Privacy Policy
Last updated: October 25, 2026
This policy explains what personal data LocalBot (localbot.pro) handles and why. The controller is Open Sales LLC, Florida, USA. Contact: support@localbot.pro.
What we collect
- Account data: your name, email, agency name and a hashed password (we can't read it).
- Client site data you add: website addresses, business facts, articles, photos you upload and the WordPress connection key, which is stored encrypted.
- Billing data: your plan and payment status. Card details go directly to Stripe; we never see or store them.
- Technical data: log entries with IP addresses and times, used for security (for example to block repeated wrong passwords) and to fix errors. Failed-login records are deleted after one day.
Google account data
If you use Connect Google for a website you manage, you let LocalBot read that site's Google Search Console data (searches, clicks, rankings), Google Analytics 4 data (visits) and Google Business Profile data (locations, reviews, insights), and see the Google account's email address. We use this data only to show you your own results inside LocalBot and in the reports you choose to send. We don't sell it, use it for advertising, let people read it except where you share a report or where the law requires it, or use it to train AI models. The access keys Google gives us are stored encrypted. You can disconnect at any time in the site's SEO settings or at myaccount.google.com/permissions; we then delete the keys and stop reading new data.
LocalBot's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Why we use it
To provide the service you signed up for (the legal basis is our contract with you), to keep it secure and working (our legitimate interest), to send emails you can switch off in each site's settings (notifications and the weekly summary), and to meet legal obligations such as tax records.
Who processes it for us
- DigitalOcean: hosting, in Frankfurt, Germany.
- Stripe: payments and invoices.
- Anthropic and OpenAI: AI models that write and check articles. They receive the business facts and article text needed for each article.
- DataForSEO: search volumes and search results for your clients' keywords.
- Our email provider: to send account and notification emails.
- Google: Search Console, Analytics and Business Profile data you connect (see above), and Google Fonts for the fonts on these pages.
Some of these companies are in the USA. Where personal data from the EU is transferred, it's protected by the EU Standard Contractual Clauses or the EU–US Data Privacy Framework. We don't sell personal data or use it for advertising.
How long we keep it
While your account is open. After you close it we delete your workspace data within 30 days, except backups (kept up to 14 days) and records we must keep by law, such as invoices.
Cookies
We use only the cookies needed to log you in and protect forms (a session cookie and a security token). No tracking or advertising cookies.
Your rights
You can ask us for a copy of your data, to correct or delete it, to restrict or object to its use, or to receive it in a portable format. Email us and we'll answer within 30 days. If you're in the EU or UK you can also complain to your data protection authority.
Your clients' data
When you add information about your clients' businesses, you decide what's added, and we process it on your behalf to write their articles. Don't add sensitive personal data (for example health information about individuals) to business facts.
Security
Connections use HTTPS, passwords are hashed, WordPress keys are encrypted, and each workspace can only see its own data. Backups are checked daily.
Changes
If we change this policy in a way that matters, we'll tell you by email or in the app before it applies.