LocalRanks Pro ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website at localrankspro.com and our services.
1. Information We Collect
Information you provide directly
- Account information: Name, email address, and password when you create an account.
- Business information: Business name, city, country, and website URL when you run an audit.
- Free tools: The business you look up and any website address or text you enter. Text you ask an AI tool to work on (for example a review to reply to) is sent to our AI provider to produce the result and is not stored by us. The ChatGPT visibility checker asks for your email address, which we keep as a contact so we can follow up about your result; we don't send you marketing emails unless you separately agree to them.
- Google Business Profile data: If you connect your GBP via OAuth, we access your business performance metrics, reviews, posts, photos, keywords, profile details and attributes, and we can update your profile, reply to reviews and publish posts when you ask us to.
- Your customers' contact details: If you use Review Requests, you provide names, email addresses and/or phone numbers of your customers. We use them only to send the review requests and one reminder you asked us to send, and to honour opt-outs. For this data you are the controller and we act as your processor.
- Communications: Any messages you send us via email or support channels.
Information collected automatically
- Usage data: Pages visited, features used, and actions taken within the platform.
- Device data: Browser type, operating system, and IP address.
- Cookies: Essential session cookies for authentication, and analytics cookies only if you accept them (see Cookies below). No advertising cookies.
2. How We Use Your Information
- To provide, operate, and improve the LocalRanks Pro service
- To generate GMB health audit reports and AI-powered recommendations
- To sync Google Business Profile data when you authorize the connection
- To send transactional emails (email verification, password reset, audit reports)
- To send trial-related notifications (trial started, expiry reminders)
- Only if you tick the box when unlocking an audit: a short series of tips and offers about improving your profile (4 emails over 10 days). Every email has a one-click unsubscribe link, and we stop as soon as you use it
- To send product emails you rely on, such as review alerts, profile change alerts and your weekly task list
- To send review request messages to your customers on your behalf, when you ask us to
- To detect and prevent abuse, fraud, or unauthorized access
- To comply with legal obligations
We do not sell your personal data to third parties. We do not use your data for advertising purposes.
3. Third-Party Services
We share data with the following trusted third parties only as necessary to deliver our service:
- Stripe: Processes payments and manages subscription billing. When you purchase a paid plan, your card details are entered directly into Stripe's secure checkout — we never receive or store your full card number. We receive and store limited billing information from Stripe (customer ID, subscription status, plan, billing period dates, and your billing email) to manage your account. Stripe may also process data for fraud prevention. Privacy Policy
- Neon (PostgreSQL): Database hosting for storing your account, audit, and GBP data. Privacy Policy
- Google APIs: We use Google Places API for business lookups and Google Business Profile APIs (with your consent) to fetch performance data. Privacy Policy
- OpenAI: Audit data, review text, and your business name, category and location are sent to OpenAI to generate AI summaries, recommendations, replies, descriptions and AI Visibility checks. Data is processed per OpenAI's API data usage policies. Privacy Policy
- Twilio: Delivers SMS review requests, when you choose to send them by text. Receives the recipient's phone number and the message. Privacy Policy
- Upstash: Rate limiting for public endpoints; processes IP addresses transiently. Privacy Policy
- Resend: Used to deliver transactional emails and review request emails. Privacy Policy
- Google Analytics 4 (only if you accept analytics cookies): Measures visits, traffic sources and steps such as starting an audit or signing up. Google signals and ad personalisation are turned off. Privacy Policy
- Microsoft Clarity (only if you accept analytics cookies): Records how pages are used (clicks, scrolling, page views) so we can fix confusing parts of the site. Privacy Policy
- Vercel: Application hosting and serverless infrastructure. Privacy Policy
4. Google OAuth & Business Profile Data
When you connect your Google Business Profile:
- We request access only to your business performance data via the Google Business Profile API.
- OAuth tokens are encrypted with AES-256-GCM before being stored in our database. We never store plain-text tokens.
- You can disconnect your GBP at any time from your dashboard. This immediately revokes our access and deletes your synced GBP data from our servers.
- We do not share your GBP data with any third party except as listed above.
5. Data Retention
- Account data: Retained while your account is active. You may request deletion at any time.
- Audit data: Retained indefinitely to support your audit history. You can delete individual audits from your dashboard.
- GBP synced data: Deleted immediately upon disconnecting your GBP.
- Email logs: Retained for 30 days by Resend for deliverability troubleshooting.
6. Security
We implement industry-standard security measures including:
- HTTPS/TLS encryption for all data in transit
- AES-256-GCM encryption for OAuth tokens at rest
- Bcrypt hashing for all passwords (cost factor 12)
- HTTP-only, SameSite cookies for authentication sessions
- Rate limiting on all public API endpoints
No method of transmission or storage is 100% secure. We encourage you to use a strong, unique password.
7. Your Rights
Depending on your location, you may have the right to:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your account and associated data.
- Portability: Request your data in a structured, machine-readable format.
- Objection: Object to certain types of data processing.
To exercise any of these rights, email us at info@localrankspro.com. We will respond within 30 days.
8. Cookies
Essential cookies (always on, needed for the service to work):
- Session cookie: Keeps you logged in during your session.
- OAuth state cookie: Short-lived (10 minutes) CSRF protection during GBP connection.
Analytics cookies (only if you click "Accept analytics" in the cookie banner):
- Google Analytics 4 (cookies starting
_ga): how visitors find and use the site. - Microsoft Clarity (cookies such as
_clck, _clsk): anonymised recordings and heatmaps of page use. Form fields are masked.
If you click "Reject", these scripts never load. You can change your choice any time with the "Cookie settings" link at the bottom of every page. We do not use advertising cookies.
9. Children's Privacy
LocalRanks Pro is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Continued use of the service after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have any questions about this Privacy Policy, please contact us: