Introduction
The protection of your personal data is important to us. This privacy policy informs you about the processing of personal data when using lokilo.ai.
Data Controller
Responsible for data processing: lokilo.ai UG (haftungsbeschränkt) Winterstraße 4-8 22765 Hamburg Germany Email: support@lokilo.ai
Data Processed
Cadastral Data
The ALKIS data used does not contain any direct personal references (owner data is excluded). Parcel numbers, areas and building data are primarily factual data.
User Data
The following personal data is processed:
- Email address (on registration)
- Name (on registration)
- Password (stored hashed)
- Payment data (at Stripe, our payment service provider)
- Search queries (temporarily or when saved by the user)
Legal Basis
- Contract performance (Art. 6(1)(b) GDPR): For providing our services
- Consent (Art. 6(1)(a) GDPR): For newsletter and marketing
- Legitimate interest (Art. 6(1)(f) GDPR): For security and operations
Your Rights
You have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
To exercise your rights, contact us at support@lokilo.ai
External Services
We use the following third-party providers (processors under Art. 28 GDPR):
- Cloudflare (Hosting, USA) - EU-US Data Privacy Framework
- Cloudflare Web Analytics (Website Analytics, USA) - Privacy-friendly, no cookies, no personal data
- Anthropic (AI Analysis, USA) - EU-US Data Privacy Framework
- Mapbox (Satellite Images, USA) - EU-US Data Privacy Framework
- Google Maps Platform (Maps, Geocoding, Address Search; Google Ireland Ltd., Ireland) - EU-US Data Privacy Framework
- Google (Street View, USA) - EU-US Data Privacy Framework
- Stripe (Payments, USA) - EU-US Data Privacy Framework
- Resend (Email Service, USA) - EU-US Data Privacy Framework
- Modal Labs (GPU image analysis for Business tier, USA) - Standard Contractual Clauses. Used only when the image-matching feature is active.
Cookies and Web Analytics
We use essential cookies for login and security. For website analytics, we use Cloudflare Web Analytics - a privacy-friendly solution that does not use cookies, does not collect personal data, and does not track users across websites. Marketing cookies are only set with your consent. You can adjust your settings at any time via the cookie banner.
Data Retention
Personal data is only stored for as long as necessary for the respective purposes or as required by law. When you delete your account, your data will be deleted immediately.
Notification of Data Breaches (Art. 33/34 GDPR)
We commit to investigating data breaches without delay once they become known, to notifying the competent supervisory authority (Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit) within 72 hours where a notification obligation exists, and to informing affected users without undue delay if a high risk to their rights and freedoms is to be expected. Please report suspected incidents to security@lokilo.ai.
Contact
For privacy questions, contact us at support@lokilo.ai