Privacy Policy

Introduction and Commitment

At Lofingo Private Limited, we are deeply committed to protecting your privacy and ensuring the security of your personal and business information. This Privacy Policy explains how we collect, use, process, and safeguard your data when you use our SaaS-based white label platform and related services.

Information We Collect

We collect various types of information to provide you with our comprehensive SaaS platform services and ensure optimal user experience:

Business Information:

• Company Details: Business name, industry category, company size, and registration information
• Contact Information: Email addresses, phone numbers, business addresses, and authorized representative details
• Account Credentials: Usernames, encrypted passwords, and authentication data for platform access
• Billing Information: Payment details, billing addresses, tax information, and transaction history

Platform Usage Data:

• Admin Panel Activity: Dashboard usage patterns, feature utilization, and configuration settings
• Website Analytics: Traffic data, user behavior, conversion metrics, and performance statistics
• Theme Preferences: Selected themes, customization choices, and design modifications
• Support Interactions: Support tickets, chat logs, training session recordings, and feedback

Technical Information:

• Device Data: IP addresses, browser types, operating systems, and device specifications
• Platform Logs: System performance data, error logs, and usage timestamps
• Integration Data: Third-party service connections and API usage statistics

How We Use Your Information

We use your information exclusively to provide, improve, and support our white label SaaS platform services:

Service Delivery:

• Platform Provisioning: Creating and customizing your branded admin panel, website, and applications
• 30-Second Onboarding: Rapidly setting up your complete digital store with your brand identity
• Membership Management: Managing your Basic, Pro, or Premium plan features and benefits
• Theme Store Access: Providing access to our exclusive theme library and instant activation

Customer Support:

• 24/7 Support Services: Providing round-the-clock technical assistance and guidance
• Training and Onboarding: Conducting personalized training sessions and platform walkthroughs
• Custom Development: Understanding and implementing your unique feature requirements
• Issue Resolution: Diagnosing and resolving technical problems efficiently

Platform Enhancement:

• Performance Optimization: Improving platform speed, reliability, and user experience
• Feature Development: Creating new features based on user feedback and market demands
• Security Enhancements: Strengthening platform security and data protection measures

Information Sharing and Disclosure

We maintain strict policies regarding information sharing and only disclose data in specific, limited circumstances:

We DO NOT Share Your Data For:

• Marketing Purposes: We never sell or rent your personal information to third parties
• Advertising: We do not use your data for targeted advertising or promotional campaigns
• Commercial Gain: Your business data is never monetized or used for our commercial benefit

Limited Sharing Scenarios:

• Service Providers: Essential third-party services (hosting, payment processing) under strict data protection agreements
• Legal Requirements: When required by law, court orders, or regulatory authorities
• Business Protection: To protect our platform, users, or legal rights from fraud or abuse
• User Consent: When you explicitly authorize us to share specific information

Data Security and Protection

We implement comprehensive security measures to protect your data from unauthorized access, disclosure, or misuse:

Technical Safeguards:

• Encryption: All data is encrypted in transit and at rest using industry-standard protocols
• Access Controls: Multi-factor authentication and role-based access restrictions
• Network Security: Firewalls, intrusion detection systems, and secure network architectures
• Regular Monitoring: Continuous security monitoring and threat detection systems

Operational Security:

• Staff Training: Regular security awareness training for all team members
• Access Limitations: Data access limited to authorized personnel on a need-to-know basis
• Security Audits: Regular security assessments and vulnerability testing
• Incident Response: Comprehensive procedures for handling any security incidents

Data Backup and Recovery:

• Regular Backups: Automated, encrypted backups of all critical data
• Disaster Recovery: Robust procedures for data recovery and business continuity
• Geographic Distribution: Data stored across multiple secure locations

Your Privacy Rights

You have comprehensive rights regarding your personal and business data. We respect and facilitate these rights:

Access and Transparency:

• Right to Access: Request detailed information about what personal data we hold about you
• Data Portability: Receive your data in a structured, machine-readable format
• Processing Information: Understand how and why we process your information

Control and Modification:

• Right to Rectification: Correct inaccurate or incomplete personal information
• Right to Erasure: Request deletion of your personal data under certain circumstances
• Right to Restriction: Limit how we process your data in specific situations
• Right to Object: Object to certain types of data processing

Communication Preferences:

• Marketing Communications: Opt-out of promotional emails and communications
• Service Communications: Manage notifications about your account and services
• Support Communications: Control how we contact you for support purposes

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your platform experience and improve our services:

Types of Cookies We Use:

• Essential Cookies: Required for platform functionality, user authentication, and security
• Performance Cookies: Help us understand platform usage and optimize performance
• Functional Cookies: Remember your preferences and settings for better user experience
• Analytics Cookies: Provide insights into platform usage patterns and user behavior

Cookie Management:

• Browser Controls: You can control cookies through your browser settings
• Preference Center: Manage your cookie preferences through our platform settings
• Granular Control: Choose which types of cookies to accept or reject

Data Retention

We retain your information only as long as necessary to provide services and comply with legal obligations:

Retention Periods:

• Active Account Data: Retained throughout your active subscription period
• Billing Information: Maintained for 7 years for accounting and tax compliance
• Support Records: Kept for 3 years to maintain service quality and reference
• Analytics Data: Aggregated data retained for 2 years for platform improvement

Data Deletion:

• Account Closure: Personal data deleted within 30 days of account termination
• User Requests: Specific deletion requests processed within 30 days
• Legal Compliance: Some data may be retained longer for legal or regulatory requirements

International Data Transfers

As a global platform supporting multiple languages and currencies, we may transfer data internationally:

Cross-Border Transfers:

• Service Delivery: Data may be processed in different countries to provide global services
• Security Measures: All international transfers protected by appropriate safeguards
• Legal Compliance: Transfers comply with applicable data protection laws

Safeguards:

• Contractual Protections: Standard contractual clauses with all international partners
• Adequacy Decisions: Transfers to countries with adequate data protection laws
• Additional Measures: Extra protection measures when required by law

Children's Privacy

Our platform is designed for business use and we do not knowingly collect information from children:

• Age Restriction: Our services are intended for users aged 18 and above
• Business Focus: Platform designed exclusively for business and commercial use
• No Targeting: We do not knowingly target or collect data from minors
• Immediate Action: Any inadvertent collection of children's data is immediately deleted

Policy Updates

We may update this Privacy Policy to reflect changes in our practices or legal requirements:

• Notification: Material changes communicated via email and platform notifications
• Advance Notice: 30 days' notice provided for significant policy changes
• Continued Use: Continued platform use indicates acceptance of updated policy
• Version Control: Previous policy versions available upon request