Legal
Privacy Policy
Last updated: April 29, 2026
This policy explains how Local OS handles account data, workspace data, provider-sourced local SEO data, billing data, and operational logs.
1. Scope
This Privacy Policy explains how Local OS collects, uses, stores, shares, and protects personal data when you use our website, dashboard, workflows, reports, and related services.
If you use Local OS on behalf of a company, agency, client, or other organization, that organization may also be responsible for how it collects and uses personal data through Local OS.
2. Personal data we process
We collect account data, such as name, email address, authentication identifiers, workspace membership, role, profile information, and login activity.
We collect workspace and business data, such as client names, business names, locations, addresses, phone numbers, websites, Google Maps URLs, keywords, review evidence, audit inputs, recommendations, reports, and workflow settings.
We collect usage, device, security, and billing data, such as IP address, browser, device information, pages visited, actions taken, logs, errors, payment status, subscription tier, credits, invoices, and fraud-prevention signals.
We may process public or provider-sourced business information, including listing data, ranking results, public reviews, ratings, categories, and competitor information returned by third-party services.
3. How we use data
We use personal data to provide the service, authenticate users, create workspaces, run workflows, process payments, allocate credits, generate reports, provide support, protect the service, prevent fraud, improve product performance, and comply with law.
We may use aggregated or de-identified information for analytics, product improvement, benchmarking, and business planning, provided it does not identify a specific person or customer.
We do not sell personal data. We do not use customer data to train public AI models unless we clearly state otherwise and obtain appropriate permission.
4. Legal bases
Depending on context, we process personal data to perform a contract, comply with legal obligations, protect legitimate interests, prevent fraud and abuse, secure the service, or based on consent where required.
For business customers using Local OS for clients or locations, the customer is responsible for having an appropriate lawful basis, notices, and permissions for data they submit or instruct us to process.
5. Sharing and processors
We share data with service providers that help us operate Local OS, including hosting, database, authentication, payments, workflow orchestration, email, analytics, error monitoring, AI, maps, scraping, local data, fraud prevention, and customer support providers.
We may share data when required by law, to protect rights and safety, to enforce our terms, to prevent fraud or abuse, or as part of a merger, acquisition, financing, or sale of assets.
Customers are responsible for reviewing third-party platform rules before using outputs on Google Business Profile, websites, ads, emails, review workflows, or other external channels.
6. International transfers
Local OS may process data through providers located outside your country. When required, we use appropriate safeguards for international transfers, such as contractual protections or other lawful transfer mechanisms.
Because we use managed infrastructure and AI/data providers, data may be routed through the countries where those providers operate.
7. Retention
We retain personal data for as long as needed to provide the service, maintain records, comply with law, resolve disputes, prevent fraud, enforce agreements, and support legitimate business operations.
We may retain workflow logs, billing records, audit trails, security logs, and evidence records after account closure where needed for legal, compliance, financial, security, or operational reasons.
8. Security
We use administrative, technical, and organizational safeguards designed to protect personal data, including managed infrastructure, access controls, logging, and provider-level security controls.
No system is perfectly secure. You are responsible for securing your own account credentials, devices, workspace users, integrations, and exported reports.
9. Your privacy rights
Depending on your location, you may have rights to access, correct, delete, restrict, object to processing, port, or withdraw consent for certain personal data.
You may also have the right to complain to a data protection authority. We may need to verify your identity and may refuse or limit requests where permitted by law.
If your data is controlled by one of our customers, we may direct your request to that customer.
10. Cookies and analytics
We may use cookies, local storage, and similar technologies for authentication, security, preferences, analytics, performance, and fraud prevention.
Some cookies are necessary for the service to work. Optional analytics or monitoring tools may be disabled, limited, or changed as the product evolves.
11. Children
Local OS is not directed to children and should not be used by anyone under 16. We do not knowingly collect personal data from children.
12. Changes
We may update this Privacy Policy from time to time. The updated version will be posted with a new effective date. Continued use of Local OS after an update means the updated policy applies.
13. Contact and legal review
Privacy questions or requests can be sent through the contact channel listed on the Local OS website or dashboard.
This Privacy Policy is a product template and should be reviewed by qualified counsel before relying on it as a final legal policy.