Privacy Policy

1. Who is responsible for your data

Locbrant (the “platform operator”) is responsible for personal data processed through the Platform. Locbrant is currently operated by the platform operator. Formal company details may be added to this page if and when they become available.

2. Data we collect

We aim to collect the minimum data needed to run a discovery platform. Depending on how you use Locbrant, this may include:

• Account email address, when you create an account.
• Your password is handled by our authentication provider (Supabase) and stored only in securely hashed form by that provider. Locbrant does not see or store your raw password.
• Your language setting, including the locale chosen at signup, which may be stored with your account so the app and account emails can use the correct language.
• Profile details such as a display name or avatar, if you add them (some profile features may be added later).
• Shop profile and contact information that sellers choose to publish (for example shop name, description, district, WhatsApp number, Instagram handle, or website).
• Product information and images that sellers upload.
• Saved products or shops, when you save them to your account.
• Reports you submit, including the reason and any details you add.
• Feedback you submit through the Platform, including the feedback category, message, page path, language setting, and your account identity (feedback requires signing in; there is no anonymous feedback).
• In-app notifications addressed to your account, including their read or unread status, and any notification preferences you set.
• Analytics events about how the Platform is used, such as product views, shop views, and contact-button clicks.
• Review data you save or submit, if and when review features are launched in the future.
• Limited operational activity, such as when a seller last opened their shop dashboard, if such features are implemented.
• Technical data created automatically, such as log data, approximate request information used for security and rate limiting, cookies, and session data needed to keep you signed in.

3. Data we do not collect

We do not handle payments, so we do not collect payment-card or bank-account data.

For guests, analytics events are not linked to a Locbrant account, and we do not store full IP addresses or full user-agent strings with analytics events. Our current analytics are deliberately simple: they may count page-load and contact-click events as they happen, and may not perfectly deduplicate repeat views, refreshes, or automated traffic.

4. How we use your data

We use personal data to:

• Create and manage your account and keep you signed in.
• Display the app and send account and service emails in your language. Account emails currently support English and Traditional Chinese, and fall back to English.
• Onboard, review, and moderate shops.
• Show shops and products to buyers and power search and discovery.
• Provide saving and other account features where available.
• Route buyers to a shop’s own contact channels.
• Handle reports and moderate content.
• Review feedback you submit, for support, moderation, and product improvement.
• Deliver in-app notifications and remember their read or unread status.
• Protect the Platform, including security checks and rate limiting to prevent abuse.
• Understand how the Platform is used and improve it, and give shops a basic sense of how buyers find them.
• Meet legal and regulatory obligations.

5. Service providers we use

We share data with a small number of service providers who process it on our behalf, only as needed to run the Platform. These providers may process or store data on servers outside Hong Kong (see section 12). We have not yet settled on a specific email provider or sending domain, and will update this page if that changes. Our current providers:

• Supabase: authentication, database, and file storage.
• Vercel: application hosting and delivery.
• An email (SMTP) provider: to send account and service emails such as confirmations and password resets.
• Storage and content-delivery (CDN) services: to store and serve images.
• Analytics or security providers: only if we add them later, and on the same data-minimisation basis.

6. We do not sell your data

We do not sell your personal data, and we do not share it with third parties for their own marketing.

7. How long we keep data

We keep personal data only as long as needed for the purposes above, for example while your account or shop is active, while a report is being handled, or as required by law. When data is no longer needed, we delete or anonymise it. Deleting a shop or product also removes its stored images.

8. How we protect data

We rely on reputable providers and on access controls, including database row-level security, so that, for example, buyers can only see their own saved items and sellers can only manage their own shop and products. No system is perfectly secure, but we take reasonable steps to protect your data.

One deliberate exception: shop and product images are stored in public-read storage so listings load fast for everyone. When a listing is public, its images are publicly visible, and anyone who has an image’s exact URL may be able to fetch it. Sellers should not upload private, confidential, personal, or sensitive images. Locbrant may resize, compress, store, display, and serve these images in order to operate and promote the Platform.

9. Your choices and rights

You can ask to access, correct, or delete your personal data, subject to applicable law. You can update much of your account and shop information directly on the Platform. For a request we cannot complete in-app, contact us using the details in section 14.

10. Marketing and service messages

Locbrant does not currently send marketing or notification emails. Notifications appear in-app only, and we store their read or unread status.

You can set notification preferences in your account. These preferences are stored as opt-ins for a possible future email channel; no such emails are sent today. If we ever send direct marketing, it will only be with your agreement, and you will be able to opt out at any time.

Account and service emails, such as signup confirmations and password resets, are needed to run your account and are not marketing.

11. Children

The Platform is intended for adults and is not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

12. International transfers

Our service providers may process or store data on servers located outside Hong Kong. Where data is transferred across borders, we rely on providers that offer appropriate safeguards. We will update this policy if our providers or their locations change materially.

13. Changes to this policy

We may update this Privacy Policy from time to time as Locbrant develops. When we do, we will change the “last updated” date above, and significant changes may be highlighted on the Platform.

14. Contact

You can contact Locbrant about privacy questions, data requests, or account issues by email at support@locbrant.hk. Signed-in users can also use the feedback form in their account at /account/feedback.