Privacy Policy

1. Introduction

Welcome to LOTS ("we," "our," or "us"). LOTS is operated by LOTS Tech Services, a sole proprietorship firm registered in India. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, including LOTS Social, LOTS Blog, LOTS Link, and other products within the LOTS ecosystem (collectively, the "Services").

By accessing or using our Services, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our Services.

2. Information We Collect

2.1 Personal Information You Provide

We collect information you voluntarily provide when you:

• Create an account (name, email address)
• Sign in using Google OAuth (email, name, profile picture)
• Subscribe to our services (payment information processed by our payment provider)
• Contact our support team
• Use our Services to create and manage content

2.2 Information Collected Automatically

When you access our Services, we may automatically collect:

• Device information (browser type, operating system)
• IP address and general location data
• Usage data (pages visited, features used, time spent)
• Cookies and similar tracking technologies

2.3 Information from Third Parties

We may receive information from:

• Google: When you sign in with Google, we receive your email address, name, and profile picture
• Payment Processors: Transaction confirmations and subscription status (we do not store full payment card details)

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Services
• Process transactions and manage subscriptions
• Send you service-related communications (account verification, security alerts, subscription updates)
• Respond to your inquiries and provide customer support
• Detect, prevent, and address technical issues, fraud, or security breaches
• Comply with legal obligations
• Enforce our Terms of Service

4. Data Sharing and Disclosure

We may share your information with:

4.1 Service Providers

We use trusted third-party services to operate our platform:

• Supabase: Database and authentication services
• Vercel: Website hosting and deployment
• Cloudflare R2: File storage
• Polar.sh: Payment processing and subscription management
• Google: OAuth authentication

4.2 Legal Requirements

We may disclose your information if required to:

• Comply with applicable laws, regulations, or legal processes
• Respond to lawful requests from public authorities
• Protect our rights, privacy, safety, or property
• Enforce our Terms of Service

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

5. Data Storage and Security

Your data is primarily stored on servers located in the United States through our service providers (Supabase, Vercel, and Cloudflare). We implement industry-standard security measures including:

• Encryption of data in transit (TLS/SSL)
• Encryption of sensitive data at rest (AES-256)
• Secure authentication mechanisms
• Regular security assessments
• Access controls and monitoring

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our Services. We may also retain and use your information as necessary to:

• Comply with legal obligations
• Resolve disputes
• Enforce our agreements
• Maintain business records

When you delete your account, we will delete or anonymize your personal information within 30 days, unless we are required to retain it for legal purposes.

7. Your Rights and Choices

Depending on your location, you may have the following rights:

7.1 Access and Portability

You can request a copy of your personal data in a portable format.

7.2 Correction

You can update or correct your account information at any time through your account settings.

7.3 Deletion

You can request deletion of your account and associated data by contacting us.

7.4 Opt-Out

You can opt out of promotional communications by following the unsubscribe instructions in those messages.

7.5 Cookie Preferences

You can manage cookie preferences through your browser settings.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our service providers are located. These countries may have different data protection laws than your country.

By using our Services, you consent to the transfer of your information to these countries. We take steps to ensure that your data receives adequate protection in accordance with this Privacy Policy.

9. Children's Privacy

Our Services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at legal@lots.ltd.

10. GDPR Compliance (For EU/EEA Users)

If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to Access: Request access to your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of processing
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time

Our legal bases for processing your data include: consent, contract performance, legitimate interests, and legal obligations.

To exercise these rights, contact us at legal@lots.ltd. You also have the right to lodge a complaint with your local data protection authority.

11. California Privacy Rights (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request information about the categories and specific pieces of personal information we have collected
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the sale of your personal information (we do not sell personal information)
• Right to Non-Discrimination: Not be discriminated against for exercising your privacy rights

To exercise these rights, contact us at legal@lots.ltd.

12. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Essential Cookies: Required for the Services to function (authentication, security)
• Functional Cookies: Remember your preferences and settings
• Performance Cookies: Understand how you use our Services to improve them

You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our Services.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

We encourage you to review this Privacy Policy periodically. Your continued use of the Services after any changes indicates your acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us: