Privacy Policy
Last updated: September 16, 2026
LocalBasics ("we", "us", "our") operates the localbasics.com website and the LocalBasics application (collectively, the "Service"). This Privacy Policy describes how we collect, use, process, disclose, and safeguard your information when you visit our website or use our Service. Please read this policy carefully. By using the Service, you consent to the practices described herein.
1. Information We Collect
1.1 Information You Provide Directly
Account information: When you create an account, we collect your name, email address, and password. If you sign in using Google, we receive your name, email address, and profile picture from Google's authentication service.
Business information: To provide our listing synchronization service, we collect your business name, street address, city, state, postal code, country, phone number, website URL, business hours, categories, business description, social media URLs, payment methods accepted, additional phone numbers, year of incorporation, and other business details you provide. This is your "Business Data."
Google Business Profile data: If you connect your Google Business Profile ("GBP"), you explicitly authorize us to access and manage your GBP listing data through Google's APIs. This includes business attributes, reviews, menus, services, photos, and specialized hours. We access GBP data using our proprietary OAuth application with the business.manage scope.
Payment information: Payment processing is handled entirely by Stripe, Inc. We do not receive, store, or process your credit card number, bank account details, or other payment instrument data. We receive only your payment status, transaction amount, currency, and a Stripe customer identifier.
Communications: When you contact us through our contact form, email, or other channels, we collect the content of your communications along with your name and email address.
1.2 Information Collected Automatically
Usage data: We automatically collect information about how you interact with our Service, including pages visited, features used, actions taken, timestamps, and referring URLs.
Device and browser information: We collect your IP address, browser type, operating system, device type, and screen resolution.
Location data: We may infer your approximate geographic location from your IP address for the purpose of providing localized pricing and determining service availability in your country.
Advertising pixels: When you visit localbasics.com, advertising pixels from Quora and Reddit may collect the pages you view, your IP address, browser and device information, and cookie or similar identifiers. Reddit's pixel may also collect a hashed (scrambled) version of an email address you type into a form on our website. See section 6 for details and how to opt out.
2. How We Use Your Information
We use the information we collect for the following purposes:
- Service delivery: To provide, operate, and maintain the listing synchronization service, including pushing your Business Data to publisher directories and keeping it accurate across platforms
- GBP management: To manage your Google Business Profile attributes, reviews, menus, services, and other listing data on your behalf
- Payment processing: To process your one-time purchase, verify payment status, and manage refund requests
- Account management: To create and manage your account, authenticate your identity, and provide customer support
- Service improvement: To understand how the Service is used, diagnose technical issues, and improve functionality
- Communications: To send you service-related notices, respond to your inquiries, and communicate material changes to the Service or these policies
- Advertising: To measure how our ads on Quora and Reddit perform, and to show our ads to people who have visited our website
- Security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, unauthorized access, and other illegal activities
- Legal compliance: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests
3. Legal Basis for Processing (EEA/UK)
If you are located in the European Economic Area ("EEA") or the United Kingdom ("UK"), our legal basis for collecting and using your personal data depends on the data concerned and the context in which we collect it:
- Performance of a contract: Processing your Business Data to deliver our listing synchronization service is necessary for the performance of the contract between us
- Legitimate interests: We process usage data and device information for our legitimate interests in improving the Service, ensuring security, and preventing fraud, provided these interests are not overridden by your data protection rights
- Advertising measurement: We use advertising pixels on our website to measure and improve our advertising. You may object to this at any time using the choices described in section 6
- Consent: Where you connect your Google Business Profile, we process GBP data based on your explicit consent, which you may withdraw at any time by disconnecting your GBP account
- Legal obligation: We may process your data where required to comply with a legal obligation
4. Information Sharing and Disclosure
We do not sell, rent, or trade your personal information for money. We share information only in the following circumstances:
4.1 Publisher Directories (Core Service Function)
Your Business Data (business name, address, phone, hours, categories, description, and related details) is shared with third-party publisher directories, maps, voice assistants, and other platforms. This includes but is not limited to Google, Apple Maps, Bing, Waze, MapQuest, Alexa, Siri, Google Assistant, Cortana, and approximately 60 additional directories. This sharing is the core function of the Service; your Business Data is transmitted to these publishers to create, update, and maintain accurate business listings on your behalf.
