Last updated June 28, 2026

CCPA Notice

1. Who This Applies To

This notice applies to California residents and is required under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).

2. Your CCPA/CPRA Rights

As a California resident, you have the following privacy rights:

Right to Know (CCPA § 1798.100)

You may request what personal information we collect, use, and share about you.

Right to Delete (CCPA § 1798.105)

You may request deletion of personal information we have collected about you, except where we must retain it by law.

Right to Opt-Out of Sale of Personal Information (CCPA § 1798.120)

You may opt out of the sale or sharing of your personal information for cross-context behavioral advertising.
Transparency: We do not sell your personal information to marketers or data brokers. We do not engage in cross-context behavioral advertising.

Right to Correct (CPRA § 1798.100(d))

You may request correction of inaccurate personal information.

Right to Data Portability (CPRA § 1798.100(d))

You may request your personal information in a portable, machine-readable format.

Right to Limit Use (CPRA § 1798.121)

You may limit our use of your sensitive personal information to providing the Service you requested.

Right to Opt-Out of Automated Decision-Making (CPRA § 1798.132)

You may opt out of decisions made solely by automated means that produce legal or similarly significant effects about you.

Right to Non-Discrimination (CCPA § 1798.125)

We will not discriminate against you for exercising your CCPA rights by denying goods or services, charging different prices, or providing lower-quality service.

3. How to Exercise Your Rights

To submit a request under CCPA/CPRA, contact us:

  • Email: privacy@lokly.in
  • In-App: Settings → Privacy & Security → Data Subject Request
  • Mail: 484 Near HP Petrol Pump, Kishanganj, District Baran, Rajasthan, India — PIN 325216

Include your name, email, account ID, and a clear description of your request (e.g., “Right to Know”). We will verify your identity and respond within 45 days (or 90 days for complex requests).

Authorized Agent:You may designate an authorized agent to submit requests on your behalf. We will verify the agent’s authority.

4. Categories of Personal Information Collected

We collect the following categories of personal information:

  • Identifiers: Name, email, phone number, address
  • Commercial information: Subscription plan, billing history, payment method (tokenized)
  • Internet activity: Browser type, IP address, pages visited, clicks, time spent
  • Location data: Inferred from IP address
  • Professional information: Business name, title, industry
  • Inferences: Preferences, interests, profile characteristics (generated from usage)
  • Sensitive personal information: Password (hashed)

5. Purposes of Collection & Use

We collect and use your personal information for:

  • Providing and improving the Service
  • Customer service and support
  • Fraud prevention and security
  • Targeted advertising and personalization
  • Legal compliance and dispute resolution
  • Analytics and research (with consent for California residents)

6. Sharing of Personal Information

We share personal information with the following categories of recipients:

  • Service providers: Supabase, Razorpay, Stripe, Resend, Google, Vercel (see Sub-processors)
  • Law enforcement: When required by law or court order
  • Business partners: With your consent

We do not sell or share personal information for cross-context behavioral advertising.

7. Sensitive Personal Information

Under CPRA, we collect the following sensitive personal information:

  • Password: Hashed and stored securely

We use sensitive information only to provide the Service and ensure security. We do not use it for marketing, profiling, or other purposes unless you consent.

8. Data Retention

We retain personal information as follows:

  • Account data: While your account is active, plus 6 months after deletion
  • Transaction data: 7 years (required by law)
  • Usage data: 24 months for analytics

You may request deletion at any time, subject to legal retention obligations.

9. Cookies & Analytics

For California residents, we obtain explicit consent before setting analytics cookies. You can manage your preferences:

  • Cookie banner: Accept or reject non-essential cookies on first visit
  • Settings: Change preferences in Settings → Privacy & Cookies
  • Do Not Track (DNT): We honor DNT signals for analytics cookies

See our Cookie Policy for details.

10. Automated Decision-Making

We do not use automated decision-making to make decisions about you that produce legal or similarly significant effects (e.g., account suspension, pricing changes) without human review.

You may request to opt out of automated decision-making in Settings → Privacy & Security.

11. Children

Lokly is not intended for children under 13 (or the age of digital consent in California). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact privacy@lokly.in.

13. Changes to This Notice

We may update this notice from time to time. Material changes will be posted on this page with an updated “Last Updated” date.

14. Full Privacy Policy

For complete details on how we handle your data, see our Privacy Policy.

15. Contact Us

Questions about your CCPA/CPRA rights or privacy?

California Attorney General: If you have unresolved concerns, you may contact the California Attorney General at oag.ca.gov/contact.