Privacy Policy

1. Scope & Applicability

This Policy applies to information collected through our websites (including meetlofi.com), web/mobile apps, and any products or services that link to it. This Policy does not apply to data handling practices of third-party sites or applications you access via links from the Services.

2. Information We Collect

3. How We Use Information

We use information to:

• Provide & operate the Services, including account creation, security, and customer support.
• Run & optimize marketing campaigns on your behalf (processor role) according to your instructions.
• Improve the Services and develop new features (e.g., troubleshooting, analytics, research).
• Personalize experiences and content.
• Communicate with you about updates, security alerts, and administrative or marketing messages (you can opt out of marketing).
• Process payments and prevent fraud, abuse, and security incidents.
• Comply with legal obligations and enforce our Terms.

4. Our Role as Processor (Client Campaign Data)

When clients upload or grant access to personal data for advertising (e.g., hashed emails for audience matching, creative assets, performance metrics), Lofi processes such data solely on the client's documented instructions and the DPA. Clients:

• Must ensure a valid lawful basis (e.g., consent/opt-in, legitimate interests) and required notices for ad-tech uses.
• Are responsible for platform and regulatory compliance (e.g., Meta/Google policies, privacy and advertising laws).
• Must not provide personal data that violates law or platform rules.

5. Legal Bases (EEA/UK)

Where GDPR/UK GDPR applies, we process personal data on the following bases:

• Contract (Art. 6(1)(b)) to provide the Services you request.
• Legitimate interests (Art. 6(1)(f)) such as securing and improving the Services, and B2B marketing (balanced with your rights).
• Consent (Art. 6(1)(a)) for certain cookies/advertising and email marketing where required.
• Legal obligation (Art. 6(1)(c)) for compliance and recordkeeping.

6. How We Share Information

We may share information with:

• Service providers / processors (e.g., cloud hosting, analytics, security, support, CRM, payment processing, A/B testing, and AI infrastructure) bound by confidentiality and data-processing terms.
• Ad platforms to run and measure campaigns you authorize.
• Professional advisors & authorities (e.g., to comply with law, enforce our terms, or protect rights and safety).
• Business transfers in connection with mergers, acquisitions, financing, or asset sales (subject to this Policy).
• Affiliates for Services consistent with this Policy.

We do not sell your personal information for money. For California's CPRA, some of our use of advertising cookies/pixels may be considered "sharing" for cross-context behavioral advertising. See Section 9 for your opt-out rights.

7. Data Retention

We retain information for as long as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Typical periods:

• Account data: for your account lifetime and a reasonable period thereafter (e.g., 12–24 months) unless deletion is requested or required sooner.
• Campaign data (processor role): as directed by the client or for the term in the DPA, then deleted or returned.
• Logs/analytics: for limited periods necessary for security and performance (e.g., 12–18 months), then aggregated or deleted.

8. Cookies, Analytics & Advertising

9. Your Privacy Rights

10. International Transfers

We are headquartered in the United States and may transfer personal data to countries that may not provide the same level of protection as your jurisdiction. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses and additional measures). Contact us for details.

11. Security

We implement administrative, technical, and physical safeguards designed to protect personal information (e.g., access controls, encryption in transit, vulnerability management). No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

12. Children's Privacy

The Services are not directed to children and we do not knowingly collect personal information from children under 13 (or under 16 where a higher age threshold applies). If you believe a child has provided personal information to us, contact privacy@meetlofi.com and we will take appropriate action.

13. Your Choices

• Access & updates. You can review and update certain account information in your settings or by contacting us.
• Marketing communications. You may opt out of promotional emails by using the unsubscribe link or contacting us. We may still send transactional or service messages.

14. California Notice at Collection

We collect the following categories of personal information for the purposes described in Sections 3, 8, and 9, and retain them for the periods described in Section 7:

Sale/Share: We do not sell personal information for money. We may share identifiers, internet/network activity, and inferences with advertising/analytics partners for cross-context behavioral advertising. You can opt out via the footer link and by sending a GPC signal.

15. Third-Party Links

Our Services may contain links to third-party sites or services. We are not responsible for their privacy practices. Review their policies before providing information.

16. Changes to this Policy

We may update this Policy from time to time. When we do, we will post the updated version and revise the "Effective Date" above. Material changes will be communicated via the Services or by email where appropriate.

17. Contact Us