Privacy Policy

Last updated: June 12, 2026

LocalBasics ("we", "us", "our") operates the localbasics.com website and the LocalBasics application (collectively, the "Service"). This Privacy Policy describes how we collect, use, process, disclose, and safeguard your information when you visit our website or use our Service. Please read this policy carefully. By using the Service, you consent to the practices described herein.

1. Information We Collect

1.1 Information You Provide Directly

Account information: When you create an account, we collect your name, email address, and password. If you sign in using Google, we receive your name, email address, and profile picture from Google's authentication service.

Business information: To provide our listing synchronization service, we collect your business name, street address, city, state, postal code, country, phone number, website URL, business hours, categories, business description, social media URLs, payment methods accepted, additional phone numbers, year of incorporation, and other business details you provide. This is your "Business Data."

Google Business Profile data: If you connect your Google Business Profile ("GBP"), you explicitly authorize us to access and manage your GBP listing data through Google's APIs. This includes business attributes, reviews, menus, services, photos, and specialized hours. We access GBP data using our proprietary OAuth application with the business.manage scope.

Payment information: Payment processing is handled entirely by Stripe, Inc. We do not receive, store, or process your credit card number, bank account details, or other payment instrument data. We receive only your payment status, transaction amount, currency, and a Stripe customer identifier.

Communications: When you contact us through our contact form, email, or other channels, we collect the content of your communications along with your name and email address.

1.2 Information Collected Automatically

Usage data: We automatically collect information about how you interact with our Service, including pages visited, features used, actions taken, timestamps, and referring URLs.

Device and browser information: We collect your IP address, browser type, operating system, device type, and screen resolution.

Location data: We may infer your approximate geographic location from your IP address for the purpose of providing localized pricing and determining service availability in your country.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service delivery: To provide, operate, and maintain the listing synchronization service, including pushing your Business Data to publisher directories and keeping it accurate across platforms
• GBP management: To manage your Google Business Profile attributes, reviews, menus, services, and other listing data on your behalf
• Payment processing: To process your one-time purchase, verify payment status, and manage refund requests
• Account management: To create and manage your account, authenticate your identity, and provide customer support
• Service improvement: To understand how the Service is used, diagnose technical issues, and improve functionality
• Communications: To send you service-related notices, respond to your inquiries, and communicate material changes to the Service or these policies
• Security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, unauthorized access, and other illegal activities
• Legal compliance: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests

3. Legal Basis for Processing (EEA/UK)

If you are located in the European Economic Area ("EEA") or the United Kingdom ("UK"), our legal basis for collecting and using your personal data depends on the data concerned and the context in which we collect it:

• Performance of a contract: Processing your Business Data to deliver our listing synchronization service is necessary for the performance of the contract between us
• Legitimate interests: We process usage data and device information for our legitimate interests in improving the Service, ensuring security, and preventing fraud, provided these interests are not overridden by your data protection rights
• Consent: Where you connect your Google Business Profile, we process GBP data based on your explicit consent, which you may withdraw at any time by disconnecting your GBP account
• Legal obligation: We may process your data where required to comply with a legal obligation

4. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information. We share information only in the following circumstances:

4.1 Publisher Directories (Core Service Function)

Your Business Data (business name, address, phone, hours, categories, description, and related details) is shared with third-party publisher directories, maps, voice assistants, and other platforms. This includes but is not limited to Google, Apple Maps, Bing, Waze, MapQuest, Alexa, Siri, Google Assistant, Cortana, and approximately 60 additional directories. This sharing is the core function of the Service; your Business Data is transmitted to these publishers to create, update, and maintain accurate business listings on your behalf.

4.2 Service Providers

We engage trusted third-party service providers to assist in operating and delivering the Service. Each provider is contractually obligated to use your data only for the purposes for which it was shared and to maintain appropriate security measures. For a full list of our sub-processors or any data protection inquiries, please contact our Data Protection Officer at dpo@localbasics.com.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in the good-faith belief that such action is necessary to: (a) comply with a legal obligation, court order, or legal process; (b) protect and defend our rights or property; (c) prevent or investigate possible wrongdoing in connection with the Service; (d) protect the personal safety of users of the Service or the public; or (e) protect against legal liability.

4.4 Business Transfers

If LocalBasics is involved in a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal data may be transferred as part of that transaction. You will be notified via email and/or a prominent notice on our website of any change in ownership or uses of your personal data, as well as any choices you may have regarding your personal data. In such event, the acquiring entity will be bound by the terms of this Privacy Policy with respect to your personal data.

