Privacy Policy

1. Information we process

• Account information — your name, email address, and password credentials (stored and verified by our authentication provider, never in plain text).
• Business profile — business name, category, city/state, services, target customer, brand voice, website, social handle, promotions, and posting settings.
• Uploaded photos and video clips — the media you add to your library, plus any tags or descriptions you write.
• AI requests and results — the prompts assembled from your profile and the generated captions, plans, replies, and revisions.
• Reviews you paste into the Review Reply Generator.
• Subscription and billing metadata — plan, status, period dates, and Stripe customer/subscription identifiers.
• Usage and product analytics — counts of actions such as posts generated or exports run, stored against a pseudonymous identifier.
• Support requests — the subject, category, and message you send us.
• Operational and error logs — sanitised technical records used to diagnose faults, with a support reference identifier.

2. How we use it

To run your account, personalise the content LocalSpark generates, enforce plan allowances, process subscriptions, answer support requests, keep the service secure, and understand which product features are used. We do not sell your personal information, and we do not share your business content for advertising.

3. Service providers

• Authentication, database, and file storage provider — stores your account, business profile, generated content, and uploaded media.
• AI provider — receives the generation prompt (your business details and any photo tags you selected) and returns generated text. Uploaded image files themselves are not sent to the AI model; the text you saved about them is.
• Stripe — processes payments and subscription state.
• Transactional email provider — sends account emails, once configured by the business owner.
• Hosting provider — serves the application.

4. AI disclosure

Content in LocalSpark is AI-generated. It is personalised using the business information you save, and the system is designed not to invent services, promotions, discounts, testimonials, or business claims. AI can still make mistakes.

Review every post before publishing. You are responsible for verifying claims, promotions, pricing, dates, availability, and business information.

5. Content you upload

Upload only photos and videos you own or have permission to use, and avoid uploading images of people who have not agreed to appear in your marketing. Your media stays in a private storage area that only your account can read, and uploading it does not make it ours.

6. Payments

Card payments are processed by Stripe. LocalSpark never receives or stores full card numbers, CVC codes, or bank credentials. We store only non-sensitive billing metadata such as plan, status, period dates, and the last four digits and brand that Stripe reports.

7. Data retention and deletion

You can delete your account from Account → Danger Zone. Deleting removes your business profile, uploaded media, generated content, and support history. Certain billing, transaction, and security records are retained where required for legal, accounting, or fraud-prevention purposes. Deletion also cancels ongoing access.

8. Cookies and analytics

LocalSpark's product analytics are first-party: events are written to our own database against a pseudonymous, hashed identifier, and no third-party advertising or tracking pixels are used. We do not set advertising cookies. The only browser storage we rely on is what is needed to keep you signed in and to avoid double-counting events in a session, which is strictly necessary for the service to work. For that reason there is no tracking-consent banner.

9. Security

Data is isolated per account by database row-level security, media is stored privately, server-side checks authorise every AI action and billing change, and secrets are held server-side only. No system can promise perfect security.

10. Children

LocalSpark is a business tool and is not directed at anyone under 18.

11. Changes and contact

We will update this page and its effective date when practices change. Questions or requests about your data:

• Controller: [Legal business name — to be completed by the business owner]
• Address: [Registered business address — to be completed by the business owner]
• Contact: [Privacy contact email — to be completed by the business owner]