Lokali ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service booking platform through our website, mobile applications, and AI-powered integrations including ChatGPT.
1. Information We Collect
1.1 Information You Provide
- Account Information: Name, email address, phone number, and profile preferences
- Booking Details: Service type, appointment date/time, provider selection, and special requests
- Location Data: Address, ZIP code, or city for finding nearby service providers
- Payment Information: Billing address and payment method (processed securely by Stripe; we do not store full card numbers)
- Communications: Messages sent to service providers or our support team
1.2 Information Collected Automatically
- Device Information: Device type, operating system, browser type, and unique device identifiers
- Usage Data: Pages viewed, features used, search queries, and interaction patterns
- Log Data: IP address, access times, and referring URLs
- Cookies & Similar Technologies: Session cookies, analytics cookies, and local storage
1.3 Information from AI Integrations
2. How We Use Your Information
| Purpose | Legal Basis |
|---|---|
| Process and confirm bookings | Contract performance |
| Connect you with service providers | Contract performance |
| Process payments securely | Contract performance |
| Send booking confirmations and reminders | Contract performance |
| Provide customer support | Legitimate interest |
| Improve our services and user experience | Legitimate interest |
| Detect and prevent fraud | Legitimate interest |
| Send promotional communications (with consent) | Consent |
| Comply with legal obligations | Legal compliance |
3. Information Sharing
We share your information only as necessary to provide our services:
3.1 Our Brokerage Model
3.2 Service Providers You Book
When you make a booking through Lokali:
- Affiliated Providers: Your booking information (name, contact details, appointment time, service requested, special requests) is shared directly with the provider through our platform
- Public Listings: For providers not formally affiliated with Lokali, we act as your concierge. We contact the provider on your behalf to arrange your service, sharing only the information necessary to complete your booking (typically your first name, service requested, and appointment time). We may provide your contact information to the provider once the booking is confirmed
In both cases, we share only the minimum information necessary for the provider to deliver your requested service.
3.3 Payment Processor
Stripe processes all payments. They receive your payment information and are certified as a PCI Level 1 Service Provider. See Stripe's Privacy Policy.
3.4 AI Platform Partners
When using Lokali through ChatGPT, your booking data is transmitted through OpenAI's infrastructure. We have data processing agreements ensuring your information is protected.
3.5 Infrastructure Providers
- Google Cloud / Firebase: Secure cloud hosting and database services
- Google Maps: Location services and mapping functionality
- Analytics providers: Anonymized usage analytics
3.6 Legal Requirements
We may disclose information if required by law, court order, or to protect rights, safety, or property.
4. Data Retention
- Account Data: Retained while your account is active, plus 3 years after deletion request
- Booking Records: Retained for 7 years for tax and legal compliance
- Payment Records: Retained by Stripe per their retention policy
- Support Communications: Retained for 2 years
- Analytics Data: Aggregated and anonymized after 26 months
5. Data Security
We implement industry-standard security measures:
- Encryption: TLS 1.3 for all data in transit; AES-256 for data at rest
- Authentication: Secure OAuth 2.0 with PKCE for AI integrations
- Infrastructure: Google Cloud with SOC 2 Type II certification
- Payments: PCI DSS Level 1 compliant processing via Stripe
- Access Controls: Role-based access with audit logging
- Monitoring: 24/7 security monitoring and incident response
6. Your Privacy Rights
6.1 All Users
- Access: Request a copy of your personal data
- Correction: Update inaccurate or incomplete information
- Deletion: Request deletion of your account and data
- Portability: Receive your data in a machine-readable format
- Opt-Out: Unsubscribe from marketing communications
6.2 California Residents (CCPA/CPRA)
California residents have additional rights under the California Consumer Privacy Act:
- Right to know what personal information is collected, used, and shared
- Right to delete personal information
- Right to opt-out of the sale of personal information (we do not sell data)
- Right to non-discrimination for exercising privacy rights
- Right to correct inaccurate personal information
- Right to limit use of sensitive personal information
To exercise your rights, contact privacy@lokali.ai.
7. Children's Privacy
Lokali is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately at privacy@lokali.ai.
8. Cookies and Tracking
We use cookies and similar technologies for:
- Essential Cookies: Required for platform functionality (cannot be disabled)
- Analytics Cookies: Help us understand usage patterns (Google Analytics)
- Preference Cookies: Remember your settings and preferences
You can manage cookies through your browser settings. Disabling certain cookies may affect platform functionality.
9. International Data Transfers
Your information may be transferred to and processed in the United States, where our servers are located. We ensure appropriate safeguards are in place for any international transfers.
10. Third-Party Links
Our platform may contain links to third-party websites. We are not responsible for the privacy practices of external sites. Please review their privacy policies before providing personal information.
11. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be communicated via:
- Email notification to registered users
- Prominent notice on our website
- In-app notification
Continued use of Lokali after changes constitutes acceptance of the updated policy.
12. Contact Us
For privacy-related questions, requests, or concerns:
Email: privacy@lokali.ai
Mail:
NOW TECH LLC
Attn: Privacy Officer
Montebello, CA 90640
For California residents: To submit a verifiable consumer request, please email privacy@lokali.ai with the subject line "California Privacy Request" and include your full name and email address associated with your account.