Privacy Policy

LocalGain is a software product of Your Marketing BFF (“YMBFF”, “we”, “us”). This policy covers the information LocalGain holds about your business and the people at your business who use it.

We store what the service needs to do its job, and we have tried to keep that list short:

• Account and contact information — your business account name, and the email address each person signs in with.
• Your business and location — name, address, phone, website, Google Place ID, categories, coordinates and time zone.
• Google Business Profile information we retrieve on your behalf, including profile details and your reviews, so we can spot what needs fixing.
• Keywords you and we confirm are worth tracking.
• Ranking checks — the Local Pack position recorded for each keyword, when it was checked, and its history over time.
• Findings and recommendations produced from the above.
• Actions — the work we publish, its drafts, the approvals you give, and the record of it being completed.
• Notification records — which email we sent, to which address, and when. We do not store the message body, and we do not track opens or clicks.
• Technical and security records — an activity history and an audit log of changes, plus error reports that are scrubbed of personal data before they leave the system.

LocalGain takes no payments and stores no card or bank details. There is no billing screen in the app.

LocalGain is a local marketing platform, not a patient-data system. Please keep patient or health records, payment card and financial account details, Social Security numbers, passwords, and other sensitive personal information the service does not need out of ordinary LocalGain fields.

We do not claim HIPAA compliance, and we do not hold a security or privacy certification. Section 8 of the Terms of Service says the same thing in the same words.

LocalGain sets one kind of cookie: the session cookie that keeps you signed in.

There is no advertising cookie, no analytics or tracking script, no pixel and no third-party tracker anywhere in the application. We do not track you across other websites, and the app is marked so that search engines do not index it — your account URLs should never turn up in a search result.

Running LocalGain means using a small number of specialist providers. We use them for:

• hosting the application
• storing the database and handling sign-in
• approved AI processing, which drafts wording for work that has already been decided
• business and search data, which is how we look up your profile and measure rankings
• transactional email — the notifications the service sends you
• reliability and security monitoring
• the underlying infrastructure the above run on

Each one receives only the information it needs for that function, and nothing more.

We do not sell your personal information or your business data, and we do not share it for advertising.

We will not make claims about these providers’ own privacy practices, training policies or certifications that we cannot stand behind. If you want to know who they currently are, ask us and we will tell you in writing.

While your account is active, we keep the information the service needs to run — including the ranking history, because a rank with no history is not much use to you.

If your account is paused, nothing is deleted. The account is frozen: background checks stop and no work moves, and everything is still there when you come back.

If your account is cancelled, we keep your data for 30 days — long enough to sort out anything outstanding and to give you a copy if you want one. After that window, your operational data is deleted.

If you want it deleted sooner, ask us and we will process it sooner.

Two honest exceptions:

• A limited internal record remains where we legitimately need it — for legal, accounting, security, dispute, fraud or audit purposes. LocalGain keeps a permanent, tamper-evident record of what happened on an account and who did it. That record is deliberately not editable by anyone, including us, so it is de-identified rather than erased: the business and contact details it pointed at are removed, and what is left is an account history that can no longer be tied back to you.
• Backup copies may still contain your data until the normal provider backup cycles expire, after which they age out on their own.

The staff procedure behind this is written down rather than left to memory, including exactly what is deleted and what is kept.

We maintain reasonable safeguards around LocalGain. In practice that means:

• each customer's data is isolated at the database level, not merely hidden in the interface, and that isolation is tested
• staff access is limited to the YMBFF people who do the work, and privileged actions are recorded
• secrets and provider keys are held server-side only and are never sent to your browser
• error reports are stripped of personal data before they leave the system

No service can promise perfect security, and we are not going to pretend otherwise. What we can tell you is that if something happens that affects your data, we will tell you.

The things only you can do — protecting your login, controlling who at your business has access, telling us if you suspect a problem — are in section 7 of the Terms of Service.

You can ask us to:

• send you a copy of the information LocalGain holds about your business
• correct anything that is wrong
• delete your data, either now or at the end of the 30-day window described above

Ask your YMBFF contact, or reply to any LocalGain email. A person reads it, and we will confirm in writing what we did.