Legal
Privacy policy
Last updated 23 August 2026. This policy explains how LokaNest processes personal data when you use the platform.
Controller and contact
The operator identified in the LokaNest Impressum is responsible for the platform's processing of personal data. Privacy questions and data-rights requests can be sent using the contact details listed there.
Data we process
Depending on how you use LokaNest, we process account and profile details, booking and payment references, property or host information, messages and support requests, verification documents, uploaded media, preferences, and technical security and access logs.
Purposes and legal bases
We process data to create and secure accounts, provide bookings and local experiences, process payments and refunds, communicate about transactions, operate support and moderation, prevent fraud and abuse, comply with legal obligations, and maintain the security and performance of the service. Depending on the activity, processing may be based on performance of a contract, legal obligations, legitimate interests, or consent where consent is required.
Service providers and transfers
LokaNest uses service providers for hosting and deployment, databases, payments, email delivery and media storage. Current infrastructure may include Vercel, Neon, Stripe, Resend and Cloudinary. These providers process data for their respective services under their own contractual and privacy arrangements. Where data is transferred outside the EEA, appropriate transfer safeguards are used where required.
Retention
We keep personal data only for as long as needed for the purpose for which it was collected and for applicable legal, accounting, fraud-prevention and dispute-resolution obligations. Retention periods therefore vary by data category and transaction status.
Your data-protection rights
Subject to the GDPR and applicable law, you may have rights to access, correct, delete, restrict or object to processing, receive portable data, and withdraw consent for future processing. You may also lodge a complaint with a competent data-protection supervisory authority.
Security and updates
We use technical and organisational measures intended to protect personal data, including access controls and secure transport. No online service can guarantee absolute security. We may update this policy when the service, providers or legal requirements change and will publish the current version here.