Privacy policy and how we handle your data

Lokvi places particular importance on protecting the personal data of its users and the customers of businesses using the Service. This policy describes what data is collected, why, and how it is processed, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

• Raison sociale : Lokvi
• Contact email: contact@lokvi.app

Depending on how you use the Service, we collect:

• Account data: name, email, password (or Google / Apple social login)
• Google My Business listing data: business name, address, reviews, photos, posts (via the OAuth authorization you grant)
• Customer data of the business: name, email and/or phone number of customers contacted for a review, enrolled in the loyalty program or subscribed to the newsletter
• Billing data: customer ID and subscription with our payment provider, SMS usage history. Bank details are entered and stored by Stripe, never by Lokvi
• Technical data: IP address, connection logs, session cookies

• Provision and operation of the Service
• Sending review requests by email and SMS on behalf of the business
• Automated generation of replies to reviews, posts and photos on the business's Google listing
• Loyalty program management
• Billing and management of subscriptions and SMS
• Support client et communications relatives au Service

Depending on the case, processing is based on performance of the contract entered into with the business using the service, consent (e.g. joining the loyalty program), or legitimate interest (security, improving the Service).

Data is kept for the entire lifetime of the account. No automatic deletion is applied in the event of cancellation or a downgraded subscription: data from a business that becomes inactive (reviews, loyalty program customers, newsletter subscribers, mini-site) remains stored as is, so it stays available if you resume a subscription.

You can request deletion of your account and associated data at any time, subject to documents that the law requires to be retained (invoices and accounting records, in particular). Deletion is then carried out within a reasonable time after the request is received.

Sensitive data (Google access tokens, passwords) is stored in encrypted form. Technical and organizational measures are implemented to protect data against unauthorized access, loss, or disclosure.

In accordance with the GDPR, you have the right to access, rectify, erase, restrict, object to, and port your data. To exercise these rights, write to us at contact@lokvi.app. You also have the right to lodge a complaint with the CNIL.

The Service only uses cookies that are strictly necessary for its operation: a session cookie and an anti-CSRF token. Public forms (sign-up, forgot password, contact) use hCaptcha, which sets its own anti-bot technical cookies.

Audience measurement is provided by Microsoft Clarity (Microsoft Ireland Operations Limited) and PostHog. They count page views and key actions (sign-up, connecting a listing, subscription) and record the anonymized playback of your browsing: clicks, scrolling, page journey. Form fields and entered data are masked in these recordings. These tools set analytics cookies on your device.

As they are not strictly necessary for the operation of the Service, these cookies are subject to your consent, which you can withdraw at any time. No advertising cookies are used, and no data is resold or shared with advertising networks.

Some technical providers we use to deliver the Service may process data outside the European Union. These transfers are governed by appropriate safeguards (standard contractual clauses or equivalent).

If you have any questions about this privacy policy, write to us at contact@lokvi.app or use the form on the Contact page.