Privacy Policy

1. Information We Collect

We collect information you provide directly and information collected automatically when you use our service.

Category	Data Collected	When
Account Info	Name, email address, password	Account creation
Business Info	Business name, trade, city, state, phone, address, photos	Site generation
Payment Info	Billing name, last 4 digits, billing address (Stripe handles full card data)	Subscription checkout
Usage Data	Pages visited, features used, time on site, browser type, device type	Automatically
Device & Log Data	IP address and a random per-browser identifier stored on your device	Automatically, to prevent abuse and rate-limit free usage
Your Customers' Data	Names, phone numbers, email addresses, and messages that visitors to your generated website submit through your contact and booking forms	When a visitor contacts or books with you
Communications	Messages you send us via email or contact forms	When you contact us

We do not collect Social Security numbers, government ID numbers, or sensitive financial credentials. Full payment card numbers are processed directly by Stripe and are never stored on our servers.

Data about your customers (processor role). When someone submits a lead or booking through a website you generate, LocalPilot stores that information on your behalf — you are the controller of that data and LocalPilot acts as your processor. We use it only to deliver the lead/booking to you and to send the confirmation and review-request emails you enable. We do not use your customers' contact details for our own marketing. If you delete your account, your customers' leads and bookings are deleted with it (see Section 5 and Section 7).

2. How We Use Your Information

We use the information we collect to:

Generate and host your contractor website using AI
Process payments and manage your subscription
Send transactional emails (receipts, site-ready notifications, account alerts)
Improve and personalize our AI generation models
Provide customer support and respond to inquiries
Detect, prevent, and address fraud, abuse, and security issues
Comply with legal obligations

We do not sell your personal information to third parties. We do not use your data to serve third-party advertisements.

3. How We Share Your Information

We share your information only in these limited circumstances:

Service Providers: Trusted vendors who help us operate the service (see Section 4). They are bound by confidentiality agreements and may only use your data to provide services to us.
Legal Requirements: When required by law, court order, or government authority.
Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate privacy protections in place.
With Your Consent: Any other sharing with your explicit permission.

4. Third-Party Services

LocalPilot AI integrates with the following third-party services to deliver our product:

Service	Purpose	Data Shared
Anthropic (Claude AI)	AI website and content generation	Business name, trade, city, description
Supabase	Database storage and file hosting	Business info, generated HTML, photos, leads & bookings
Stripe	Payment processing	Email, billing info
Netlify	Website hosting and delivery	Site files, usage logs, IP address
Resend	Transactional & notification email delivery	Recipient email address, message content
Pexels	Licensed stock photos for generated sites	No personal data (image requests only)
Google Maps	Location maps on generated contractor sites	Business address (publicly visible)

Each provider has its own privacy policy. We encourage you to review them: Anthropic · Supabase · Stripe · Netlify · Resend · Pexels.

Data Location & International Transfers

Your account and site data — including the leads and bookings submitted through your generated websites — are held in our primary database and file storage, which are hosted in Canada (via Supabase). Certain other service providers we rely on (including Netlify, Stripe, Anthropic, Resend, Google, and Pexels) may process data in the United States or other countries. As a result, your information — and your customers' information — may be transferred to, stored in, and processed in Canada, the United States, and other jurisdictions whose data-protection laws may differ from those of your own country. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses for these cross-border transfers. By using the service, you acknowledge these transfers.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide services. Specifically:

Account data: Retained until you request deletion or your account is closed.
Generated websites and photos: Retained while your subscription is active. Deleted within 30 days of account closure or upon written request.
Leads & bookings (your customers' data): Retained while the associated site exists. Deleted when you delete the site or your account.
Payment records: Retained for 7 years as required by tax and accounting regulations.
Usage logs: Retained for up to 12 months for security and analytics purposes.

6. Security

We implement industry-standard security measures to protect your information, including:

TLS/HTTPS encryption for all data in transit
Encrypted storage for sensitive data at rest
Access controls limiting data access to authorized personnel only
API keys and credentials stored as encrypted environment variables, never in code

No method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. If you suspect a security breach, please contact us immediately at Ossotan.consulting@gmail.com.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate or incomplete data.
Deletion: Request deletion of your personal data ("right to be forgotten"). Account holders can delete their account and all associated data (sites, leads, and bookings) instantly from Settings → Delete my account.
Portability: Request your data in a portable, machine-readable format.
Opt-out of marketing: Unsubscribe from marketing emails at any time using the link in any email we send.
California residents (CCPA): You have the right to know, delete, and opt-out of the sale of personal information. We do not sell personal information.

To exercise any of these rights, contact us at Ossotan.consulting@gmail.com. We will respond within 30 days.

8. Cookies & Local Storage

We use a minimal set of cookies and similar browser technologies:

Essential cookies: Required for the service to function (authentication sessions, security tokens). Cannot be disabled.
Local storage identifiers: We store a small number of values in your browser's local storage: your language preference (lp_locale), your country/currency preference (lp_country), and a random per-browser identifier (lp_anon) that lets us count and rate-limit free site generations from a device without requiring an account. lp_anon is a persistent identifier tied to your browser, not to your name.
Analytics: We may use privacy-preserving analytics to understand how users interact with our service.

We do not use advertising cookies or cross-site tracking cookies. You can clear these values at any time through your browser settings.

9. Children's Privacy

LocalPilot AI is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (if you have an account) and update the "Last Updated" date at the top of this page. Your continued use of LocalPilot AI after changes take effect constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:

Ossotan Consulting — LocalPilot AI
Email: Ossotan.consulting@gmail.com
Website: localpilot.pro

Table of Contents