Privacy Policy

Lexcode Inc. (“Lexcode,” “we,” “us,” or “our”) is the personal information controller for KabayanXpress. We determine why and how personal information is used to provide the service.

Representative: Young Ham | Business Registration No. 214-88-17490 | Mail-order Business Registration No. 2007-Seoul Seocho-10795

• Contact and identity data: name, email address, phone number, and delivery or pickup details.
• Request data: source and target languages, document type, instructions, purpose, requesting office, and notarization choices.
• Document data: source files, translated files, filenames, previews, page counts, file metadata, and classification results.
• Transaction data: control number, order items, price, currency, discounts, invoices, payment status, Eximbay transaction references, cancellations, and refunds.
• Referral and support data: voucher activity, referral details, messages, complaints, and records of assistance.
• Technical data: IP address, browser and device information, access time, diagnostic events, security signals, and service usage.

We receive information directly when you upload a document, complete a request, contact support, use a referral code, or pay. We also generate request, classification, delivery, security, and activity records as the service operates. Payment providers send us limited transaction and status information needed to confirm, reconcile, cancel, or refund a payment.

• Quote, create, classify, translate, review, certify, notarize, deliver, and track requests.
• Calculate server-authoritative prices, process payments, issue invoices, apply vouchers, and administer refunds.
• Send confirmations, payment notices, completion messages, expiry reminders, cancellation notices, and service support.
• Prevent fraud and abuse, protect accounts and files, diagnose errors, and keep the service reliable.
• Meet tax, accounting, electronic-commerce, dispute-resolution, and other legal duties.
• Measure and improve the website where analytics or advertising technologies are enabled as permitted by law.

Cloudflare Workers receives website and API requests. D1 is the system of record for customer, request, invoice, payment-status, voucher, notification, and related application data. R2 stores documents uploaded after the Cloudflare cutover and generated service files. Public blog content is projected to Workers KV; customer request documents are not placed in that public content cache.

Workers AI may receive document content to classify the document and route the translation service. According to Cloudflare’s Workers AI data-usage documentation, customer content is not used to train its available AI models or improve Cloudflare or third-party services without explicit consent. Cloudflare Email Sending delivers transactional messages. Queues and Cron Triggers support background and scheduled work, while Durable Objects support live status notifications.

We send Eximbay the buyer name, email address, optional phone number, order identifier, amount, currency, return and payment-status URLs, and transaction context needed to provide payment service. Eximbay and the selected card company, bank, wallet, or other payment partner process the payment credentials and may collect IP address, authentication, fraud-prevention, and transaction data under their own policies.

KabayanXpress verifies Eximbay’s server-to-server payment status before marking a request paid. We retain the payment reference and outcome needed for fulfillment, accounting, support, cancellation, and refunds, but we do not store your full payment-card number in D1 or R2. Eximbay describes its own handling in its privacy policy.

We disclose only the information reasonably needed for the following recipients and purposes:

• Cloudflare: hosting, storage, networking, AI classification, email delivery, security, and operational processing.
• Eximbay and payment participants: authorization, settlement, fraud prevention, payment support, cancellation, and refunds.
• Translation and fulfillment personnel: translation, review, certification, notarization coordination, customer support, and service delivery.
• Courier or pickup partners: name, contact, address, and delivery details when a hard copy is requested.
• Google and Meta: website measurement and advertising events when production analytics or pixel features are active.
• Authorities or professional advisers: where disclosure is required by law or reasonably necessary to establish, exercise, or defend legal claims.

We do not sell source documents or translated documents as a data product.

KabayanXpress serves customers across borders. Cloudflare, Eximbay payment participants, Google, Meta, and other providers may process information in Korea, the Philippines, the United States, or other countries where they operate infrastructure or payment networks. Protections may differ by location. We use contractual, technical, and organizational safeguards and provide any notice or obtain any consent required for an international transfer under applicable law.

We keep personal information only as long as needed for the purposes above, then delete or de-identify it unless a longer period is required by law. Under Korean electronic-commerce rules, relevant contract and cancellation records and payment and supply records are generally retained for 5 years; consumer complaint and dispute records for 3 years; and display or advertising records for 6 months.

The migration from the legacy system preserved historical database paths and file metadata for recordkeeping but did not copy the referenced historical S3 objects into R2. If an old record points to an unavailable object, the service treats that as an expected legacy condition and explains that the source file was not included in the migration. Files uploaded after cutover are stored in R2 under the current service lifecycle.

The website uses browser storage, including local storage and IndexedDB, to preserve your cart, hold uploaded files locally while you move through checkout, remember referral information, and maintain interface state. Clearing site data removes those local copies and may require you to re-upload files.

In production, Google Analytics, Google conversion measurement, and the Meta Pixel may receive identifiers, device or browser information, page activity, and conversion events. You can use browser controls and any consent controls made available on the site to manage non-essential storage and tracking.

We use access controls, encrypted network transport, secret-bound service credentials, audit-oriented records, and provider security controls designed to protect information. No internet or storage system can be guaranteed completely secure. Please keep your control number and request access details private and contact us if you believe someone has accessed them without permission.

Subject to applicable law, you may ask whether we process your information and request access, correction, deletion, suspension of processing, withdrawal of consent, or an explanation of relevant handling. You may also object to or limit certain processing where the law provides that right.

Send a request using the contact details above. We may verify your identity and authority before acting. A deletion request may not cover records we must retain for legal compliance, payment, fraud prevention, or an ongoing dispute; such records will be restricted to those purposes where required.

KabayanXpress is not directed to children under 14. A parent or legal guardian should contact us if they believe a child provided personal information without the consent required by law.

We may update this Policy as the service, providers, or law changes. The effective date identifies the current version. We will provide additional notice of a material change when required.