Lofrio Lofrio
Sign in Start free

Legal

Privacy Policy.

How Lofrio handles personal data: who is responsible for it, where it is stored, how it is protected, what the Google and Dropbox connections can access, and your privacy rights.

Last updated: 12 November 2026

These are the privacy sections of Lofrio’s Policies and terms, with the numbers they have there.

1. Who we are and what these terms cover

Lofrio ("Lofrio", "we", "us"), operated by Lofrio Enterprises Inc. (100 King St W, Toronto, ON M5H 1H1, Canada), is a software platform for real estate media companies, such as photographers, videographers and their teams.

These terms cover three groups of people:

  • The company: the real estate media business that signs up for Lofrio and pays for it. The company's owner, admins and team members ("staff") use the staff app at app.<domain>.
  • Customers: the company's own clients, usually real estate agents, brokerages and their teams. They use the company's customer site at <slug>.<domain>, or at the company's own custom subdomain, to book, pay, download media and use AI tools.
  • Other people: people who appear in or interact with the content, for example an agent's client who gives consent for a testimonial, or a visitor who signs in at an open house.

Lofrio provides the tools. The company runs its own business on Lofrio. It sets its own prices, products, terms and policies for its customers, and it is responsible for its relationship with them (see section 4).

By creating an account, or by using Lofrio on behalf of a company, you agree to these terms. If you use Lofrio for a company, you confirm that you are allowed to accept these terms for it.

You must be 18 or older to use Lofrio. Lofrio is for business use only. It is for companies and their staff, and agents use it through a company.

10. Data and privacy

10.1 Roles

  • For the company's own account data, Lofrio is responsible for how we handle it.
  • For the company's customers' data (names, emails, orders, invoices, uploads, open house leads and so on), the company decides how it is used, and Lofrio processes it for the company. The company is the controller of that data and Lofrio is the processor.
  • A Data Processing Agreement (DPA) is available on request at support@lofrio.com.

10.2 Where data is stored

  • Files (photos, videos, music, documents, twin photos and voice recordings) are stored on Cloudflare R2. Uploads go straight from the browser to storage, and downloads come straight from storage through short-lived signed links.
  • Account, order, payment and settings data is stored in a Supabase (Postgres) database.
  • Our apps run on Cloudflare.
  • Card payments run through Stripe, in the company's own connected Stripe account. Lofrio does not store full card numbers.
  • AI work is processed by AI providers we choose. They receive only what is needed for the task (for example the photo being edited, or a twin's photos and voice when a video is made).
  • Other service providers help us send email, run renders and keep the service working. Our Trust page lists our service providers and where data is stored: Cloudflare (global), Supabase (Canada), Stripe, Google, AWS (us-east-2, United States) and Motionbar.

10.3 How we protect data

  • Private files are never public. They are shared only through short-lived links.
  • Consent records, terms acceptance records and similar tables can be read only by our servers after checks, never directly by browsers.
  • API keys are stored as one-way fingerprints, not as the keys themselves.
  • Locked galleries show only small, branded previews until payment, with no downloads.

10.4 Records we keep

  • Delivery terms acceptance: which document and version, the exact text shown and its fingerprint, who, when, IP address, country, browser, where and whether they read to the end.
  • Consent records for twins, testimonials and interviews (see section 7).
  • Order form terms acceptance, payment history, invoices and audit logs.

10.5 Open houses

  • Open house sign-ins belong to the agent (the listing's customer). The company sees only sign-in counts, never visitors' names or contact details.
  • Lofrio never emails or contacts open house visitors. Lofrio only gives agents a tool to collect leads. The agent is responsible for following the law when they contact a lead.

10.6 Reviews

Customers can rate their order. Only the real customer can leave a review. The company decides at what rating a customer is offered its Google review link. Lower ratings stay private and go to the company.

10.7 Keeping and deleting data

  • When a company cancels a paid plan, its account moves to Free and its data is kept.
  • When an account is closed, its data is kept for 90 days and then deleted.
  • Deletion requests are handled within 30 days.
  • To export its data, a company emails support@lofrio.com. We send the export within 30 days.
  • Some records (tax records, payments, invoices, consent and terms records) may be kept longer where the law requires or to resolve disputes. For example, tax records are kept for 7 years in Canada.

10.8 Google and Dropbox connections

Connecting Google or Dropbox is optional. Each connection asks for the smallest permission the feature needs, and you can disconnect at any time.

Sign in with Google (team members and customers)

  • We receive your name, email address and Google account ID (scopes: openid, email, profile). We use them only to sign you in and link your Lofrio account. We never receive your Google password.

Google Calendar (companies, optional)

  • What we access:
    • the list of your calendars, so you can choose one (calendar.calendarlist.readonly)
    • your busy and free times, so bookings don't clash with your other plans (calendar.freebusy)
    • the events Lofrio creates in the calendar you choose (calendar.events)
  • What we do: we read only when the calendar's people are busy, never the titles or details of their own events. We create, update and remove events for the company's shoots: the appointment time, the property address, the services and the customer's name, plus guests you add. When a shoot is rescheduled or cancelled, we update or remove its event.

Google Drive (companies, optional)

  • What we access: only the files and folders Lofrio creates in your Drive, and the files you pick yourself with Google's file picker (drive.file). We cannot see anything else in your Drive.
  • What we do: we copy the files you pick into an order, and place delivered media in folders Lofrio creates in your Drive.

Dropbox (companies, optional)

  • What we access: Lofrio uses a Dropbox app folder, so it can only reach the folder Apps/Lofrio in your Dropbox, never the rest of your files. Permissions:
    • account_info.read, to show which account is connected
    • files.metadata.read, files.metadata.write, files.content.read and files.content.write, to read, add and organise files in that folder
  • What we do: we place delivered media in that folder and import files you put there for an order.

How we handle Google and Dropbox data

  • Limited Use: Lofrio's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
  • What we never do with it:
    • We use Google and Dropbox data only to provide the features described above, which you can see and control in Lofrio.
    • We do not sell it.
    • We do not use it for advertising.
    • We do not use it to train AI models (general or our own). Lofrio does not use data from Google Workspace APIs to develop, improve or train generalized or non-personalized AI or machine-learning models.
    • We do not let people read it, except with your permission, for security, to comply with the law, or when it is part of data we have made anonymous for running the service.
  • Storage: access tokens are stored encrypted (AES-GCM) in our database in Canada and are used only to call Google's or Dropbox's API for your account.
  • Sharing: we do not share, transfer or disclose Google or Dropbox data to third parties, except:
    • the service providers that run Lofrio for us (Cloudflare for hosting, Supabase for our database in Canada), only to store and process it for the features above, under confidentiality and security obligations;
    • people you choose to share with in Lofrio (for example, your customer seeing the files you deliver, or guests you add to a shoot event);
    • when the law requires it.
  • Protection: all data is encrypted in transit (HTTPS/TLS) and at rest. Only Lofrio's systems use the access tokens; staff access is limited to what is needed for support and security.
  • Retention: we keep the access tokens and stored busy times only while the connection is active, and delete them when you disconnect. Files you import stay with your orders until you delete them or close your account (then deleted within 90 days).
  • Disconnecting:
    • Disconnect in Lofrio: Settings › Apps & integrations for Drive and Dropbox, or Calendar › Availability for Google Calendar. We revoke our access with Google or Dropbox and delete the stored tokens; for Google Calendar we also delete the busy times we stored.
    • You can also remove Lofrio's access from your Google Account (myaccount.google.com › Security › Third-party access) or your Dropbox settings (Connected apps).
    • After you disconnect, files already copied into Lofrio stay with your orders until you delete them, and events already in your calendar stay there.
  • Deletion: to have your Google or Dropbox data deleted, disconnect and email support@lofrio.com. We delete it within 30 days.

10.9 Privacy rights

People can ask to see, correct or delete their personal data. Requests about a company's customer data should go to that company first. Requests to Lofrio: support@lofrio.com. Lofrio follows Canada's privacy law (PIPEDA) and the laws of Ontario. We also honour privacy rights requests from people in the EU (GDPR) and California (CCPA).

17. Contact

Questions about these terms: support@lofrio.com
Privacy requests: support@lofrio.com
Reporting misuse, such as a fake endorsement or a video made without consent: support@lofrio.com

Lofrio Enterprises Inc. · 100 King St W, Toronto, ON M5H 1H1, Canada · support@lofrio.com