Draft: this page is waiting for company details and legal review before launch.
Privacy policy
This policy explains what personal data LocalPage collects, why, and your rights. If your business appears on LocalPage, see also information for business owners.
Who is responsible
The controller is [company name], registration no. [registration number], [registered address]. Contact us about privacy at [contact email].
What we collect, and why
If you use LocalPage (builders)
- Account: your email address, and your name if you sign in with Google or add it. Used to run your account (contract).
- Billing: your plan, payment status and the Stripe customer reference. Stripe processes your card; we never receive the full number (contract, legal obligations for tax and accounting).
- Payouts (only if you use LocalPage Billing): Stripe collects your identity and bank details to verify you and pay you; we keep only the Stripe account reference, its status and your country (contract, legal obligations).
- Your work: sites, edits, notes, follow-up dates, saved and hidden businesses, and files you upload (contract).
- Approximate location: the first time you open the map, it starts near the city your connection comes from (worked out by our hosting provider from your IP address). We use it only to place the map and do not store it (legitimate interests).
- Security and usage: sign-in events and technical logs needed to keep the service secure and working (legitimate interests).
If you view a demo or ask for a website
- When a demo is opened, we record that it was viewed and when, so the builder knows. We do not record who viewed it.
- If you press “I want this website” and send the form, we store the name, contact details and message you enter and share them with the builder who made the demo (your request; legitimate interests of the builder in replying).
If you pay for a website through LocalPage
When a builder uses LocalPage Billing, Stripe processes your payment on the builder’s behalf; we never receive your card number. We keep the payment and subscription status and Stripe’s references, so the site stays online while it is paid for (contract, legal obligations for accounting).
Businesses shown on the map
We show public business listings and check public websites. How this works, and how to object, is explained in information for business owners.
Cookies and similar storage
We use only what the service needs. There are no advertising or tracking cookies.
- Sign-in cookies keep you signed in to the LocalPage app.
lp_buildermarks your browser as a builder’s, so opening your own demo is not counted as the client viewing it. It is set in the app and on a demo’s own address when you open it from the app.- Local storage remembers where you left the map, in your browser only.
Demo pages and published client sites set no cookies.
Who we share data with
We use these service providers, under contracts that require them to protect the data and use it only for us. We do not sell personal data.
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database and sign-in | EU (Frankfurt) |
| Vercel | Hosting the LocalPage app | EU functions; global network |
| Cloudflare | Hosting published sites and files | Global network |
| Stripe | Payments, invoices, tax | EU and US |
| Resend | Sign-in and notification emails | US |
| Only if you choose “Continue with Google” | Global | |
| Anthropic | Writing demo text from public business details, when AI builds are on | US |
Where data leaves the EU, we rely on an adequacy decision (such as the EU–US Data Privacy Framework) or the European Commission’s standard contractual clauses.
How long we keep it
- Account and work data: until you delete your account (Account → Delete account). It is removed straight away, and from backups within 30 days.
- Billing records: as long as accounting and tax law requires (in Latvia, generally 5 years).
- Requests from demo visitors: while the builder’s site exists.
- Technical logs: up to 90 days.
Your rights
You can ask to access, correct, delete or export your data, to restrict how we use it, or object to use based on legitimate interests. Write to [contact email]; we reply within one month. You can also complain to the Latvian Data State Inspectorate (dvi.gov.lv) or the authority in your country.
Security
Data is encrypted in transit, access is limited to what each part of the service needs, and payment details are handled by Stripe. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.
Changes
We will update this policy when what we do changes, and email you about important changes.
Last updated 2 October 2026.