1. Introduction
This Privacy Policy explains how Lotta ("we", "us") collects, uses, stores, shares, and protects user data.
By using Lotta, you agree to this Privacy Policy.
Your privacy matters to us. Learn how we collect, use, and protect your personal data on Lotta.
Your data is never sold to third parties
All data is encrypted in transit
We monitor for safety and moderation
Access, correct, or delete your data
This Privacy Policy explains how Lotta ("we", "us") collects, uses, stores, shares, and protects user data.
By using Lotta, you agree to this Privacy Policy.
We may collect the following:
a) Account & Basic Details
• Username
• Email (if provided)
• Profile information
• Gender and age preferences
b) Device & Technical Data
• IP address
• Device information (type, model, OS)
• Country/region
• Browser/app info
• Usage analytics
• Session duration and frequency
• Connection quality metrics
c) Payment Information
• Transaction ID
• Payment status
• Gateway reference details
• Purchase history
We do not store card numbers, CVV, or bank credentials.
d) Video & Audio Data
• Camera and microphone permissions status
• Video/audio quality settings
• WebRTC connection metadata
• Peer connection statistics
• Session recordings (when required for safety/moderation)
e) Images, Chats & Interaction Logs
For safety and moderation, we may store:
• Chat messages (text and media)
• Images shared during sessions
• Voice interactions
• Screenshots (for moderation purposes)
• Session logs & metadata
• Match history and skip patterns
• Report submissions
We collect and process data for:
• Running and improving the platform
• User authentication and account management
• Matching users based on preferences
• Moderation and safety enforcement
• Preventing abuse, fraud, scams, harassment
• Legal compliance
• Payment processing
• Dispute resolution
• Security monitoring and threat detection
• Platform analytics and performance optimization
• Customer support
Legal basis includes:
• Legitimate interest
• Contract necessity
• Legal obligation
• Explicit user consent
We retain data as necessary for:
• Platform operation
• Safety & security investigations
• Legal compliance and regulatory requirements
• Active investigations or disputes
• Fraud prevention and detection
Retention periods:
• Session data and logs: Retained for legal compliance and safety purposes
• Chat logs and interactions: Retained for moderation, safety, and legal compliance
• Moderation reports and flags: Retained indefinitely for safety records
• Account data: Duration of account + 30 days after deletion request
• Payment records: As required by law (minimum 7 years)
• User reports and safety incidents: Retained for legal and safety purposes
We retain data to comply with legal obligations, resolve disputes, enforce agreements, and maintain platform safety.
We may share data with:
• Payment gateways (for transaction processing)
• Hosting & infrastructure providers (AWS, cloud services)
• Moderation & security tools
• Analytics services (anonymized data)
• Law enforcement when legally required
We do not sell user data to third parties.
All third-party processors are bound by confidentiality agreements.
Our platform uses WebRTC for peer-to-peer video and audio communication.
• Video/audio streams are typically transmitted directly between users (peer-to-peer)
• We do not routinely record video calls
• However, we may capture screenshots or recordings for:
- Moderation purposes
- Safety investigations
- Responding to reports
- Legal compliance
• We use AI-powered gender detection and NSFW content detection
• Camera and microphone access is required for video chat features
• You can control your camera/microphone settings at any time
By using video features, you consent to this processing.
To maintain a safe environment:
• Text messages may be monitored by automated systems
• Flagged content is reviewed by human moderators
• Images shared in chat may be scanned for inappropriate content
• We use AI to detect harassment, spam, and harmful content
Users should not expect complete privacy in their communications.
We implement industry-standard security measures:
• Encrypted data transmission (HTTPS/WSS)
• Secure WebRTC connections
• Regular security audits
• Access controls and authentication
• Secure payment gateway integration
However, no system is 100% secure. Users participate at their own risk.
Lotta is strictly 18+ only.
We do not knowingly collect data from minors.
Accounts will be immediately terminated if discovered to belong to minors.
If you believe a minor is using our platform, please report it to: [email protected]
Depending on applicable laws, users may request:
• Access to their data
• Correction of incorrect data
• Deletion of data (unless restricted by law or security need)
• Data portability
• Restriction of processing
• Objection to processing
To exercise your rights, email: [email protected]
Note: Some data may be retained for legal compliance, safety investigations, or dispute resolution.
We use cookies and local storage to:
• Maintain user sessions
• Remember preferences (video quality, audio settings)
• Store match history temporarily
• Analytics and performance tracking
• Authentication tokens
You can manage cookies through your browser settings, but this may affect platform functionality.
We may preserve and disclose data to law enforcement if:
• Legally required by court order or subpoena
• There is credible threat of harm
• Illegal activity is detected
• To protect our rights, property, or safety
• To protect users from harm
Data that may be disclosed includes:
• Account information
• IP addresses and device data
• Chat logs and images
• Session metadata
• Report submissions
Lotta operates globally. Your data may be transferred to and processed in countries other than your own.
We ensure appropriate safeguards are in place for international transfers.
We strive to comply with:
• India's Digital Personal Data Protection (DPDP) Act
• General principles of GDPR (where applicable)
• Other applicable data protection laws
Our platform integrates with third-party services:
• Payment gateways (Razorpay, Stripe, etc.)
• Cloud hosting providers
• Analytics services
• AI/ML APIs for content moderation
These services have their own privacy policies. We encourage you to review them.
We may update this Privacy Policy from time to time.
Changes will be posted on this page with an updated 'Last Updated' date.
Continued use of the platform after changes constitutes acceptance.
For significant changes, we may notify users via email or platform notification.
For privacy concerns, data requests, or questions:
📧 Email: [email protected]
🛡️ Safety concerns: [email protected]
💬 General support: [email protected]
We will respond to requests within 30 days.
If you have any questions or concerns about how we handle your data, our privacy team is here to help.