LocalRank Pro ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website at localrankspro.com and our services.
1. Information We Collect
Information you provide directly
- Account information: Name, email address, and password when you create an account.
- Business information: Business name, city, country, and website URL when you run an audit.
- Google Business Profile data: If you connect your GBP via OAuth, we access your business performance metrics, reviews, posts, keywords, and Q&A data.
- Communications: Any messages you send us via email or support channels.
Information collected automatically
- Usage data: Pages visited, features used, and actions taken within the platform.
- Device data: Browser type, operating system, and IP address.
- Cookies: Session cookies for authentication; no advertising or tracking cookies.
2. How We Use Your Information
- To provide, operate, and improve the LocalRank Pro service
- To generate GMB health audit reports and AI-powered recommendations
- To sync Google Business Profile data when you authorize the connection
- To send transactional emails (email verification, password reset, audit reports)
- To send trial-related notifications (approval, expiry reminders)
- To detect and prevent abuse, fraud, or unauthorized access
- To comply with legal obligations
We do not sell your personal data to third parties. We do not use your data for advertising purposes.
3. Third-Party Services
We share data with the following trusted third parties only as necessary to deliver our service:
- Lemon Squeezy: Acts as the Merchant of Record for all payment processing, subscription billing, and tax collection on our behalf. When you purchase a paid plan, your payment information is collected and processed directly by Lemon Squeezy — we never receive or store your card details. Privacy Policy
- Neon (PostgreSQL): Database hosting for storing your account, audit, and GBP data. Privacy Policy
- Google APIs: We use Google Places API for business lookups and Google Business Profile APIs (with your consent) to fetch performance data. Privacy Policy
- OpenAI: Audit text is sent to OpenAI to generate AI summaries and recommendations. Data is processed per OpenAI's API data usage policies. Privacy Policy
- Resend: Used to deliver transactional emails. Privacy Policy
- Vercel: Application hosting and serverless infrastructure. Privacy Policy
4. Google OAuth & Business Profile Data
When you connect your Google Business Profile:
- We request access only to your business performance data via the Google Business Profile API.
- OAuth tokens are encrypted with AES-256-GCM before being stored in our database. We never store plain-text tokens.
- You can disconnect your GBP at any time from your dashboard. This immediately revokes our access and deletes your synced GBP data from our servers.
- We do not share your GBP data with any third party except as listed above.
5. Data Retention
- Account data: Retained while your account is active. You may request deletion at any time.
- Audit data: Retained indefinitely to support your audit history. You can delete individual audits from your dashboard.
- GBP synced data: Deleted immediately upon disconnecting your GBP.
- Email logs: Retained for 30 days by Resend for deliverability troubleshooting.
6. Security
We implement industry-standard security measures including:
- HTTPS/TLS encryption for all data in transit
- AES-256-GCM encryption for OAuth tokens at rest
- Bcrypt hashing for all passwords (cost factor 12)
- HTTP-only, SameSite cookies for authentication sessions
- Rate limiting on all public API endpoints
No method of transmission or storage is 100% secure. We encourage you to use a strong, unique password.
7. Your Rights
Depending on your location, you may have the right to:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your account and associated data.
- Portability: Request your data in a structured, machine-readable format.
- Objection: Object to certain types of data processing.
To exercise any of these rights, email us at info@localrankspro.com. We will respond within 30 days.
8. Cookies
We use only essential cookies required for the service to function:
- Session cookie: Keeps you logged in during your session.
- OAuth state cookie: Short-lived (10 minutes) CSRF protection during GBP connection.
We do not use advertising, analytics, or tracking cookies.
9. Children's Privacy
LocalRank Pro is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Continued use of the service after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have any questions about this Privacy Policy, please contact us: