Privacy Policy
Last updated: October 24, 2026
This policy explains what personal data LocalBot (localbot.pro) handles and why. The controller is Open Sales LLC, Florida, USA. Contact: support@localbot.pro.
What we collect
- Account data: your name, email, agency name and a hashed password (we can't read it).
- Client site data you add: website addresses, business facts, articles, photos you upload and the WordPress connection key, which is stored encrypted.
- Billing data: your plan and payment status. Card details go directly to Stripe; we never see or store them.
- Technical data: log entries with IP addresses and times, used for security (for example to block repeated wrong passwords) and to fix errors. Failed-login records are deleted after one day.
Why we use it
To provide the service you signed up for (the legal basis is our contract with you), to keep it secure and working (our legitimate interest), to send emails you can switch off in each site's settings (notifications and the weekly summary), and to meet legal obligations such as tax records.
Who processes it for us
- DigitalOcean: hosting, in Frankfurt, Germany.
- Stripe: payments and invoices.
- Anthropic and OpenAI: AI models that write and check articles. They receive the business facts and article text needed for each article.
- DataForSEO: search volumes and search results for your clients' keywords.
- Our email provider: to send account and notification emails.
- Google Fonts: the fonts used on these pages.
Some of these companies are in the USA. Where personal data from the EU is transferred, it's protected by the EU Standard Contractual Clauses or the EU–US Data Privacy Framework. We don't sell personal data or use it for advertising.
How long we keep it
While your account is open. After you close it we delete your workspace data within 30 days, except backups (kept up to 14 days) and records we must keep by law, such as invoices.
Cookies
We use only the cookies needed to log you in and protect forms (a session cookie and a security token). No tracking or advertising cookies.
Your rights
You can ask us for a copy of your data, to correct or delete it, to restrict or object to its use, or to receive it in a portable format. Email us and we'll answer within 30 days. If you're in the EU or UK you can also complain to your data protection authority.
Your clients' data
When you add information about your clients' businesses, you decide what's added, and we process it on your behalf to write their articles. Don't add sensitive personal data (for example health information about individuals) to business facts.
Security
Connections use HTTPS, passwords are hashed, WordPress keys are encrypted, and each workspace can only see its own data. Backups are checked daily.
Changes
If we change this policy in a way that matters, we'll tell you by email or in the app before it applies.