Privacy Policy

Introduction

LocalSites.Dev (“we,” “us,” or “our”) operates a website-building platform for local service businesses. This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding that information. It applies to everyone who visits our marketing site, signs up for an account, or uses our platform to build and manage websites.

Information We Collect

Account information

When you create an account we collect your name, email address, and password (stored as a salted hash). If you subscribe to a paid plan we also collect billing details through our payment processor, Stripe. We do not store full credit-card numbers on our servers.

Business data you provide

To build your website we ask for information about your business, including:

• Business name, address, phone number, and email
• Services offered and service areas
• Business hours, license numbers, and certifications
• Photos, logos, and customer reviews or testimonials
• Custom domain names you connect to our platform

AI-generated content

We use AI (currently MiniMax M3) to generate website copy, service descriptions, and other text on your behalf. The business information you provide is sent to our AI provider solely to produce that content. We do not use your data to train AI models.

Automatically collected data

When you visit our marketing site or use the platform, we automatically collect:

• IP address and approximate location
• Browser type, operating system, and device information
• Pages visited, referring URL, and time spent on pages
• Cookies and similar tracking technologies (see our Cookie Policy)

How We Use Your Information

• To create, host, and maintain your website
• To generate AI-powered content for your site
• To process payments and manage your subscription
• To send transactional emails (account confirmations, billing receipts, service notices)
• To provide customer support
• To improve our platform, fix bugs, and develop new features
• To detect and prevent fraud, abuse, or security threats
• To comply with legal obligations

Information Sharing

We do not sell your personal information. We share data only in these situations:

• Service providers: We use third-party services for payment processing (Stripe), hosting (Railway), AI content generation (MiniMax), domain management, and analytics. Each provider receives only the data needed to perform their function.
• Agency accounts: If your site is managed by an agency using our white-label tier, that agency can access your site data and content through their agency dashboard.
• Public website content: The information you choose to display on your published website (business name, phone, services, reviews) is publicly accessible on the internet.
• Legal requirements: We may disclose information if required by law, court order, or government request.
• Business transfers: If LocalSites.Dev is acquired or merged, your data may transfer to the new owner. We will notify you before that happens.

Data Retention

We retain your account and business data for as long as your account is active. If you cancel your subscription, we keep your data for 30 days in case you reactivate, then delete it. Billing records are retained for 7 years as required for tax and accounting purposes. Anonymized analytics data may be kept indefinitely.

Data Security

We take reasonable measures to protect your data, including:

• Encrypted connections (TLS/HTTPS) for all data in transit
• Encrypted database storage on Railway’s managed Postgres infrastructure
• Salted and hashed passwords (never stored in plain text)
• Rate-limited login attempts and session management
• Role-based access controls for platform administration

No system is perfectly secure. If we discover a breach that affects your personal data, we will notify you promptly as required by law.

Your Rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data (subject to legal retention requirements)
• Export your data in a portable format
• Opt out of marketing emails
• Withdraw consent where processing is based on consent

To exercise any of these rights, email us at privacy@localsites.dev. We will respond within 30 days. For GDPR-specific rights, see our GDPR page.

Children’s Privacy

LocalSites.Dev is designed for business owners and is not directed at anyone under 18. We do not knowingly collect data from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a notice on our platform. Your continued use of LocalSites.Dev after changes are posted constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us at privacy@localsites.dev.