Privacy policy

Locio (locio.com.au) is an address API. Addresses you look up are not stored: we count how many lookups each key makes each day, because that is what the plan and the invoice are made of. There is no analytics and no advertising, and we never sell or share what we keep for anyone else's use. You can delete your account yourself at any time.

We handle personal information in line with the Australian Privacy Principles.

The text of a lookup is used to answer it and is not stored in our database. For each API key we keep the number of lookups and units used per day, and when the key was last used. Like every request, a lookup is written to our server logs with the address it was made to, which includes the query, the caller's IP address and the time; a lookup that takes too long is logged with its query so we can make it faster. Server logs are kept for at most 30 days and then deleted.

The demonstration on the front page sends what you type through our own server, so it is in those logs too.

An account keeps your email address, the handle you choose, and a hash of your password made with Argon2, never the password itself. If you set up two factor sign in or a passkey, those credentials are kept too.

Each API key is stored as a SHA-256 hash, so a copy of our database cannot call the API. We keep a short hint of it (its start and last four characters) so you can tell your keys apart, its name, and for a public key the websites allowed to use it. A revoked key is kept, disabled, until you delete the account.

If you connect an agent through MCP, we keep the agent's registration, a one time sign in code for ten minutes, and the API key it is given, which you can revoke like any other.

If you pay for a plan, Stripe takes the card and keeps the invoices; we never see the card. We keep your Stripe customer and subscription references, the plan, whether it is monthly or yearly, and when the period ends.

The contact form sends us your name, email address and message as an email, together with the IP address it came from, so we can deal with abuse. It is protected by Cloudflare Turnstile. We keep the email as long as it takes to answer you.

• Cloudflare sits in front of the site and the API, so every request passes through it and it sees your IP address. It runs Turnstile, the check that a person rather than a script is sending the contact form, and tells us which country a request came from, which decides the country a public key searches. We do not store that country.
• DigitalOcean runs our servers and database, in Sydney.
• Stripe takes payments and keeps invoices for paid plans.
• Resend delivers our emails: sign in and confirmation codes, and messages from the contact form.
• Google Workspace holds our mailbox, so an email you send us is stored there.
• OpenFreeMap serves the map tiles on address results, so your browser fetches them directly and it sees your IP address.
• Have I Been Pwned is asked, when you choose a password, whether it has appeared in a known breach. Only the first five characters of a hash of the password are sent; never the password, and nothing that identifies you.

Some of these process data outside Australia, including in the United States. Each is bound by its own terms to use it only to provide its service.

There are no advertising or analytics cookies.

• locio_session keeps you signed in, for up to 90 days. Signing in also sets short lived cookies that protect the forms against cross site requests.

These stay in your browser and are never sent to us: locio.theme, your light or dark choice; locio.docs.lang, the language the code samples show; locio.mcp.client, the agent you chose on the MCP page; and locio.api.key, a key you pasted into the API reference, until you close the tab.

• Server logs, including lookup queries: at most 30 days.
• Your account, keys, daily usage counts and agent connections: until you delete the account.
• Invoices: kept by Stripe for as long as the law requires, because they are tax records.
• Contact form messages: as long as it takes to deal with them.

Delete it yourself from /account/delete. A paid plan stops at once and the rest of the period is not refunded; then your email address, password, passkeys, API keys, usage counts and agent connections are deleted, and you are signed out everywhere. Invoices already issued stay with Stripe.

You can ask us for a copy of what we hold about you, to correct it, to delete it, or to stop using it. Write to [email protected]. We answer within 30 days, at no cost.

If you are not happy with our answer, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au. If you are in the United Kingdom or the European Union, you can also complain to your data protection authority.

Locio is a service for businesses and developers, not for children.

When this policy changes, the date at the top changes with it. The terms the API is offered under are on the licensing and terms page.