Your data. Your law. Your country.
Locoroo is built from the ground up for data sovereignty. Australian owned, Australian hosted, Australian governed. Every design decision prioritises your privacy and control.
How we protect your data
Australian Owned & Operated
Locoroo is a business registered and operating in Australia. The company, the team, and the infrastructure are all Australian. No foreign ownership, no foreign jurisdiction.
Australian Infrastructure
Hosted by Australian owned and operated service providers on Australian soil. Your data never leaves the country unless you explicitly send it abroad.
Australian Law
Your data is governed by Australian privacy law, not the US CLOUD Act, not the US PATRIOT Act, not foreign surveillance frameworks. Australian legal protections apply.
Encrypted at Rest
Per-user encryption keys protect your cached data. Even database-level access does not expose your content. Keys derived from your credentials, so only you can decrypt. API users get a separate encryption key wrapped per token.
Open Source
Every line of code is public. No hidden backdoors, no secret data collection, no undisclosed third-party sharing. Trust through transparency. Verify it yourself.
View source code →No Surveillance
No content scanning. No ad targeting. No behavioural tracking. No data mining. We cannot see your emails, calendar events, contacts, or documents by design.
Privacy by Design
Admins cannot see customer email content, calendar events, or documents. The architecture enforces data separation at the module level. Privacy is not a policy. It's a technical guarantee.
Open Standards
Built on open standards for email, calendar, contacts, and document editing. Your data lives in standard formats on your server. If you ever leave Locoroo, you take everything with you. No export tools needed.
API Security
API access is opt-in with explicit privacy acknowledgement. Granular per-module scopes (read/write per module). Named tokens with individual revocation. Industry-standard secure login for cloud agents. Token values never stored on the server.
Sound familiar?
US cloud providers can be forced to hand over your data under the CLOUD Act. No questions asked.
How Locoroo does itLocoroo operates entirely outside US jurisdiction. Australian hosted, Australian governed. No US law can compel access.
Your provider processes your email, calendar, and documents for features you didn't opt into. You can't turn it off.
How Locoroo does itNo content processing. No smart features built on reading your data. Our revenue comes from subscriptions, not from your data.
You have no idea what proprietary software does with your data. You just have to trust them.
How Locoroo does itEvery line of code is public. Security researchers, customers, and anyone can inspect how data is handled.
Your data deserves sovereignty
Start using a productivity suite that's built in Australia, for Australia.