4.2 Service Providers
We engage trusted third-party service providers to assist in operating and delivering the Service. Each provider is contractually obligated to use your data only for the purposes for which it was shared and to maintain appropriate security measures. For a full list of our sub-processors or any data protection inquiries, please contact our Data Protection Officer at dpo@localbasics.com.
4.3 Legal Requirements
We may disclose your information if required to do so by law or in the good-faith belief that such action is necessary to: (a) comply with a legal obligation, court order, or legal process; (b) protect and defend our rights or property; (c) prevent or investigate possible wrongdoing in connection with the Service; (d) protect the personal safety of users of the Service or the public; or (e) protect against legal liability.
4.4 Advertising Partners
We use advertising pixels from Quora and Reddit on localbasics.com. These share information about your visit with Quora and Reddit, as described in section 6, so we can measure our ads and show them to people who have visited our website. Quora and Reddit handle that information under their own privacy policies. Under California and some other state privacy laws, this may be treated as selling or sharing personal information for cross-context behavioral advertising. You can opt out at any time at Do Not Sell or Share My Personal Information. Advertising partners never receive your mobile phone number or text messaging consent (see section 5.4).
4.5 Business Transfers
If LocalBasics is involved in a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal data may be transferred as part of that transaction. You will be notified via email and/or a prominent notice on our website of any change in ownership or uses of your personal data, as well as any choices you may have regarding your personal data. In such event, the acquiring entity will be bound by the terms of this Privacy Policy with respect to your personal data.
5. Text Messages (SMS)
If you choose to receive text messages from LocalBasics, this section describes how we handle your mobile number and your consent. Text messages are optional. You are never enrolled automatically, and consent to receive them is never a condition of purchasing or using the Service.
5.1 How We Collect Consent
You opt in from within your account, under Settings → Text updates. You enter your own mobile number and tick a box that is unchecked by default. We then send a one-time verification code to that number, which you must enter before any further messages are sent. This means we only ever hold consent for a number you have demonstrably shown you control. We record the verified number, the date and time of consent, the IP address from which it was given, and the exact wording you agreed to. A public description of this flow, including the wording shown, is available at app.localbasics.com/text-updates.
5.2 What We Send
Customer care messages about your own business listings only: notifications that something on your listing needs attention, proposed changes for you to approve or decline, replies to questions you send us, and verification codes. We do not send marketing or promotional text messages. Message frequency is up to 3 messages per day. Message and data rates may apply.
5.3 How to Stop
Reply STOP to any message to end them immediately, or turn them off in Settings. Reply HELP for information about the program and how to contact us. Opting out of text messages does not affect your use of the rest of the Service.
5.4 Sharing of Mobile Information
We do not share your mobile phone number or your text messaging consent with third parties for marketing or promotional purposes, and we do not sell this information. Your mobile number is shared only with the messaging provider that delivers the messages on our behalf, and only for that purpose. This is separate from, and narrower than, the Business Data sharing described in section 4: your mobile number is not published to directories.
All the above categories exclude text messaging originator opt-in data and consent; this information won't be shared with any third parties.
6. Cookies and Tracking Technologies
We use the following cookies and similar technologies:
- Essential cookies (LocalBasics app): Authentication cookies to keep you signed in and verify your identity, and security cookies to detect malicious activity. These are strictly necessary and cannot be switched off.
- Website analytics (Plausible): Counts visits and pages viewed on localbasics.com. It does not use cookies and does not collect personal data.
- Referral attribution (Dub): When you arrive at our website through a partner or affiliate link, records which link referred you, so we can credit the partner.
- Advertising pixels (Quora and Reddit): On localbasics.com, these record the pages you visit and may set or read cookies and similar identifiers, so we can measure our ads on those platforms and show our ads to people who have visited our website. Reddit's pixel may also collect a hashed version of an email address you type into a form on our website.
6.1 Your Choices
- Opt out of advertising pixels: Use our Do Not Sell or Share My Personal Information page. Once you opt out, the Quora and Reddit pixels do not load in that browser.
- Global Privacy Control: If your browser sends a Global Privacy Control (GPC) signal, we treat it as an opt-out and the advertising pixels do not load.
- Browser settings: You can block or delete cookies in your browser settings. Blocking essential cookies will prevent you from signing in to the app.
- Platform settings: Quora and Reddit let you manage how ads are personalized to you from your account settings on their sites.
