Privacy Policy
Last Update 26/04/2024 13.21 (UTC+7).
We at Lokal take your privacy seriously. This Privacy Policy explains how we handle personal information collected from visitors to our website (lokal.so) and potential customers. Throughout this policy, "Lokal Services" or "Services" refer to both the website and any interactions you have with us as a potential customer. However, if you're already a Lokal user with an account, this policy doesn't apply to you; your existing agreement with Lokal governs your data.
This Privacy Policy doesn't cover websites, products, or services that have their own privacy policies.
Information You Provide Directly
When you purchase a plan, LemonSqueezy collect additional information to process the transaction:
- Name, stored on both LemonSqueezy and Lokal Server
- Email Address, stored on both LemonSqueezy and Lokal Server
- Credit Card Information, stored on LemonSqueezy
- Billing Address, stored on LemonSqueezy
Disclaimer: We only collect this information when you choose to purchase a plan. It is used solely for processing your payment and providing you with the purchased services.
Information We Collect Automatically
We automatically gather certain information when you use our services. This includes:
- Device identifiers and information: When you visit our websites, our servers automatically record your IP address and details about your device. This includes device identifiers (Machine ID), device type, operating system, browser, and other software information such as version, language, settings, and configuration.
- Geolocation data: Based on IP Address, we may collect geolocation data when you use our apps or online services.
- Usage data: We track your activity on our landing page. This includes the URL of the site you visited before ours, the pages you view, the time spent on each page, access times, and other details regarding your actions and usage on our site.
How We Use Information
We use device identifiers to authenticate devices and check their license and activation status. The email addresses (user IDs) you provide when upgrading your account are used to reserve addresses for your convenience, address management, and license resets.
Third-Party Services
We utilize several third-party services to enhance and maintain our platform:
- LemonSqueezy: We use Lemon Squeezy for Payment Gateway and Subscription Management. Privacy Policy
- Microsoft Clarity: We use Microsoft Clarity for analytics on our landing page. Privacy Policy
- Sentry: We use Sentry for application monitoring. Privacy Policy
- Cloudflare D1: We use Cloudflare D1 as our database. Privacy Policy
- Cloudflare Pages: We use Cloudflare Pages for hosting. Privacy Policy
- Google Analytics 4 We use Google Analytic for Landing Page Traffic Analytic Privacy Policy
Our Disclosure of Personal Data
We disclose personal data with your consent or as we determine necessary to complete your transactions or provide the services you have requested or authorized. In addition, we disclose each of the categories of personal data described above to the types of third parties described below, for the following business purposes:
- Public information: You may select options available through our services to publicly display and disclose your name and/or username and certain other information, such as your profile, demographic data, content and files, or geolocation data.
- Service providers: We provide personal data to vendors or agents working on our behalf for the purposes described in this Policy. For example, companies we’ve hired to provide customer service support or assist in protecting and securing our systems and services may need access to personal data to provide those functions.
- Financial services & payment processing: When you provide payment data, for example to make a purchase, we will disclose payment and transactional data to banks and other entities as necessary for payment processing, fraud prevention, credit risk reduction, analytics, or other related financial services.
- Affiliates: We may enable access to personal data across our subsidiaries, affiliates, and related companies, for example, where we share common data systems or where access helps us to provide our services and operate our business.
- Corporate transactions: We may disclose personal data as part of a corporate transaction or proceeding such as a merger, financing, acquisition, bankruptcy, dissolution, or a transfer, divestiture, or sale of all or a portion of our business or assets.
- Legal and law enforcement: We will access, disclose, and preserve personal data when we believe that doing so is necessary to comply with applicable law or respond to valid legal process, including from law enforcement or other government agencies.
- Security, safety, and protecting rights: We will disclose personal data if we believe it is necessary to protect our customers and others, for example, to prevent spam or attempts to commit fraud, or to help prevent the loss of life or serious injury of anyone; operate and maintain the security of our services, including to prevent or stop an attack on our computer systems or networks; or protect the rights or property of ourselves or others, including enforcing our agreements, terms, and policies.
- Third-party analytics and advertising companies: These companies, including Google, collect personal data through our website and apps, including identifiers and device information (such as cookie IDs, device IDs, and IP addresses), geolocation data, usage data, and inferences based on and associated with that data, as described in the “Cookies” section of this Policy. These third-party vendors may combine this data across multiple sites to improve analytics for their own purposes and others. For example, we use Google Analytics on our website to help us understand how users interact with our website; you can learn how Google collects and uses information at www.google.com/policies/privacy/partners.
Some of the data disclosures to these third parties may be considered a “sale” or “sharing” of personal information as defined under the laws of California and other U.S. states. Please see the “Choice and Control of Personal Data” and “California Privacy Rights” sections below for more details.
Please note that some of our services also include integrations, references, or links to services provided by third parties whose privacy practices may differ from ours. If you provide personal data to any of those third parties, or allow us to share personal data with them, that data is governed by their privacy statements.
Finally, we may disclose de-identified information in accordance with applicable law.
European Data Protection Rights
If the processing of personal data about you is subject to European Union data protection law, you have certain rights with respect to that data:
- You can request access to, and the rectification or erasure of, personal data.
- If any automated processing of personal data is based on your consent or a contract with you, you have the right to transfer or receive a copy of the personal data in a usable and portable format.
- If the processing of personal data is based on your consent, you can withdraw consent at any time for future processing.
- You can object to, or request a restriction on, the processing of personal data under certain circumstances.
- For residents of France, you can provide us with specific instructions regarding the use of your data after your death.
To make such requests, please use the contact information provided at the bottom of this Policy. If we are processing data on behalf of another party that is the “data controller,” you should direct your request to that party. You also have the right to lodge a complaint with a supervisory authority, but we encourage you to first contact us with any questions or concerns.
We rely on different lawful bases for collecting and processing personal data about you, such as your consent, or as necessary to provide the services you use, operate our business, fulfill our contractual and legal obligations, protect the security of our systems and customers, or satisfy other legitimate interests.
Retention of Personal Data
We retain personal data for as long as necessary to provide the services and fulfill the transactions you have requested, comply with our legal obligations, resolve disputes, enforce our agreements, and other legitimate and lawful business purposes. Retention periods can vary significantly based on criteria such as user expectations or consent, data sensitivity, availability of automated controls that enable users to delete data, and our legal or contractual obligations.
Location of Personal Data
The personal data we collect may be stored and processed in your country or region, or in any other country where we or our affiliates, subsidiaries, or service providers process data. Currently, Storage locations are chosen to operate efficiently and improve performance. We take steps to process and protect data as described in this Policy, regardless of where the data is located.
Security of Personal Data
We take reasonable and appropriate steps to help protect personal data from unauthorized access, use, disclosure, alteration, and destruction.
To safeguard your personal data, please refrain from using illegal or pirated software and ensure that device access is restricted to yourself.
Changes to This Policy
This Policy may be revised from time to time to reflect changes in our services, how we use personal data, or changes in applicable law. If this Policy changes, the revised policy will include a new effective date, and we will notify you of such changes by posting the revised policy on this page. Please be sure to check the Policy whenever you submit personal information or use our website. If we make any material changes to this Policy, we will provide you with additional notice or obtain consent to the extent required by applicable law.
Contacting Us
If you have any questions, complaints, or concerns about how your information is handled, please email us at [email protected].