Privacy Policy
Last updated: October 10, 2026
What we collect
- Account data: email address, company name, and a hashed password (we never store your password in plain text).
- Your content: procedures, photos, logos and inspection records you create.
- Billing data: handled by Stripe. We store your Stripe customer ID and subscription status, never your card number.
- Usage analytics: page views and product events (for example "downloaded a PDF"). Visitors are counted using a hash of IP address and browser user agent combined with a salt that changes daily; we do not store the raw IP address or set tracking cookies.
Cookies
We use one essential cookie to keep you logged in. We do not use advertising or third-party tracking cookies.
How we use it
To provide the service, send transactional emails (password resets, inspection reminders), process payments, provide support, and improve the product. We do not sell your data.
Sharing
With service providers that help us run LotoKit (hosting, email delivery, Stripe for payments), only as needed to provide the service; and when required by law. Procedures are visible to anyone with their public QR link.
Retention and deletion
We keep your data while your account is active. You can delete your account at any time from Settings, which permanently deletes your procedures, photos and inspection records from our database. Backups may persist for up to 30 days.
Security
Data is transmitted over HTTPS. Passwords are hashed with bcrypt. Access to your content requires your login, except the public QR page for each procedure.