Privacy Policy

1. Who is responsible

L0CKED is operated by Austin Harman Designs, which is the controller of the personal data described here. Contact: [email protected].

2. What we collect

• Account data — your email address, display name, title, and profile photo if you upload one.
• Application data — company name, industry, region, year founded, revenue band and your attestation, plus any bio or references you provide.
• Identity verification outcome — whether your Stripe Identity check passed. We never receive or store your identity document.
• Content you create — posts, comments, reactions, photos, event listings and RSVPs, and direct messages.
• Moderation data — reports you file and blocks you set.
• Billing data — your subscription status and renewal date. Card numbers are handled by Stripe or Apple; we never see them.
• Technical data — sign-in tokens, device push tokens if you enable notifications, and standard server logs needed to run and secure the service.

3. How we use it

To operate the service: to verify eligibility and admit members, to run the directory, The Floor, cohorts, events, and messaging, to take payment and manage renewals, to moderate content and enforce our Terms of Use, to send service-related email such as sign-in links and notices, and to keep the service secure. That is the extent of it.

4. What we never do

• We do not sell or rent your personal data. Ever.
• We do not show ads, and we do not run third-party advertising or tracking SDKs.
• We do not build advertising profiles or track you across other apps and websites.
• We do not make your content public — L0CKED is members-only and is not indexed by search engines.

5. Who we share it with

Only the processors needed to run the service, each of which is bound to protect your data to at least the standard described here:

• Stripe — identity verification and card payments.
• Apple — if you subscribe through the App Store.
• Our hosting and email providers — to run the servers and deliver service email.
• Other members — your profile, verified tier, and anything you post inside the service is visible to other verified members by design.

We may also disclose data where required by law, or to protect the safety of members or the public.

6. How long we keep it

We keep your account data while your account exists. When you delete your account, your profile and content are permanently removed from the service; residual copies may persist briefly in encrypted backups, and we retain the minimum required for legal, tax, or fraud-prevention purposes. Server logs are kept for a limited period and then discarded.

7. Your rights and choices

• Access and correction — view and edit your profile from your account settings at any time.
• Deletion — delete your account from your account settings. This permanently erases your profile and content and cannot be undone.
• Export — request a copy of your data by writing to us.
• Withdraw consent — turn off push notifications on your device, and remove your profile photo at any time.

Depending on where you live (for example under GDPR or the CCPA) you may have additional rights, including to object to or restrict processing. Write to [email protected] and we will honour them.

8. Security

Data is encrypted in transit. Direct messages are encrypted at rest, sign-in tokens are stored hashed, and uploaded images are re-encoded and stripped of metadata (including any location data in the original photo). No system is perfect, but we treat member data as the confidential material it is.

9. Children

L0CKED is for business owners and is not directed at anyone under 18. We do not knowingly collect data from children. If you believe a minor has created an account, contact us and we will remove it.

10. International transfers

We operate from the United States, and your data is processed there. If you are outside the US, you consent to that transfer when you use the service.

11. Changes

If we make a material change to this policy we will notify members and update the date at the top of this page.

12. Contact

Privacy questions or requests: [email protected].