Privacy Policy

1. Introduction

Welcome to LotsTech ("we," "our," or "us"). LotsTech is operated by LotsTech AI Solutions Private Limited, a private limited company registered in India. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, including LotsBlog, LotsTeam, LotsDirectory, LotsNotes, LotsCRM, LotsLink, LotsAgent, and other products within the LotsTech ecosystem (collectively, the "Services").

By accessing or using our Services, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our Services.

2. Information We Collect

2.1 Personal Information You Provide

We collect information you voluntarily provide when you:

• Create an account (name, email address)
• Sign in using Google OAuth (email, name, profile picture)
• Subscribe to our services (payment information processed by our payment provider)
• Join a product waitlist (your email address, the product you chose, the page you signed up from and your approximate country; we use it only to tell you when that product opens)
• Contact our support team
• Use our Services to create and manage content

2.2 Information Collected Automatically

When you access our Services, we may automatically collect:

• Device information (browser type, operating system)
• IP address and general location data
• Usage data (pages visited, features used, time spent)
• Cookies and similar tracking technologies
• Account milestones and where you first came from (see section 4)

2.3 Information from Third Parties

We may receive information from:

• Google: When you sign in with Google, we receive your email address, name, and profile picture
• Payment Processors: Transaction confirmations and subscription status (we do not store full payment card details)

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Services
• Process transactions and manage subscriptions
• Send you service-related communications (account verification, security alerts, subscription updates)
• Respond to your inquiries and provide customer support
• Detect, prevent, and address technical issues, fraud, or security breaches
• Comply with legal obligations
• Enforce our Terms of Service
• Keep a record of your relationship with us (see section 4)

4. How We Keep Track of Our Relationship With You

When you create an account on any LotsTech product, we keep a short record of your relationship with us. We use it to support you, to help you get started with the product, and to understand which channels bring people to our products.

4.1 What We Record

• Your email address, your name if your account has one, and a company name taken from your email domain when it is a business domain (never from free mailboxes such as Gmail or Outlook)
• Account milestones and their dates: signing up, signing in, reaching a first key step in a product (for example a first published post, note or link), connecting an AI agent, and your plan, payments, credit purchases and cancellations
• Where you first came from: the utm_source, utm_medium and utm_campaign of the link that brought you, the referring website's domain (never the full address) and the page you first landed on, taken from the lots_ft cookie described in section 13

We do not copy anything from inside our products into this record: no posts, notes, links, contacts or other content you create.

4.2 Where It Is Kept

• LotsCRM: each LotsTech product has its own workspace in LotsCRM, our own CRM product, with one contact per person who uses that product. This data stays in our own database. The contact holds the details above, your plan and the dates of your milestones, with no IP address and no full web addresses.
• Customer.io: the service we use to send product and account email receives the same milestones. Customer.io processes this data on our behalf.

4.3 What It Is Not

• Signing up is not consent to marketing email. Nothing in LotsCRM emails you automatically.
• Our own team's accounts are included too, marked internal.
• We do not sell this record.

4.4 How Long We Keep It and How to Remove It

We keep this record while you have an account with any LotsTech product. To see it, correct it or have it deleted, email legal@lotstech.com. A deletion request covers this record too: we delete your contact in LotsCRM and your profile in Customer.io along with your account data.

For visitors in the EU/EEA, our legal basis is our legitimate interest in supporting our customers and understanding how people find us. You can object to it at any time at the same address.

