Legal
Privacy Policy
Last updated: September 11, 2026
[email protected] alias below needs to be set up before this goes live, and it has not been evaluated against state data-broker registration requirements that may apply to a product like this. Do not treat this as final legal advice — have it reviewed before publishing.
This Privacy Policy explains what information LocalProspect Pro ("we," "us," "the Service") collects, why, and how it's handled. It covers two different kinds of data: information about you, the account holder, and information about businesses you research, most of whom have no direct relationship with us.
1. Information We Collect From You
| Category | Examples | Why |
|---|---|---|
| Account info | Name, business name, email, password (or Google/Apple/phone sign-in) | Create and secure your account |
| Agency profile | Your pricing strategy, rates, agency name | Power savings calculations and generated pitches |
| Connected accounts | GoHighLevel API key (encrypted), your own AI provider API key if you choose to add one (encrypted) | Sync leads to your CRM; run your own AI usage on your own billing |
| Usage data | Actions taken (searches, research runs, statement analyses) and associated cost/token metadata | Enforce plan limits and, where applicable, billing |
| Uploaded documents | Merchant processing statements you upload for analysis | Generate fee/savings analysis — note these documents typically describe a third party's (your prospect's) processing activity, not your own |
| Device/technical data | IP address, browser type, standard server logs | Security, rate limiting, abuse prevention |
2. Information We Collect About Businesses You Research
The core function of the Service is researching local businesses using publicly available sources and AI analysis. For a business you search for, we may collect and store:
- Public business listing data — name, address, phone, hours, ratings, review counts, category (via Google Places/Maps)
- Publicly listed owner name, business email addresses, and business phone numbers, where discoverable (via AI web search and Hunter.io domain search)
- Public website content and technical details (page speed, technology used, SSL status, marketing tools detected)
- Public review text and ratings, used to estimate sentiment and identify likely pain points
- Public Facebook Page information and BBB rating/accreditation status
- AI-estimated, non-verified figures: revenue tier, employee count, card-processing volume, point-of-sale system
This information comes from publicly available sources, not from the businesses themselves — those businesses have not created an account and have not agreed to this Privacy Policy. If you are a business owner and want information about your business removed from a user's account, contact us at [email protected] and we will evaluate the request.
3. How We Use Information
- To provide the Service — running searches, generating research and analysis, syncing to your connected CRM
- To secure accounts and prevent abuse of the Service or the third-party APIs it relies on
- To enforce usage limits and, once billing is enabled, to calculate charges
- To improve the Service (we do not sell data about the businesses in your account to third parties)
4. Who We Share Information With
We don't sell your data. We do share data with the following categories of service providers, only as needed to run the Service:
| Provider | What they process |
|---|---|
| Google (Firebase, Cloud Run, Gemini AI, Places/Maps, PageSpeed, reCAPTCHA) | Hosting, authentication, database, AI processing, business data lookups |
| GoHighLevel | Lead and contact data, only if and when you connect your own GHL account |
| Meta (Facebook Graph API) | Public Facebook Page lookups |
| Apify | Automated public review/listing crawling |
| Hunter.io | Domain-based email discovery |
| Brandfetch | Public brand asset (logo/color) lookups |
| [Stripe / Paddle — once billing launches] | Payment processing for paid plans |
We may also disclose information if required by law, subpoena, or to protect the rights, safety, or property of LocalProspect Pro or others.
5. AI Processing
Prompts and business data you research are sent to Google's Gemini AI models to generate research summaries, grades, and pitches. If you connect your own AI provider key, your requests are sent using your own key and are subject to that provider's own data-handling terms, which we do not control.
6. Data Security
Sensitive credentials — your connected CRM API key and your own AI provider key, if added — are encrypted at rest before storage. Authentication is handled by Firebase Authentication. No system is 100% secure, and we can't guarantee absolute security of information you provide.
7. Data Retention
We retain account data for as long as your account is active. Cached business research is retained to avoid re-researching the same business repeatedly and to keep the Service fast; you can delete individual leads from your own account at any time. If you delete your account, we will delete or de-identify your account data within a reasonable period, except where retention is required for legal, security, or legitimate business purposes.
8. Your Choices & Rights
Depending on where you live, you may have rights to access, correct, delete, or export your personal information, or to opt out of certain processing. To exercise these rights, email [email protected]. We will respond within a reasonable time and verify your identity before fulfilling the request.
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we've collected and to request deletion. [This section should be reviewed by counsel for full CCPA/state-law compliance before publishing, including whether data-broker registration obligations apply to this product.]
9. Children's Privacy
The Service is intended for business use by adults and is not directed at children. We do not knowingly collect personal information from anyone under 18.
10. International Users
The Service is hosted in the United States. If you access it from outside the U.S., your information will be transferred to and processed in the U.S.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated before they take effect (for example, by email or in-app notice). The "Last updated" date at the top reflects the most recent version.
12. Contact Us
Questions or requests regarding this Policy: [email protected].