1. Introduction
Local Marketing Manager ("we", "our", or "us") operates the Local Marketing Manager platform at localmarketing.so. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.
2. Information We Collect
Account Information
When you create an account, we collect information provided through our authentication provider (Clerk), which may include your name, email address, and profile picture.
Google Account Data
When you connect your Google account to manage your Google Business Profiles, we receive and store:
- OAuth tokens (access and refresh tokens) — encrypted at rest using AES-256-GCM encryption
- Google email address associated with the authorized account
- Google Business Profile data including business information, reviews, posts, media, and performance metrics
Usage Data
We may collect information about how you access and use the Service, including your IP address, browser type, pages visited, and actions taken within the platform.
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Service
- Manage your Google Business Profiles on your behalf as authorized
- Send notifications about your profiles, reviews, and scheduled content
- Generate analytics and reports about your business profile performance
- Provide AI-assisted content generation for business posts
- Process payments and manage subscriptions
- Communicate with you about service updates and support
- Detect, prevent, and address technical issues and abuse
4. Google API Services User Data Policy
Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically:
- We only use Google user data to provide and improve the Service's features that you have authorized
- We do not use Google user data for serving advertisements
- We do not sell Google user data to third parties
- We do not use Google user data for purposes unrelated to the Service
- Human access to Google user data is limited to cases where it is necessary for security purposes, to comply with applicable law, or for our internal operations — and only when the data has been aggregated and anonymized
5. Data Security
We implement appropriate technical and organizational measures to protect your information:
- Encryption at rest: OAuth tokens are encrypted using AES-256-GCM before storage
- Encryption in transit: All data transmitted between your browser and our servers uses TLS/HTTPS
- Access controls: Data is scoped to your organization with role-based access controls
- Token security: Google OAuth tokens are never exposed in API responses and are only decrypted when needed for authorized operations
While we strive to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.
6. Third-Party Services
We use the following third-party services to operate the platform:
- Google APIs — to access and manage your Google Business Profiles
- Clerk — for user authentication and account management
- Stripe — for payment processing and subscription management
- Anthropic (Claude AI) — for AI-assisted content generation
- Google Gemini — for AI-assisted image generation
Each third-party service has its own privacy policy governing how they handle data. We encourage you to review their policies.
7. Data Retention
We retain your personal information and Google account data for as long as your account is active or as needed to provide you with the Service. When you disconnect a Google account or delete your account:
- OAuth tokens for disconnected Google accounts are immediately deleted
- Cached Google Business Profile data is removed according to our retention schedule
- Account data is deleted upon request, subject to any legal retention requirements
8. Your Rights
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Delete your account and associated data
- Revoke Google account access at any time through the Service settings or your Google account
- Export your data in a portable format
- Object to processing of your personal data in certain circumstances
To exercise any of these rights, contact us at support@localmarketing.so.
9. Cookies
The Service uses cookies and similar technologies for authentication (session management via Clerk), security (CSRF protection for OAuth flows), and preferences. We do not use tracking cookies for advertising purposes.
10. Children's Privacy
The Service is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us at support@localmarketing.so.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after any changes constitutes acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at support@localmarketing.so.