5. Data Sharing and Disclosure

We may share your information with:

5.1 Service Providers

We use trusted third-party services to operate our platform:

• Supabase: Database and authentication services
• Cloudflare: Website hosting, CDN, DNS, security, and file storage
• Polar.sh: Payment processing and subscription management
• Google: OAuth authentication
• Customer.io: Product and account email, and the account milestones described in section 4
• Account connection providers: For some of the social network accounts and apps you connect in LotsSocial and LotsAgent, a provider holds the access you grant and publishes or acts there on your behalf when you or your agent ask
• TinyFish (tinyfish.io): AI agent execution services
• Inngest (inngest.com): Background job and event-driven workflow processing
• Upstash (upstash.com): Redis database and message queue services

5.2 Legal Requirements

We may disclose your information if required to:

• Comply with applicable laws, regulations, or legal processes
• Respond to lawful requests from public authorities
• Protect our rights, privacy, safety, or property
• Enforce our Terms of Service

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

6. Data Storage and Security

Your data is primarily stored on servers located in the United States through our service providers (Supabase, Cloudflare, and others listed above). We implement industry-standard security measures including:

• Encryption of data in transit (TLS/SSL)
• Encryption of sensitive data at rest (AES-256)
• Secure authentication mechanisms
• Regular security assessments
• Access controls and monitoring

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our Services. We may also retain and use your information as necessary to:

• Comply with legal obligations
• Resolve disputes
• Enforce our agreements
• Maintain business records

When you delete your account, we will delete or anonymize your personal information within 30 days, unless we are required to retain it for legal purposes.

8. Your Rights and Choices

Depending on your location, you may have the following rights:

8.1 Access and Portability

You can request a copy of your personal data in a portable format.

8.2 Correction

You can update or correct your account information at any time through your account settings.

8.3 Deletion

You can request deletion of your account and associated data by contacting us.

8.4 Opt-Out

You can opt out of promotional communications by following the unsubscribe instructions in those messages.

8.5 Cookie Preferences

You can manage cookie preferences through your browser settings. Visitors in Europe choose whether Google Analytics may run before it loads, and can change that choice any time with the "Cookie settings" link in the site footer.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our service providers are located. These countries may have different data protection laws than your country.

By using our Services, you consent to the transfer of your information to these countries. We take steps to ensure that your data receives adequate protection in accordance with this Privacy Policy.

10. Children's Privacy

Our Services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at legal@lotstech.com.

11. GDPR Compliance (For EU/EEA Users)

If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to Access: Request access to your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of processing
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time

Our legal bases for processing your data include: consent, contract performance, legitimate interests, and legal obligations.

To exercise these rights, contact us at legal@lotstech.com. You also have the right to lodge a complaint with your local data protection authority.

12. California Privacy Rights (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request information about the categories and specific pieces of personal information we have collected
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the sale of your personal information (we do not sell personal information)
• Right to Non-Discrimination: Not be discriminated against for exercising your privacy rights

To exercise these rights, contact us at legal@lotstech.com.

13. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Essential Cookies: Required for the Services to function (authentication, security)
• Functional Cookies: Remember your preferences and settings
• Performance Cookies: Understand how you use our Services to improve them

Our websites (including lotstech.com, lots.social, lots.blog, lots.team, lotscrm.com, lotsnotes.com, lots.link, lots.directory and blogs hosted on LotsBlog that turn it on) use Google Analytics 4 to count visits and see which pages and links people use. It sets first-party cookies (such as _ga) and sends Google page views and button clicks, never your name or email address. Ad features and ad personalization are off. For visitors on a European time zone, Google Analytics does not load at all until you accept it in the consent bar (Google Consent Mode v2, basic mode), and rejecting it means it never loads. Your choice is kept in a first-party cookie named lots_ga_consent for 180 days. Cloudflare Web Analytics, which sets no cookies, also counts visits.

On your first visit to one of these websites we also set a first-party cookie named lots_ft. It holds the utm_source, utm_medium and utm_campaign of the link you arrived from, the referring website's domain, the page you landed on and the time of that visit. It contains nothing that identifies you, lasts 90 days, is never overwritten by later visits, and is read when you create an account to record where you first came from (see section 4). It follows your Google Analytics choice: on a European time zone it is set only after you accept.

You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our Services.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

We encourage you to review this Privacy Policy periodically. Your continued use of the Services after any changes indicates your acceptance of the updated Privacy Policy.

15. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us: