Privacy Policy
This Privacy Policy explains what personal data Lootbeez collects, why, how long we keep it and the choices you have. We collect only what we need to run the service. The data controller (data fiduciary) is Abhishek Kumar, Hariwatika Chowk, Bettiah, West Champaran, Bihar, India.
1. Data we collect
Account data: name, email address and a securely hashed password. Brand data: what you submit in a Listing (name, category, link, description, country, language, logo). Payment data: order ID, amount, currency, status and the payment partner's reference — never your full card number. Support data: messages you send us. Reviews: the rating and text you post, shown publicly with your display name. Usage data: pages viewed and outbound brand clicks, recorded with an anonymous identifier (see section 3). Security data: technical signals used by our anti-bot check.
2. How we use it
To create and secure your account; to review and publish Listings; to process and verify payments and run Campaigns; to calculate rankings; to send service messages (approvals, payments, expiry, rank changes, reviews, support replies); to prevent fraud, spam and abuse; to measure Placement performance; and to meet legal obligations.
3. Analytics without raw IP addresses
For page views and outbound clicks we store a daily-rotating anonymous hash derived from your IP address and browser. We do not store raw IP addresses in our analytics, and the hash changes every day, so visitors cannot be followed across days. We may also use Cloudflare Web Analytics (cookie-free) and Google Analytics to understand overall traffic; Google Analytics may set analytics cookies and receives your IP address and browser details under the Google privacy policy.
4. Cookies and local storage
We do not use advertising cookies. If Google Analytics is enabled it sets analytics cookies (such as _ga) to count visits. Your browser's local storage keeps your sign-in token and small preferences (for example, whether you have already seen the Champion animation). Our anti-bot provider may set a strictly necessary cookie to verify that you are human.
5. Who we share data with
Service providers that help us run Lootbeez, under contract and only for that purpose: hosting and security (Cloudflare), payment processing (our payment partner), email delivery and traffic analytics (Cloudflare, Google). Public information you add to a Listing is visible to everyone. We may disclose data if required by law or to protect our users and service. We do not sell personal data.
6. International transfers
Our providers may process data in countries other than yours. Where required, we rely on appropriate safeguards for such transfers.
7. How long we keep data
Account and Listing data: while your account is active, and up to 30 days after deletion. Payment and invoice records: as long as tax and accounting laws require (typically up to 8 years). Anonymous analytics: up to 24 months. Support messages: up to 3 years.
8. Security
We use encryption in transit, hashed passwords, server-side authorisation checks, rate limiting and audit logs. No system is perfectly secure; please use a strong, unique password.
9. Your rights
Depending on where you live (including under India's Digital Personal Data Protection Act, 2023 and the EU/UK GDPR), you may have the right to access, correct, delete or obtain a copy of your personal data, to withdraw consent and to raise a grievance. You can edit your details and request deletion in Account settings, or contact Support. You may also complain to your local data protection authority.
10. Children
Lootbeez is not intended for anyone under 18, and we do not knowingly collect their data.
11. Changes
We may update this policy and will show the new date at the top. Material changes will be announced on the site.
12. Contact / grievance officer
Grievance officer: Abhishek Kumar, Hariwatika Chowk, Bettiah, West Champaran, Bihar, India. Email lootbeezinvest@gmail.com (subject "Privacy") or call +91 70509 31017. You can also open a ticket from the Support page. We acknowledge requests within 72 hours and aim to resolve them within 30 days.