This policy explains what Lottly LLC ("Lottly," "we") collects, how we use it, and the choices you have. It applies to lottly.pro, app.lottly.pro and related services (the "Service").
Account information — name, email, business name, and login data (we use passwordless magic links, so we never store a password). Business records you create — recipes, costs, inventory, lots, suppliers, orders, invoices, documents and photos you upload (including scanned bills). Payment information — handled by Stripe; we never see or store full card numbers. Usage data — log and device information used to keep the Service secure and improve it.
To provide and improve the Service; to process documents you scan (extracting quantities, prices and lot codes); to send transactional and lifecycle emails (via our email provider); to process payments; to provide support; and to meet legal obligations. We do not sell your data, and we never use your recipes, costs or supplier terms for advertising or to benefit other customers.
When you share records with a buyer or certifying body, they see only the scoped, read-only view you grant, for as long as you allow. Every access is logged and visible to you. We do not give third parties access to your records except at your direction.
We rely on a small set of processors to run the Service: cloud hosting and database (Supabase), payments (Stripe), email (Loops), site hosting (Netlify), and accounting integrations you choose to connect (QuickBooks, Xero). Each receives only what it needs to perform its function and is bound by its own data-protection commitments.
Data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Access to production systems is limited and logged. Backups are encrypted and geographically redundant. No system is perfectly secure; if a breach affects your data we will notify you promptly as required by law.
We keep your data while your account is active and for 30 days after termination so you can export it, after which it is scheduled for deletion. You may access, correct, export or delete your data at any time from the app or by emailing us. Depending on where you live, you may have additional rights (such as under the CCPA or GDPR) — email us to exercise them.
We use essential cookies for sign-in sessions and basic, privacy-respecting analytics on our marketing site. We do not use advertising trackers.
The Service is for businesses and is not directed to children under 16.
We will notify you of material changes to this policy by email or in-app. Questions or requests: hello@lottly.pro · Lottly LLC, Bend, Oregon.