Privacy Policy

1. What Data We Collect

• Account data: name, business name, email address, phone number, billing address, provided at signup or onboarding.
• Business data: your Google Business Profile information, reviews, posts, ranking data, and related metrics, accessed via manager-level Google account access you grant us.
• Payment data: processed directly by Stripe, our payment provider. We do not store full card details ourselves.
• Usage data: how you interact with the LocalPulse dashboard, for product improvement and support purposes.
• Communications: emails, support requests, and messages you send us.

2. How We Use Your Data

We use your data to: provide and operate the Service (replying to reviews, posting content, tracking rankings on your behalf); manage billing and subscriptions; send service-related and, where you've consented, marketing communications; provide customer support; and improve and secure the Service.

3. Legal Basis for Processing

We process your data on the basis of: performance of a contract (providing the Service you signed up for); legitimate interest (service improvement, security, fraud prevention); consent (marketing communications, where required); and legal obligation (accounting, tax records).

4. Sub-Processors and Third Parties

To operate LocalPulse, we share data with the following categories of service providers, each acting under their own data processing terms:

• Supabase (database hosting and authentication)
• Stripe (payment processing)
• Resend (transactional email delivery)
• Make.com (workflow automation connecting our systems to Google)
• Google (Google Business Profile API, for posts, reviews, and rankings)
• AI providers (e.g. OpenAI/GPT-4o-mini) for generating draft review replies and posts

5. International Data Transfers

Some of our service providers may process data outside the European Economic Area. Where this occurs, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms required under GDPR.

6. Data Retention

We retain your data for as long as your account is active, and for a reasonable period afterward to meet legal, accounting, or dispute-resolution obligations. You may request deletion of your data at any time, subject to our legal retention obligations (e.g. invoicing records under Dutch tax law).

7. Your Rights (GDPR)

If you are located in the EEA/UK, you have the right to: access the personal data we hold about you; request correction or deletion; object to or restrict certain processing; request data portability; and withdraw consent at any time where processing is based on consent. To exercise any of these rights, contact hey@local-pulse.io. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority.

8. Cookies

Our website uses cookies and similar technologies. Essential cookies are required for the site to function and cannot be disabled. Analytics cookies (Google Analytics) are only set with your consent, which you can give, refuse, or change at any time via the "Cookie Settings" link in our footer or the consent banner shown on your first visit. If you're an affiliate program participant, a referral tracking cookie (?ref=CODE) is set for up to 30 days when someone visits via your link — this is used solely to attribute signups to the correct affiliate and is not used for advertising or profiling.

9. Data Security

We apply appropriate technical and organizational measures to protect your data, including encrypted connections, access controls, and secure third-party infrastructure providers. No system is 100% secure, and we cannot guarantee absolute security.

This includes the single Google account we use to manage Google Business Profiles across our client base (see our Terms of Service, clause 3, for details on this shared-access model). In the event of a security incident affecting that account or our systems, we will notify affected clients without undue delay and, where legally required, notify the Dutch Data Protection Authority within 72 hours of becoming aware of the incident, in line with our GDPR obligations as data controller.

10. Children's Privacy

LocalPulse is a B2B service intended for business owners and is not directed at children. We do not knowingly collect data from individuals under 16.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or on this page, with an updated "Last updated" date.

12. Contact Us

For any privacy-related questions or requests:

JMG Digital Leuventraat 84, 1066 HC Amsterdam, Netherlands VAT: NL005200617B27 · KVK: 96285001 hey@local-pulse.io