Lofrio Lofrio
Sign in Start free

Trust & security

Where your data lives, and who touches it.

Lofrio runs on a short list of providers. This page names each one, says where it runs and what it handles, and maps how data moves between them.

The short version.

Database
CanadaSupabase, ca-central-1
Files
Eastern North AmericaCloudflare R2
Backups
DailyAutomatic database backups
Card payments
StripeCard numbers never reach Lofrio
Lofrio 2.1
CanadaOur own photo model, hosted in Canada on H200 GPUs
AI training
NeverWe do not use your content to train AI models
Data export
Within 30 daysAsk at support@lofrio.com
After you close
90 daysThen your data is deleted. Tax and payment records are kept longer where the law requires.

What we commit to

Four commitments.

  1. 1

    We don’t train on your content.

    We do not use your content to train AI models.

  2. 2

    You can take your data with you.

    Ask at support@lofrio.com and you get your company’s export within 30 days. Data is deleted 90 days after an account closes, and deletion requests are handled within 30 days. Tax and payment records are kept longer where the law requires.

  3. 3

    We tell you about a breach.

    We notify affected companies and the Privacy Commissioner of Canada as soon as feasible after we learn of a breach that creates a real risk of significant harm.

  4. 4

    Card numbers never reach us.

    Payments go through Stripe to each company’s own account.

How your data moves

Every hop, drawn as it actually runs.

Pick a flow. The map lights up the servers involved and animates the data moving between them. Photo editing, delivery, payments, video, sign-in and the database each take a different route.

The stack

Every provider, by name.

Cloudflare
What it doesGlobal network, SSL on every company domain, the app and APIs (Workers), file storage (R2), queues and email sending
WhereGlobal network · files in Eastern North America
Data it touchesTraffic, files, emails
Supabase
What it doesDatabase and sign-in
WhereCanada (ca-central-1)
Data it touchesAccount and business data
Stripe (Connect)
What it doesCard payments to each company. Card numbers never reach Lofrio.
WhereUS, global
Data it touchesPayment details (at Stripe)
Google
What it doesSign in with Google, calendar sync (only when connected), address search, maps and drive times
WhereUS, global
Data it touchesName, email, calendar events, addresses
Amazon Web Services
What it doesOur ffmpeg servers for video rendering, and the HDR merging engine
WhereUS (us-east-2)
Data it touchesPhotos during the HDR merge, video project files during render
Motionbar
What it doesVideo models: AI video and On Camera. A sister company, founded by Lofrio’s founder.
Data it touchesPhotos and videos sent for video processing
Lofrio 2.1
What it doesOur own photo editing model
WhereCanada, on H200 GPUs
Data it touchesPhotos sent for editing

Optional integrations

These only receive data when a company connects them itself.

  • QuickBooks
  • Dropbox
  • Google Drive
  • Mailchimp
  • Slack
  • iGUIDE
  • CubiCasa
  • Chat widgets

Questions about security or privacy: support@lofrio.com

Bring your next listing into Lofrio.

Start free