In short
- We don't sell your data.
- We never see your Google password; access uses Google's official OAuth.
- We don't hold your card details; iyzico takes the payment.
- Export your data from the dashboard and delete your account any time.
This summary is for convenience; the text below is what applies.
1.Data controller
The data controller under this policy is Localghost LLC, a company organized in the State of Missouri, USA (“Localghost”). Send data-related requests to info@localghost.co.
2.Data we process
- Identity and contact: full name, email, phone
- Account and subscription: plan, billing details, payment status (we don't store card numbers)
- Security: IP address, session and device details, sign-in records
- Google Business Profile data you connect: business details, reviews, posts, photos, performance data
- Support and usage: support requests, live chat messages, content you create in the dashboard
- Device fingerprint: computed in your browser on sign-up and sign-in pages to prevent free-trial abuse; stored only by us
3.Purposes and legal grounds
- Creating your account, authentication and providing the platform
- Subscription, payment, billing and collection
- Error detection, security, auditing and abuse prevention
- Answering support requests
- Meeting legal obligations
Processing is based on the performance of a contract, legal obligation, legitimate interest and, where needed, explicit consent.
4.Transfers and processors
To provide the service, we share data with the providers below, only as far as needed. Requests from authorities empowered by law are reserved.
| Provider | Purpose | Location |
|---|---|---|
| Business Profile sync, Sign in with Google, site analytics (subject to cookie choice) | Outside Türkiye | |
| iyzico | Payments and card storage | Türkiye |
| Resend | Email delivery | USA |
| Cloudflare | Content delivery and encrypted backup storage | Outside Türkiye |
| AI text generation providers | Generating review replies, posts and suggestions | Outside Türkiye |
| Search data provider | Grid scans, competitor and citation data (keyword, location and business name only; no personal data) | Outside Türkiye |
Which AI provider is used is chosen by the system and may change over time. Providers receive only what is needed to generate the requested text (e.g. review text, business name and description). How a provider processes that data is governed by its own terms.
Some providers are located outside Türkiye, so part of your data is transferred abroad.
5.Retention
Data is kept as long as needed for its purpose; the records below are deleted automatically when their period ends.
| Data | Period |
|---|---|
| Account and business data | While your account is open. Deleted immediately when you delete your account; personal fields in security and audit records are anonymized. |
| Security records (sign-in, IP) | 90 days |
| Audit records | 90–180 days |
| Email delivery records | 60 days |
| AI usage records | 60 days |
| Error logs | 30 days |
| Closed live chat conversations | 180 days |
| Support staff account-access records | 365 days |
| Device fingerprint | 30–90 days |
| Invoices | 10 years (Tax Procedure Law Art. 253) |
6.Data security
Google access tokens are stored encrypted with AES-256-GCM, traffic is encrypted with TLS, and backups are encrypted and kept in separate storage. Details are on the Security page. No system can guarantee absolute security of transmissions over the internet.
7.Your rights and requests
You can use these rights over your personal data:
- Access: to learn whether we process your data and get a copy of it
- Correction: to have incomplete or inaccurate data corrected
- Deletion: to have your data deleted
- Objection: to object to the processing of your data
- Portability: to receive your data as a file
Write to info@localghost.co to make a request; we conclude requests within 30 days. You can export your data and delete your account in the dashboard under Settings › My account.
This is an English translation provided for convenience. If there is any discrepancy, the Turkish version prevails.
Questions?
For any question about this document, write to info@localghost.co. We conclude personal data requests within 30 days.