Only what we need to do the work.

01Who we are

Local Citations Pro is run by [Legal entity name], [registered address] (“we”, “us”). This policy explains what we do with personal information when you use localcitationspro.com, your client dashboard and our services.

Questions about your data go to support@localcitationspro.com.

02What we collect

We only collect what we need to run your account and deliver your orders.

• Your account: your name and email address, your password (stored only as a one-way hash, so no one can read it) and, if you add them in Settings, your company and phone number. We also keep your email preferences and when you last signed in. Our team members’ accounts also hold a job title, which is shown next to their messages.
• Google sign-in: if you choose Continue with Google, Google sends us your Google account ID, your name, your email address and whether Google has verified it. We never see your Google password or anything else in your Google account.
• Your business details: the name, address, phone, website, email, category, opening hours, description, keywords and social links you enter, and the logo and photos you upload.
• Orders: the services and plans you choose, your notes, each order’s status and dates, the listings we build (directory, link and notes) and the reports we deliver.
• Messages: what you and our team write in each order’s chat, and the files attached to it.
• Payments: the amount, currency and Stripe reference numbers of each payment. Card details go straight to Stripe and never touch our servers.
• Contact form: your name, email, business, website, topic, order ID and message. We email them to our support inbox; they are not stored in our database.
• Security log: sign-ins, failed sign-ins, password resets, payments, cancellations, deletions and similar account events, with the time, your IP address and your browser’s user agent. It never holds passwords, tokens or email addresses.

03How we use it

• To deliver your orders. We use your business details to create, correct and verify listings on directories, Google Business Profile and other sites. Publishing them is the service, so those details become public on the sites we submit to. When a directory needs an account, we create one for your business and put the login in your report.
• To run your account: signing you in, keeping you signed in, password resets, and showing your orders, messages and reports.
• To take payment for one-time orders and monthly plans, and to match each payment to its order.
• To talk to you: replies, password reset links and the order, message, report and billing emails you choose in Settings. Tips and offers are off unless you turn them on.
• To keep the service safe: rate limits, locking an account after repeated failed sign-ins, the security log and looking into misuse.
• To meet legal duties, such as keeping tax and accounting records.

We do not sell your data, use it for advertising or build profiles about you.

04Cookies

We only use the cookies the site needs to work. There are no analytics, advertising or tracking cookies and no third-party scripts, and our fonts are served from our own site.

• lcp_access holds your sign-in for 15 minutes at a time.
• lcp_refresh renews your sign-in. With “Keep me logged in” it lasts up to 14 days; otherwise it ends when you close your browser. A session also ends after 120 minutes without activity.
• lcp_csrf is a security token that stops other sites from sending requests in your name. It ends when you close your browser.
• lcp_google is only set while you sign in with Google, for up to 10 minutes.

All of them are httpOnly (scripts on the page cannot read them) and are only sent over HTTPS. Because they are strictly necessary, the site has no cookie banner.

05Who we share it with

We share personal information only with the services that help us run Local Citations Pro, and only what each one needs.

• Stripe processes payments. It receives your email address, the order amount and the card details you enter on its checkout page, and keeps your saved card and monthly plans. See Stripe’s privacy policy.
• Google, only if you sign in with Google. See Google’s privacy policy.
• [Email delivery provider] sends our emails, such as password reset links.
• [Hosting provider] runs our servers, database and file storage in [country or region].
• Directories and listing sites receive your business details when we submit your listings, because that is the work you ordered.
• Authorities, when the law requires it.

Inside our company, only the team working on your orders and supporting you can see your account, orders, messages and files.

06How long we keep it

• Your account, business details, orders, messages and reports: while your account is open. When you ask us to delete your account, we delete them within [30 days].
• Payment and order records: [7 years], as tax and accounting law requires.
• Security log entries: [12 months].
• Contact form emails: [24 months] in our support inbox.
• You can delete a logo, a photo or a business without orders yourself in the dashboard at any time.

Listings we published on other sites are controlled by those sites. Ask us and we will tell you which ones we created.

07How we protect it

• Everything between your browser and our servers travels over HTTPS.
• Passwords are stored only as bcrypt hashes, and sign-in tokens live in httpOnly cookies that scripts on the page cannot read.
• Sign-in attempts are rate limited, and an account locks for a short time after repeated wrong passwords.
• Uploaded files are checked by type and content, stored outside the public website and only downloaded after an access check.
• Every order, business, message, report and file is checked against your account before it is shown.

No system is perfectly secure. If you think someone has used your account, email support@localcitationspro.com straight away.

08Your rights

You can ask us to:

• send you a copy of the personal information we hold about you;
• correct anything that is wrong (you can also edit your business details in your dashboard);
• delete your account and data, apart from records the law requires us to keep;
• stop using your data for a purpose you object to, or give it to you in a portable format.

Email support@localcitationspro.com from the address on your account. We reply within one business day and complete requests within [30 days]. You can turn optional emails off in Settings at any time. If you are not happy with our answer, you can complain to the data protection authority where you live.

09Children

Local Citations Pro is a service for businesses. It is not meant for children, and we do not knowingly collect information from anyone under 16. If you think a child has given us personal information, tell us and we will delete it.

10Changes to this policy

When we change this policy, we update the date at the top of this page. If a change affects how we use your data in a meaningful way, we will email account holders before it takes effect.

11Contact us

Email support@localcitationspro.com or use our contact form. By post: [Legal entity name], [registered address].