Privacy Policy

Effective [EFFECTIVE DATE]

This policy explains what personal data Local Pinmeter ([ENTITY NAME], [ADDRESS]) collects, why, how long we keep it, and what you can do about it.

1. Two roles

• For your account and billing, we decide how data is used. In legal terms we are the "controller".
• For the data agencies put in about their clients and leads, the agency decides. We process that data for the agency, under the Data Processing Agreement. If you filled in an agency's free-scan form, that agency is responsible for your data. Ask the agency first; we help it answer.
• Local Pinmeter's own free-scan page at localpinmeter.com/free-scan is ours, so for leads from that page we are the controller.

2. What we collect

We don't use advertising or analytics trackers in the app. Our public website, localpinmeter.com, uses Google Analytics (loaded through Google Tag Manager) to see which pages help visitors; it never uses advertising features. A banner lets you accept or decline; in the EEA, the UK and Switzerland it stays off until you accept. See the Cookie Notice.

3. Why we use it

• To run the service: scans, reports, share links, lead pages, imports and bulk posts. (Contract.)
• Billing and tax. (Contract; legal duty.)
• To improve our website: which pages visitors read and where they come from. (Legitimate interest; consent in the EEA, the UK and Switzerland.)
• Security and abuse prevention: sign-in, rate limits, the human check, one trial per agency, one free scan per business. (Legitimate interest.)
• Service emails: sign-up, password reset, credit warnings, scan reports, failed payments. (Contract.)
• Product news about Local Pinmeter. Every email has an unsubscribe link. (Legitimate interest, or consent where the law requires it.)
• Improving the service, using usage counts and the feedback you send. (Legitimate interest.)

We don't:

• sell personal data, or share it for cross-context advertising;
• use workspace content or leads for our own marketing;
• use your data to train AI models.

4. Who we share it with

• Service providers who process data for us, listed on the Subprocessors page: hosting, payments, the rank-data provider, maps, the human check and email.
  • What the rank-data provider receives: search keywords and map coordinates. It gets no lead or account data.
• Your clients and prospects, when you share a report link or PDF. Share links never show our costs or your internal notes.
• Google, when you publish posts to profiles you connected.
• Authorities, when the law requires it.
• A buyer or successor, if the business is sold or merged. This policy keeps applying.

5. How long we keep it

6. Data from Google

When you connect a Google account to publish Business Profile posts:

• We read the list of profiles and locations you manage, so you can match them to your projects.
• We write only the posts you create, to the locations you choose, at the time you choose.
• We keep the access tokens (encrypted) and a record of each post and its status. We delete them when you disconnect or close the workspace.
• We don't use Google data for advertising, sell it, or share it except to publish your posts. We don't let people read it except with your permission, for security, or when the law requires.
• We don't use it to train AI models.
• Google's policy. Local Pinmeter's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• Disconnecting. You can disconnect any time in the app's settings, or at myaccount.google.com/permissions.

7. Security

• Passwords are stored as secure hashes.
• Sign-in uses an HTTP-only cookie.
• All traffic is encrypted (HTTPS).
• Each agency's workspace is kept apart from every other.
• Visitor IP addresses on free-scan forms are stored only as keyed hashes.
• Access to production data is limited to the people who run the service.

No system is perfectly secure. If a breach affects your personal data, we tell you without undue delay.

8. Your rights

Self-service in the app:

• See and export your workspace data (CSV or JSON).
• Correct your account details and workspace content.
• Delete your account or close your workspace.
• Unsubscribe from product news with the link in any email.

Depending on where you live (for example the EU, the UK or California), you may also have the right to:

• object to or restrict processing;
• move your data;
• complain to your data protection authority.

We don't treat you differently for using these rights.

How to ask:

• For anything the app can't do, write to [LEGAL EMAIL]. We answer within 30 days.
• If an agency collected your data (for example through its free-scan page), ask that agency. We help it answer.

9. Where data is stored

• Local Pinmeter is run from the United States. Data is hosted in the US (Oregon).
• Some providers process data in other countries, as the subprocessor list shows.
• For transfers out of the EU or UK, we use the European Commission's Standard Contractual Clauses or another lawful transfer method.

10. Children

The service is for businesses and isn't meant for anyone under 18.

11. Changes

We post changes here and update the date at the top. For material changes, we tell account holders by email or in the app before they apply.