Privacy Policy

Information we collect

Account and client data: contact details, business information, service configuration, customer data supplied for authorized workflows, consent records, support history, and billing status.

Public business data: business names, addresses, phone numbers, websites, public contact details, Google profile facts, ratings, review counts, and nearby competitor evidence.

Product and website data: submitted URLs, audit results, forms, leads, message events, opt-outs, device data, and site usage needed to operate and secure the service.

Connected-service data: information a client authorizes us to access from connected business, CRM, email, phone, messaging, payment, or analytics accounts.

How we use information

We use information to provide services, qualify public business prospects, personalize truthful outreach, process billing, run client-authorized workflows, provide support and reports, prevent repeat contact after an opt-out, and protect the service.

Service providers and integrations

Current core providers include Vercel for hosting, Supabase for data storage, and DataForSEO for licensed public business and search data.

When enabled, used, connected, or active for a feature, data may also flow through Stripe for billing, Resend for email delivery, an approved cold-email provider for outreach, HighLevel for CRM and fulfillment, Google for connected business services, and approved messaging or phone providers. AI service providers may process limited data when an AI-supported feature is enabled.

We do not sell personal information. Providers receive only the information needed for their role and operate under their own terms and privacy practices.

Client responsibilities

Clients must have the rights, notices, and consent needed to give us customer data or authorize email, phone, and text workflows. Clients must honor opt-outs and applicable communication, privacy, and platform rules.

Retention and security

We retain data only as long as needed for service delivery, security, dispute handling, legal obligations, and legitimate operational records. Account data may remain for a reasonable period after cancellation. Public prospect records may remain to document sourcing and campaign history. Suppression records may be retained to prevent future contact. Third-party providers may apply their own retention schedules.

We use access controls and reasonable technical safeguards, but no online system can promise absolute security.

Access, correction, and deletion

You may request access, correction, export, or deletion of information associated with you. Some records may be retained where required by law, needed for security, or necessary to honor an opt-out. Email hello@foundlocal.io.

Cookies, changes, and contact

We use essential storage for security and authentication. Optional analytics are used only when enabled. We may update this policy as providers or features change.

Questions may be sent to hello@foundlocal.io. FoundLocal is operated by No Mow Worries LLC, Aurora, Colorado.