Privacy Policy

Our Commitment to Privacy

Localight Inc. ("Localight," "we," "us," "our"), a Public Benefit Corporation, operates the Referree platform (referree.com). We know that you care about how your personal information is used and shared, and we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Referree platform and related services.

You may contact us at hello@localight.com with any privacy-related questions.

Applicability

This Privacy Policy applies to all information we collect through the Referree platform and services from current and former users, including you. "Services" means the products, services, content, features, technologies, and functions offered by Referree, including:

• QR code creation (URL, WiFi, vCard, email, event, SMS, and menu types)
• Branded short links and custom domains
• Click and scan analytics
• Link-in-bio creator pages
• Affiliate program management
• Open Graph share image hosting

This policy applies only to the Referree platform and not to the websites of other organizations to which we may provide links. We are not responsible for the privacy policies or practices of third-party sites.

Information We Collect

Account Information

When you create a Referree account, we collect:

• Email address
• Name (first and last, when provided via Google OAuth sign-in)
• Profile photo URL (when provided via Google OAuth)
• Authentication provider (email or Google)

Content You Create

When you use the Services, we store:

• QR code configurations and settings
• Short link destinations and metadata
• Custom domain configurations
• Uploaded images (such as Open Graph share images and QR code logos)
• Link-in-bio page content

Analytics Data

When someone clicks a short link or scans a QR code you created, we may collect:

• Approximate geographic location (country, region, city — derived from IP address)
• Device type and operating system
• Browser or scanning application
• Referrer URL
• Date and time of the click or scan

We do not collect personally identifiable information about the people who click your links or scan your QR codes. IP addresses used for geolocation are not stored in association with individual click records.

Automatically Collected Information

When you visit referree.com, we may automatically collect:

• IP address
• Browser type and version
• Operating system
• Pages visited and time spent
• Referring website

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Services
• Create and manage your account
• Process QR code creation and short link redirects
• Generate analytics reports for your links and QR codes
• Configure and maintain custom domains
• Communicate with you about service updates and changes
• Detect and prevent fraud, abuse, or malicious use of the platform
• Comply with legal obligations

Third-Party Service Providers

We use the following third-party services to operate the platform:

• Supabase — Authentication, database, and file storage
• Cloudflare — CDN, DNS management, Workers (link redirect processing), and custom domain SSL
• Google — OAuth authentication provider
• Netlify — Website hosting and deployment

These third-party providers have access to your personal information only to perform tasks on our behalf and are obligated to protect your data in accordance with their respective privacy policies. We do not sell your personal information to third parties.

Cookies and Session Storage

We use cookies and browser local storage for the following purposes:

• Authentication: Session tokens to keep you signed in (managed by Supabase Auth)
• Preferences: Local storage of your account preferences and draft form state
• Analytics: Understanding how visitors use the platform to improve the service

You can control cookie settings through your browser preferences. Disabling cookies may limit your ability to use certain features of the Services.

Data Security

We are committed to protecting your personal data. We use industry-standard security measures including:

• Encrypted data transmission (HTTPS/TLS)
• Secure cloud hosting with access controls
• Row-level security policies on all database tables
• OAuth 2.0 for third-party authentication

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

Data Retention

We retain your account information and content for as long as your account is active or as needed to provide the Services. If your account appears to have been inactive for 18 months, we may contact you to confirm whether you wish to keep it active.

Analytics data (click and scan records) is retained for the purpose of providing reporting to account holders. Aggregated, anonymized analytics data may be retained indefinitely.

Your Rights

You have the right to:

• Access your personal information by logging into your account settings
• Update your personal information at any time through your account
• Delete your account and associated data by contacting us at hello@localight.com
• Opt out of marketing communications by following the unsubscribe instructions in any email

Children's Privacy

The Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information.

Changes to This Policy

We reserve the right to modify or amend this Privacy Policy at any time. Changes will be posted on this page with an updated revision date. Your continued use of the Services after any changes constitutes your acceptance of the updated policy.

Contact Information

Inquiries regarding this Privacy Policy should be directed to:

Localight Inc.
1355 Loma Ave #305
Long Beach, CA 90804
United States

Email: hello@localight.com