7. Data Security
We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit using TLS/HTTPS
- Encryption of sensitive data at rest
- Row-level security policies enforcing tenant data isolation
- Service-role key separation for administrative operations
- Secure storage of OAuth tokens with access limited to authorized operations
- Regular review of data collection, storage, and processing practices
While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
8. Data Retention
We retain your account information and Business Data for as long as your account is active and the Service is operational. Specifically:
- Account data: Retained until you request account deletion or your account is terminated
- Business Data: Retained for the duration of the Service to maintain your listing synchronization. Upon account deletion, we will cease syncing your data to publishers, though existing listings on third-party platforms may persist (as they are controlled by those platforms)
- Payment records: Retained for the period required by applicable tax and financial regulations (typically 7 years)
- Usage data: Retained in aggregated, anonymized form for analytics purposes
Upon request for account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by law.
9. Your Privacy Rights
9.1 General Rights (All Users)
Regardless of your location, you have the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete information
- Request deletion of your account and associated data
- Disconnect your Google Business Profile at any time
- Withdraw consent for optional data processing
- Receive a copy of your Business Data in a portable format
To exercise any of these rights, contact us at privacy@localbasics.com.
9.2 European Economic Area and United Kingdom (GDPR)
If you are a resident of the EEA or UK, you have additional rights under the General Data Protection Regulation ("GDPR") and the UK GDPR, including:
- Right of access: You may request a copy of the personal data we process about you
- Right to rectification: You may request that we correct inaccurate personal data
- Right to erasure: You may request the deletion of your personal data, subject to certain exceptions
- Right to restrict processing: You may request that we restrict the processing of your personal data in certain circumstances
- Right to data portability: You may request a machine-readable copy of your personal data
- Right to object: You may object to processing based on legitimate interests
- Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing performed prior to withdrawal
You also have the right to lodge a complaint with your local data protection supervisory authority.
9.3 EU and UK Representation
We maintain GDPR representation in both the European Union and the United Kingdom in accordance with Article 27 of the GDPR. For details about our appointed representatives or any data protection inquiries, please contact our Data Protection Officer at dpo@localbasics.com.
9.4 California Residents (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act ("CCPA") as amended by the California Privacy Rights Act ("CPRA"):
- Right to know: You may request that we disclose the categories and specific pieces of personal information we have collected, the categories of sources, the business purpose for collecting it, and the categories of third parties with whom we share it
- Right to delete: You may request deletion of your personal information, subject to certain exceptions
- Right to correct: You may request correction of inaccurate personal information
- Right to opt out of sale/sharing: Our use of Quora and Reddit advertising pixels on localbasics.com may be treated as selling or sharing personal information for cross-context behavioral advertising. You can opt out at Do Not Sell or Share My Personal Information, and we honor Global Privacy Control signals as an opt-out
- Right to non-discrimination: We will not discriminate against you for exercising any of your CCPA rights
To submit a request, email privacy@localbasics.com. We will verify your identity before processing any request. We will respond within 45 days, or notify you if we need additional time (up to 90 days total).
Categories of personal information collected (past 12 months):
- Identifiers (name, email, IP address, account ID, cookie and advertising identifiers)
- Commercial information (payment records, transaction history)
- Internet activity (usage data, pages visited, features used)
- Professional information (business name, address, phone, categories, hours)
- Geolocation data (approximate location from IP address)
Categories of third parties with whom we sell or share personal information for cross-context behavioral advertising (past 12 months): Advertising platforms (Quora and Reddit), limited to identifiers and internet activity collected through their pixels on localbasics.com.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our service providers are located. These countries may have data protection laws that are different from the laws of your country. We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses approved by the European Commission where applicable.
11. Children's Privacy
The Service is not directed to individuals under the age of 18 and is intended for use by business owners and authorized representatives. We do not knowingly collect personal information from children under 16 (or under 13 in the United States). If we become aware that we have collected personal data from a child without appropriate parental consent, we will take steps to delete that information promptly. If you believe we may have collected information from a child, please contact us at privacy@localbasics.com.
12. Third-Party Links
The Service may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party service you access through our Service.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by: (a) posting the updated policy on this page with a revised "Last updated" date; and (b) sending you an email notification at the address associated with your account. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.
14. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Email: privacy@localbasics.com
Contact form: localbasics.com/contact
For GDPR-related inquiries, please contact our Data Protection Officer at dpo@localbasics.com.