Privacy Policy

Last updated: October 5, 2026

LOFTVO ("we", "Platform") respects the privacy of its users. This Privacy Policy explains how your personal data is collected, used, stored, and protected. By using the Platform, you agree to this policy.

1. Data Controller

Under Turkish Personal Data Protection Law No. 6698 ("KVKK") and the EU General Data Protection Regulation ("GDPR") where applicable, LOFTVO acts as the data controller for your personal data.

Contact: info@loftvo.com

2. Personal Data We Collect

2.1 Account Information

• Full name (from your Google account)
• Email address
• Profile picture (from your Google account)

2.2 Listing Information

• Property address and location
• Contact details (name, email, phone)
• Property specifications (rooms, area, price, etc.)
• Photographs

2.3 Technical Data

• IP address
• Browser type and version
• Device information
• Cookie data
• Page views and interaction data

3. Purposes of Data Processing

• Account creation and authentication
• Listing publication and management
• Providing Platform services
• Subscription and membership management
• Communication and notifications
• Compliance with legal obligations
• Platform security
• Service quality improvement

4. Legal Basis for Processing

Your personal data is processed based on:

• Your explicit consent
• Necessity for the performance of a contract
• Compliance with legal obligations
• Legitimate interests

5. Data Sharing

Your personal data may be shared with:

• Service providers: Hosting (Vercel), database (Supabase), authentication (Google OAuth), payment processing (Lemon Squeezy)
• Other users: Your listing information is visible to users browsing the Platform
• Legal authorities: When required by law

Your personal data is never sold to third parties for commercial purposes.

6. International Data Transfers

The Platform operates through cloud service providers. Your data may be processed in the following locations:

• Vercel (USA) — Web hosting
• Supabase (EU — eu-west-3) — Database
• Google (USA) — Authentication

All transfers comply with applicable data protection laws, including KVKK and GDPR where applicable.

7. Cookies

• Essential cookies: Required for session management and security
• Preference cookies: Language and display preferences
• Local storage: User preferences such as favorite listings

You can disable cookies through your browser settings, but some Platform features may not function properly.

8. Data Security

• SSL/TLS encryption
• Secure authentication (OAuth 2.0)
• Database access controls (Row Level Security)
• Regular security updates

9. Data Retention

Your personal data is retained for as long as necessary to fulfill the purposes for which it was collected. When you delete your account, your personal data is deleted or anonymized, subject to legal retention requirements.

10. Your Rights

Under KVKK and GDPR (where applicable), you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Object to automated decision-making
• Data portability
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

To exercise these rights, contact us at info@loftvo.com. We will respond within 30 days.

11. Changes to This Policy

This Privacy Policy may be updated from time to time. Significant changes will be communicated through the Platform. The current version is always available on this page.

12. Contact

For privacy-related questions:
Email: info@loftvo.com
Web: loftvo.com