5. Cookies and Tracking Technologies

We use only essential cookies that are strictly necessary for the operation of the Service:

• Authentication cookies: To maintain your logged-in session and verify your identity
• Security cookies: To support security features and detect malicious activity

We do not use third-party tracking cookies, advertising cookies, or cross-site tracking technologies. We do not participate in ad networks or share data with advertising platforms.

6. Data Security

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/HTTPS
• Encryption of sensitive data at rest
• Row-level security policies enforcing tenant data isolation
• Service-role key separation for administrative operations
• Secure storage of OAuth tokens with access limited to authorized operations
• Regular review of data collection, storage, and processing practices

While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your account information and Business Data for as long as your account is active and the Service is operational. Specifically:

• Account data: Retained until you request account deletion or your account is terminated
• Business Data: Retained for the duration of the Service to maintain your listing synchronization. Upon account deletion, we will cease syncing your data to publishers, though existing listings on third-party platforms may persist (as they are controlled by those platforms)
• Payment records: Retained for the period required by applicable tax and financial regulations (typically 7 years)
• Usage data: Retained in aggregated, anonymized form for analytics purposes

Upon request for account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

8. Your Privacy Rights

8.1 General Rights (All Users)

Regardless of your location, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your account and associated data
• Disconnect your Google Business Profile at any time
• Withdraw consent for optional data processing
• Receive a copy of your Business Data in a portable format

To exercise any of these rights, contact us at privacy@localbasics.com.

8.2 European Economic Area and United Kingdom (GDPR)

If you are a resident of the EEA or UK, you have additional rights under the General Data Protection Regulation ("GDPR") and the UK GDPR, including:

• Right of access: You may request a copy of the personal data we process about you
• Right to rectification: You may request that we correct inaccurate personal data
• Right to erasure: You may request the deletion of your personal data, subject to certain exceptions
• Right to restrict processing: You may request that we restrict the processing of your personal data in certain circumstances
• Right to data portability: You may request a machine-readable copy of your personal data
• Right to object: You may object to processing based on legitimate interests
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing performed prior to withdrawal

You also have the right to lodge a complaint with your local data protection supervisory authority.

8.3 EU and UK Representation

We maintain GDPR representation in both the European Union and the United Kingdom in accordance with Article 27 of the GDPR. For details about our appointed representatives or any data protection inquiries, please contact our Data Protection Officer at dpo@localbasics.com.

8.4 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act ("CCPA") as amended by the California Privacy Rights Act ("CPRA"):

• Right to know: You may request that we disclose the categories and specific pieces of personal information we have collected, the categories of sources, the business purpose for collecting it, and the categories of third parties with whom we share it
• Right to delete: You may request deletion of your personal information, subject to certain exceptions
• Right to correct: You may request correction of inaccurate personal information
• Right to opt out of sale/sharing: We do not sell or share your personal information for cross-context behavioral advertising. Therefore, there is no need to opt out
• Right to non-discrimination: We will not discriminate against you for exercising any of your CCPA rights

To submit a request, email privacy@localbasics.com. We will verify your identity before processing any request. We will respond within 45 days, or notify you if we need additional time (up to 90 days total).

Categories of personal information collected (past 12 months):

• Identifiers (name, email, IP address, account ID)
• Commercial information (payment records, transaction history)
• Internet activity (usage data, pages visited, features used)
• Professional information (business name, address, phone, categories, hours)
• Geolocation data (approximate location from IP address)

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our service providers are located. These countries may have data protection laws that are different from the laws of your country. We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses approved by the European Commission where applicable.

10. Children's Privacy

The Service is not directed to individuals under the age of 18 and is intended for use by business owners and authorized representatives. We do not knowingly collect personal information from children under 16 (or under 13 in the United States). If we become aware that we have collected personal data from a child without appropriate parental consent, we will take steps to delete that information promptly. If you believe we may have collected information from a child, please contact us at privacy@localbasics.com.

11. Third-Party Links

The Service may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party service you access through our Service.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by: (a) posting the updated policy on this page with a revised "Last updated" date; and (b) sending you an email notification at the address associated with your account. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: privacy@localbasics.com
Contact form: localbasics.com/contact

For GDPR-related inquiries, please contact our Data Protection Officer at dpo@localbasics.com.