Privacy — Local Map-Pack Auditor

In short

We store the account details and locations you enter, the scan results we collect for you, and the minimum billing metadata needed to keep your subscription working. We do not sell your data. You can export or permanently delete everything from inside the dashboard.

What we collect

Account: your email address, display name, hashed password, and whether your email is verified.
Locations: the business name, coordinates, grid size, and audit schedule you enter for each place you track.
Scans: for each scan, the keyword, the grid coordinates, the per-cell search results, the rollup, and which provider answered.
Billing: your plan, and subscription/order references returned by our payment provider. Card numbers are handled entirely by the payment provider and never reach our systems.
Operational logs: request-level logs (including IP addresses for rate limiting) kept by our hosting provider.

How we use it

To run scans you request (manually or on a schedule) and show your reports.
To send transactional email: verification, password resets, receipts, and scan-failure notices.
To enforce per-account limits and protect the service from abuse.

We do not use your data for advertising, and we do not sell it.

Who processes data for us

Cloudflare — hosting, the production database, and scan-payload storage.
Polar — subscriptions, payments, and customer portal. Card data never touches our servers.
Resend — delivery of transactional email to your account address.
Search-results providers — each scan sends the keyword and a set of geographic coordinates to the provider that answers it.
AI providers — when a report page asks for an action plan, an anonymised rollup of that scan (coverage numbers, competitor names and categories from the results) is sent to the AI provider to generate the plan. Your account details are not sent.

Retention

Scan reports stay readable for 30 days on Free and 90 days on paid plans; after that the stored payload is deleted automatically.
Deleting your account starts a 30-day grace period, after which your account, locations, scan history, and stored payloads are permanently removed.

Your rights and controls

Export: request a machine-readable archive of your account data from the dashboard; the download link is valid for 48 hours.
Delete: delete your account and all of its data from the dashboard (30-day grace period applies).
Correct: change your name, password, and location details at any time.
If you are in the EEA/UK, you may also contact us to exercise access, rectification, erasure, or objection rights. You may complain to your local data-protection authority.

Cookies

We set one essential cookie to keep you signed in. We do not use advertising or third-party analytics cookies.

Contact

Privacy questions and data-subject requests go through the help form in the dashboard, or to [YOUR SUPPORT EMAIL].