Privacy Policy

Who this policy covers

This policy applies to people who create a Lookdoit account and to anyone whose information is submitted to Lookdoit by a business that uses the service. If a business invited you to Lookdoit, that business decides what content is uploaded about you and is responsible for its own handling of your information; this policy describes what we do with it on their behalf.

Information we collect

We collect the following categories of information:

• Account information. Your email address, and — if you sign in with Google or Apple — the name, email address, and profile identifier those providers return to us. We do not receive your Google or Apple password.
• Authentication data. Sign-in link tokens sent to your email, and server-side session records. Each session record stores an opaque session token, its expiry, and basic request metadata such as IP address, browser user-agent, and timestamps, which we use to keep the account secure and to let you review and revoke active sessions.
• Content you upload. Photos and videos from job sites, along with any captions, notes, timestamps, and file metadata attached to them.
• Cookies. A strictly necessary cookie that holds your sign-in session, and a locally stored flag that records whether you dismissed our cookie notice. See “Cookies” below.

We do not knowingly collect payment card numbers, government identifiers, or special categories of data (such as health or biometric data) through Lookdoit.

How we use your information

• To create your account and sign you in.
• To provide the service — storing, organizing, and displaying the content you or your business upload.
• To secure accounts, detect and prevent abuse, and troubleshoot problems.
• To send you service messages, such as sign-in links and important notices about the service.
• To comply with legal obligations and enforce our Terms of Service.

We do not use your content to train machine-learning models, and we do not sell or rent personal information.

Legal bases for processing (EEA and UK)

If you are in the European Economic Area or the United Kingdom, we rely on these legal bases: performance of a contract (to provide the service you signed up for), our legitimate interests (to keep the service secure and working), your consent (where we ask for it, such as non-essential cookies), and compliance with a legal obligation.

How we share information

We share personal information only as described here:

• Service providers. Companies that host our infrastructure and databases and that deliver our email (for example, our email delivery provider sends your sign-in links). They may process personal information only on our instructions.
• Identity providers. If you choose to sign in with Google or Apple, that provider processes the sign-in and shares limited profile information with us.
• The business you work with. Content and account information are visible to the Lookdoit account of the business that invited you or that you belong to.
• Legal and safety. When required by law, or to protect the rights, safety, and property of Lookdoit, our users, or the public.
• Business transfers. In connection with a merger, acquisition, or sale of assets, subject to this policy.

Connected platforms

When you or our team connect Google Business Profile, Facebook, Instagram, YouTube or TikTok to Lookdoit, we receive from that platform: your account name and identifier; the business profiles, pages, Instagram accounts or channels you manage; access and refresh tokens; and the results of posts we publish (post identifiers and links). We use this only to publish the posts you approved to the accounts you chose, to show you their status, and to keep the connection working.

Tokens are encrypted at rest, never shown in the browser, and deleted when you disconnect the platform or delete your account. We do not sell this data, use it for advertising, or share it with anyone except the platform it came from and service providers that host Lookdoit on our behalf. You can disconnect at any time as described on our data deletion page.

Lookdoit’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Lookdoit uses YouTube API Services. By connecting a YouTube channel you agree to the YouTube Terms of Service, and Google’s handling of your data is described in the Google Privacy Policy. You can revoke Lookdoit’s access at Google security settings.

Data retention

We keep account information for as long as your account is active and for a reasonable period afterward to meet legal, accounting, and security needs. Session records are deleted when they expire or when you sign out or revoke them. Uploaded content is retained until you or the business that controls it deletes it, or until the account is closed. When you ask us to delete your information, we remove it or anonymize it unless we are required to keep it.

Security

Personal information is transmitted over encrypted connections (HTTPS) and stored on servers with access controls. Sign-in uses either a one-time email link or a trusted identity provider rather than a reusable password on our side. No method of transmission or storage is completely secure, but we work to protect your information and to notify you and the authorities of a breach where the law requires it.

International transfers

Lookdoit is operated from the United States, and our service providers are primarily located there. If you access Lookdoit from outside the United States, your information will be transferred to and processed in the United States, which may have different data-protection laws than your country.

Your rights

Depending on where you live, you may have the right to access a copy of your personal information, to correct it, to delete it, to receive it in a portable format, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights, email us at formatd3@gmail.com. We will respond within the time the applicable law requires. You will not be treated differently for exercising your rights. If we cannot verify your request or the information is controlled by a business you work with, we will tell you and, where appropriate, refer you to that business.

European Economic Area and UK. You also have the right to lodge a complaint with your local data-protection authority.

California. California residents have the right to know what personal information we collect and how we use and disclose it, to request deletion or correction, and to not be discriminated against for exercising these rights. We do not sell personal information and do not share it for cross-context behavioral advertising, so no opt-out is required; you can still contact us with any question about your information.

Cookies

Lookdoit uses one strictly necessary cookie that keeps you signed in. Because it is essential to the service, it is not subject to consent and cannot be turned off while you use the site. We also store a small flag in your browser to remember that you dismissed our cookie notice. We do not use advertising or third-party analytics cookies.

Children

Lookdoit is a tool for businesses and is not directed to children. You must be at least 18 years old to create an account. We do not knowingly collect personal information from children under 13; if you believe a child has provided us information, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you by email or in the app. Continued use of Lookdoit after a change means you accept the updated policy.

Contact us

For any question about this policy or your personal information, email D3 Studio at formatd3@gmail.com.