Privacy Policy

Locko.AI exists to protect your personal information — which means we take the handling of your data seriously. This Privacy Policy explains what we collect, why we collect it, how we use and protect it, and what rights you have.

1. Information We Collect

Information you provide directly

• Account information: Name, email address, and password when you create an account.
• Profile data for scanning: Names, addresses, phone numbers, dates of birth, and other personal identifiers you provide so we can locate your profiles on data broker websites.
• Payment information: Billing details processed through Stripe. We do not store your full credit card number on our servers.
• Communications: Messages you send to our support team or through our contact form.

Information collected automatically

• Usage data: Pages visited, features used, and interactions with the dashboard.
• Device information: Browser type, operating system, and IP address for security and service optimization.
• Cookies: Session cookies for authentication and preference cookies for your dashboard experience. We do not use third-party advertising cookies.

Information generated by the Service

• Evidence artifacts: Before-and-after screenshots, removal request records, broker response data, and timestamps generated during the enforcement process.
• Scan results: Records of which brokers list your data and the status of removal requests.

2. How We Use Your Information

We use the information we collect to:

• Scan data broker websites for your personal information
• Submit removal and opt-out requests to data brokers on your behalf
• Verify the status of removal requests and capture evidence
• Monitor for data reappearance and trigger re-removal workflows
• Generate and store evidence documentation of all enforcement activities
• Provide customer support and respond to your inquiries
• Process payments and manage your subscription
• Improve and optimize the Service
• Comply with legal obligations

3. How We Protect Your Information

We implement industry-standard security measures to protect your personal information:

• Encryption at rest and in transit: All personal data is encrypted using AES-256-GCM envelope encryption. All connections use TLS 1.3.
• Access controls: Strict role-based access to personal data within our systems. Your profile data is tokenized before being processed by our intelligence agents.
• Data minimization: We collect only the information necessary to perform the Service. We do not retain personal data longer than required.
• Infrastructure security: Our systems are hosted on Cloudflare with DDoS protection, WAF, and continuous security monitoring.

4. Information Sharing

We do not sell your personal information. This is foundational to our business — we exist to remove your data from those who do.

We share your information only in these limited circumstances:

• With data brokers: To submit removal requests on your behalf. Only the minimum information necessary to identify and remove your profiles is shared.
• With service providers: Payment processing (Stripe), hosting (Cloudflare), and other essential infrastructure providers under strict data processing agreements.
• When required by law: To comply with valid legal processes, court orders, or governmental requests.
• With your consent: For any purpose you explicitly authorize.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Evidence artifacts are retained for the duration of your subscription to support ongoing monitoring and proof of removal. Upon account deletion:

• Account data is deleted within 30 days
• Evidence artifacts are available for export for 30 days, then permanently deleted
• Anonymized, aggregated data (which cannot identify you) may be retained for service improvement
• Data required by law is retained for the legally mandated period

6. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate personal information
• Deletion: Request deletion of your personal information
• Portability: Request your data in a structured, machine-readable format
• Opt-out: Opt out of any marketing communications at any time

To exercise any of these rights, contact us at privacy@locko.ai or use the privacy tools in your account dashboard.

For California-specific rights under CCPA, see our CCPA Notice.

7. Children's Privacy

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at privacy@locko.ai and we will delete it promptly.

8. International Data Transfers

Your information may be processed in countries other than your country of residence. Where we transfer data internationally, we implement appropriate safeguards including standard contractual clauses and encryption to protect your information in compliance with applicable data protection laws.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to registered users and posted on this page with an updated effective date. Your continued use of the Service after changes constitutes acceptance of the revised policy.

10. Contact Us

For privacy-related questions or to exercise your rights, contact us at:

• Email: privacy@locko.ai
• Web: locko.ai/contact