Privacy Policy

Lookout ("we," "us," or "our") operates the Lookout housing marketplace platform ("Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, mobile application, or use our services.

We are committed to protecting your privacy and being transparent about our data practices. This policy applies to all users of our platform, including those who create listings ("Hosts"), those looking for accommodation ("Guests"), and general visitors.

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, date of birth, phone number, profile photos
• Profile Details: Gender, profession, bio, languages spoken, hobbies, weekend activities
• Location Data: Current location, preferred search areas, listing addresses
• Verification Information: Identity verification photos, gesture verification images
• Social Media: Instagram and LinkedIn handles (optional)
• Listing Information: Property details, photos, pricing, availability, amenities
• Payment Information: Billing details processed through Stripe (we do not store credit card numbers)
• Communications: Messages, reviews, reports, and other user-generated content

1.2 Information We Collect Automatically

• Device Information: IP address, device type, browser type, operating system
• Usage Data: Pages visited, time spent, features used, search queries
• Location Data: Approximate location based on IP address for relevant listings
• Cookies and Tracking: Session data, preferences, analytics information
• Performance Data: Error logs, loading times, feature usage statistics

1.3 Information from Third Parties

• Google Sign-In: Basic profile information when you authenticate via Google
• Payment Processors: Transaction data from Stripe for premium subscriptions
• Map Services: Location data from Mapbox for address validation and mapping
• IP Geolocation: Country and region information for currency and localization

2. How We Use Your Information

2.1 Core Platform Services

• Creating and managing your account and profile
• Facilitating connections between hosts and guests
• Processing and displaying listings and looking posts
• Enabling real-time messaging between users
• Providing search and filtering functionality
• Processing premium subscription payments

2.2 Safety and Security

• Verifying user identities through photo verification
• Detecting and preventing fraud, spam, and abuse
• Investigating violations of our terms of service
• Monitoring platform usage for security threats
• Implementing and enforcing age restrictions (18-30)

2.3 Communication and Support

• Sending important service announcements and updates
• Responding to your inquiries and providing customer support
• Notifying you of new matches, messages, and platform activity
• Conducting user research and gathering feedback

2.4 Platform Improvement

• Analyzing usage patterns to improve our services
• Developing new features and functionality
• Personalizing your experience and recommendations
• Optimizing platform performance and reliability

3. How We Share Your Information

3.1 Public Profile Information

The following information is visible to other verified users on the platform:

• First name, age, and profile photos
• Location (city/region, not exact address)
• Bio, profession, languages, and interests
• Verification status and verification photo
• Social media handles (if provided)
• Listing details and property photos

3.2 Service Providers

We share information with trusted third-party service providers:

• Cloudflare R2: Secure storage of profile and listing images
• Supabase: Database hosting and user authentication services
• Stripe: Payment processing for premium subscriptions
• Mapbox: Map services and location geocoding
• Email Service Providers: Delivery of transactional emails
• Analytics Providers: Anonymous usage statistics and performance monitoring

3.3 Legal Requirements

We may disclose your information when required by law, court order, or government request, or when we believe disclosure is necessary to protect our rights, property, or safety, or that of our users or the public.

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy protections.

4. Data Protection and Security

4.1 Security Measures

• End-to-end encryption for sensitive data transmission
• Secure cloud infrastructure with regular security updates
• Row-level security policies to protect user data access
• Regular security audits and vulnerability assessments
• Secure payment processing through PCI-compliant providers
• Multi-factor authentication options for account protection

4.2 Data Retention

• Active Accounts: Data retained while your account is active and for legitimate business purposes
• Deleted Accounts: Most data deleted within 30 days, some data retained for legal/safety reasons
• Messages: Retained for active conversations, deleted when users delete conversations
• Payment Data: Transaction records retained as required by law and payment processor policies
• Safety Data: Verification photos and safety-related data may be retained longer for platform security

4.3 International Data Transfers

Your data may be processed and stored in countries where our service providers operate, including the United States and European Union. We ensure appropriate safeguards are in place for international transfers, including adherence to GDPR requirements for EU residents.

5. Your Privacy Rights

5.1 Access and Control

• Profile Management: Update your profile information, photos, and preferences at any time
• Privacy Settings: Control who can see your information and contact you
• Data Download: Request a copy of your personal data in a portable format
• Account Deletion: Delete your account and associated data through account settings
• Communication Preferences: Opt out of non-essential emails and notifications

5.2 GDPR Rights (EU Residents)

If you are located in the European Union, you have additional rights under GDPR:

• Right to Access: Obtain confirmation of data processing and copies of your data
• Right to Rectification: Correct inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Limit how we process your data in specific situations
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis

5.3 California Privacy Rights (CCPA)

If you are a California resident, you have rights under the California Consumer Privacy Act:

• Right to know what personal information we collect and how it's used
• Right to delete personal information we have collected
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

6. Cookies and Tracking Technologies

6.1 Types of Cookies

• Essential Cookies: Required for basic platform functionality and security
• Performance Cookies: Help us understand how users interact with our platform
• Functional Cookies: Remember your preferences and settings
• Authentication Cookies: Keep you logged in and manage your session

6.2 Third-Party Tracking

We use analytics services to understand platform usage and improve our services. These services may use cookies and similar technologies. You can control cookie preferences through your browser settings.

7. Age Restrictions and Verification

Lookout is designed for users aged 18-30 years old. We do not knowingly collect personal information from individuals under 18. If you are under 18, please do not use our services or provide any personal information. If we discover that we have collected personal information from someone under 18, we will delete it immediately.

We verify age through date of birth information provided during registration and may request additional verification if needed.

8. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes through email or prominent notice on our platform. Your continued use of our services after such notification constitutes acceptance of the updated policy.

9. Contact Information

If you have questions about this Privacy Policy, want to exercise your privacy rights, or have concerns about how we handle your personal information, please contact us:

10. Legal Basis for Processing (GDPR)

For EU residents, we process your personal data based on the following legal grounds:

• Contract Performance: To provide our housing marketplace services
• Legitimate Interest: To improve our platform, ensure security, and prevent fraud
• Consent: For optional features like marketing communications and social media integration
• Legal Obligation: To comply with applicable laws and regulations
• Vital Interest: To protect the safety and security of our users