do not assume that deleting a record immediately erases every file or backup.
Encryption and infrastructure
The document generation code reads and writes DOCX/PDF files on the server. Application code alone does not establish encryption of server disks, database storage or backups. Contact us for infrastructure and retention details before uploading data with specific requirements.
Payments and optional AI
Paddle handles payment checkout. AI tools use an OpenAI integration for selected tasks, so content involved in an AI action may be sent to that provider. Placeholder replacement itself does not require an AI call.
Analytics and technical logs
Optional Google Analytics requires an explicit analytics choice in the website controls. Acquisition events use fixed event names and public page categories, not document contents, CSV rows, names or email addresses. Technical and audit logs are separate and can include account activity and IP addresses.
Frequently asked questions
Are documents end-to-end encrypted?
No. The server processes readable templates and data to generate your documents. HTTPS protects transport; it does not make this an end-to-end encrypted architecture.
Where are the servers and backups located?
A verified region and infrastructure inventory is not available in the application code. Ask support for the current details; we do not claim exclusive EU storage.