Privacy Policy

Last updated: October 6, 2026

This policy explains how Zima Enterprises ("Zima", "we", "us"), the company that makes and operates Lexaily, handles personal information collected through this website, lexaily.com, and its forms. For that information, Zima Enterprises is the data controller.

Information we collect

• Information you give us. When you request a demo, we collect your name, work email, company, approximate unit count, and the property-management software you use. When you send a message through our contact page, we collect your name, email, company, and the message itself.
• Technical data. When you submit a form, we store your IP address, browser user-agent, and the referring page with your submission, for security and abuse prevention. Our web server also keeps standard logs of the same kind.
• Spam protection. To keep our forms free of spam, we keep a short-lived count of recent submissions from each connection, filed under a scrambled one-way code made from the IP address rather than the address itself, plus a scrambled fingerprint of each submission so an accidental double send reaches us only once. These records expire within a day and are cleared out as the forms are used. Submissions that only an automated program would send (one that fills in a hidden field people never see) are kept in a separate, size-limited log instead of being sent to our team, and the oldest entries are deleted automatically as it fills. Every other message reaches our team and is stored like any other inquiry. If our filter thinks a message may be spam, it is labeled that way for review, not discarded.

Cookies

This site sets one cookie, and only where there is a form: on the homepage, the Clients page, and the Contact page, and when a form is sent. It is a session cookie named PHPSESSID that protects our forms against forged and automated submissions. It holds a random identifier and no personal information, it is strictly necessary for the forms to work, and your browser deletes it when you close it. Other pages set no cookies.

We use no analytics, advertising, or tracking cookies, and this site loads no third-party scripts. Our fonts are served from our own server, so viewing a page does not send your IP address to a font provider.

How we use it

• To reply to your demo request or message, and answer your questions.
• To understand which businesses are interested so we can tailor the walkthrough.
• To protect the site against spam and abuse.

Data processing & the Lexaily product

Vacation rental operators ("customers") use Lexaily to capture and follow up with their own guests. Lexaily runs two ways, and guest data is stored differently in each:

• WordPress plugin. Leads, guest profiles, and booking funnel data captured on a customer's WordPress site are stored in that customer's own WordPress database, on the customer's hosting.
• Standalone sites. On a standalone site that we build and host for a customer, the details guests submit (such as name, email, phone, dates, and the home they asked about) and a record of each booking hand-off to the customer's own booking engine are stored on Lexaily's service, which we operate, on the customer's behalf. They belong to the customer, who can view and export them in their Lexaily portal.

The Lexaily scripts on a customer's site also keep a few first-party values in the guest's browser, and they differ by mode. On the WordPress plugin, a visitor ID cookie (lx_vid, 90 days) and a session ID kept in the browser's session storage group one visitor's searches, property views, and quotes in the customer's WordPress database. On a standalone site, an lx_vid cookie is also set, but no browsing is recorded. When a guest clicks Book there, a separate cookie (lx_v, one year) lets us count unique visitors among hand-offs, and only a one-way hash of it is stored on Lexaily's service. On both, a guest's saved favorites are kept in a cookie (lxFavorites, 30 days).

The customer is the data controller for its guests' data. Where we handle that data on a customer's behalf, we act as a processor, under the customer's instructions and any data processing agreement we sign with them. Guests with questions about their data should contact the operator they booked with.

Sharing

We do not sell personal data. We share it only with service providers that help us run this site and the product, such as our hosting and email delivery providers, and where the law requires it.

Retention

We keep demo requests and contact messages for as long as needed to follow up and for our legitimate business records, then delete or anonymize them.

Your rights

Depending on your location, you may have rights to access, correct, or delete your personal data. To exercise them, reach us through our contact page.

Contact

Questions about this policy? Send us a message through our contact page and we'll respond within two business days.