Legal
Privacy policy
Last updated: 16 September 2026
This policy explains how [Legal entity name], [Registered address], Hong Kong ("we"), handles personal data when you use this website and the Lukkio app. Questions go to hello@lukkio.com.
What we collect
- Account details: your name, work email, company name, role, and the password hash for your sign-in.
- Billing details: your plan, seat count, invoices and payment status. Card numbers go directly to Adyen, our payment provider; we never see or store them.
- The records you create: listings, contacts, deals, viewings, activities, campaigns and the files you attach. These include personal data about your own clients, which you enter as their agent.
- Usage data: which pages and features you open, when, from which browser and IP address, and error logs, so we can keep the service working.
- Messages: anything you send us by email or through the app.
Why we use it
- To provide the service you signed up for and show you your own records.
- To take payment and send invoices and receipts.
- To keep the service secure, find and fix faults, and measure which features are used.
- To answer you when you write to us and to send service notices (renewals, changes to terms, outages).
- To send product news, only if you opted in; every such email has an unsubscribe link.
For the records you enter about your clients, you are the controller and we process them on your instructions. We do not sell personal data.
Who we share it with
- Hosting and infrastructure providers that store and run the service.
- Adyen, which processes card payments under its own privacy policy.
- AI model providers, which receive the listing or contact text needed to generate a title, description, email draft or match. They are contractually barred from using it to train their models.
- Email delivery providers for messages sent from the app and by us.
- Property portals you choose to publish a listing to; what they receive is the listing content you approve.
- Authorities, where the law requires it.
Where it is held
Data is stored on servers run by our hosting providers and may be processed outside the country you are in. Where we transfer data across borders we use contracts that require the same level of protection.
How long we keep it
Account and record data is kept while your account is open. When you close the account we delete it within 90 days, except billing records, which we keep for as long as tax law requires, and logs, which we keep for up to 12 months.
Your rights
You can see, correct, export or delete your records in the app at any time. You can ask us for a copy of the personal data we hold about you, ask us to correct or delete it, or object to a particular use, by emailing hello@lukkio.com. We answer within 30 days. If you are unhappy with our answer you may complain to the data protection authority where you live.
Cookies
This website sets no cookies. The app sets only the cookies needed to keep you signed in and to remember your settings. We do not use advertising cookies.
Security
Data is encrypted in transit and at rest. Access inside our team is limited to the people who need it to support you or fix a fault, and is logged. If we ever discover a breach that affects you, we will tell you without undue delay.
Changes
We will post any change to this policy here and, if it is material, email account owners before it takes effect.