Privacy Policy

ALTGRAD GROUP LLC, a New Mexico limited liability company ("LocalGap") provides the LocalGap service at localgap.io. In this policy, “LocalGap”, “we” and “us” mean that business.

You can contact us about anything in this policy at support@localgap.io, or by post at 1209 Mountain Road Pl NE, Ste R, Albuquerque, NM 87110, USA.

For most of the information described here, we decide why and how it is used, which makes us its “controller” under European data protection law. For information our customers put into LocalGap about their own clients and contacts, and for the websites they host with us, we act on our customer’s instructions (a “processor” or “service provider”). Sections 5 to 7 say where that applies.

LocalGap is a tool for marketing agencies and other businesses. It finds local businesses on Google Maps, helps our customers contact them, and builds and hosts websites for them. So this policy is about several groups of people:

• LocalGap customers, the people who create a LocalGap account. See section 3.
• Business contacts: owners, managers and staff of businesses that appear in LocalGap’s search results. See section 4.
• Our customers’ clients: businesses an agency builds a website for, when they fill in a client form or are named as a domain’s owner. See section 5.
• Visitors to websites hosted on LocalGap. See section 6.
• People our customers contact by email, text, LinkedIn or phone through LocalGap. See section 7.

If you are simply visiting localgap.io, section 13 covers you: we don’t run analytics or advertising on it.

What we collect

• Account details: your email address and password. Passwords are handled by our sign-in provider and stored only in scrambled (hashed) form.
• Billing: your plan, your credit balance, and the reference numbers Stripe gives your customer record and subscription. Card details go straight to Stripe; we never see or store your full card number.
• Agency profile: your agency’s name, logo, tagline, contact email and phone, and brand colours, which appear on your demos and client forms.
• Connected mailboxes: the sender name and address, reply-to address, the postal address you add to your emails, and your mail server settings. Mailbox passwords and Google sign-in tokens are stored encrypted.
• What you create: searches, saved leads and lists, spreadsheets you import, messages and sequences, call logs and notes, websites, uploads and domain orders.
• Domain registration details you enter when you buy a domain: name, organisation, postal address, email and phone. Section 9 says who receives them.
• Technical information: our hosting provider processes details such as IP addresses and browser type to deliver the service and protect it from abuse. We also log the requests LocalGap makes to outside services on your behalf, to track costs.

Why we use it

To provide the service you signed up for and bill you for it (our contract with you); to keep the service secure, prevent abuse and fix problems (our legitimate interests); and to keep the records that tax and accounting law requires (a legal obligation). We don’t send you marketing emails.

LocalGap helps agencies find local businesses that could use their services. To do that we collect information about businesses, and sometimes about the people who run them. We did not get this information from you, so this section tells you what we hold and what you can do about it.

What we collect

• Business details from Google Maps: name, address, phone number, website, category, rating, number of reviews, opening hours and a link to the listing.
• Details published on the business’s own website: public email addresses, social media profiles, and what the website has or lacks, such as a booking form or a chat widget.
• For some businesses, the names and job titles of owners or managers, with their work email address, work phone number and LinkedIn profile, where these can be found in public sources.

Where it comes from

• Google Maps;
• the business’s own website;
• public search engine results;
• public registers, such as UK Companies House and domain name registration records;
• Meta’s public Ad Library.

We use AI models to read public search results and pick out who runs a business. They can get this wrong, so we record where each detail came from. We may also check whether an email address can receive mail. We don’t make decisions about people with legal or similarly significant effects using automated processing.

Why, and on what basis

So our customers can find businesses that may need their services and reach the right person. Our legal basis is legitimate interests: ours in providing a business prospecting service, and our customers’ in contacting businesses about their services. We only look for information about people in their business roles.

Who sees it

LocalGap customers who search in your area or save your business can see these details, export them and contact you. When they do, they decide how to use them and are responsible for doing so lawfully, including honouring a request not to be contacted.

How long we keep it

For as long as the business appears in our customers’ searches and saved lists, or until you ask us to delete it. We don’t yet delete it automatically after a fixed period.

Your choices

You can object to this use of your information, or ask us to delete it, at any time. Email support@localgap.io with the business name and the email address or phone number you want removed. We will delete what we hold about you, including in our customers’ saved lists in LocalGap, within 30 days, and tell you when it is done. If a LocalGap customer has already contacted you, please tell them too, as they may hold their own copy.

Client forms. An agency can send you a LocalGap link to a form about your business. We store what you type and upload for that agency. Uploaded files stay private until the agency approves them for your website. If you use the form’s help assistant, your question and the form’s questions are sent to our AI provider, Anthropic, to write the answer. Answers and uploads are deleted 90 days after the form closes or expires; anything the agency approves becomes part of your website.

Domain owners. If an agency registers a domain with you named as its owner, your name, organisation, postal address, email and phone number are sent to our domain registrar, Name.com, and to the registry for that domain ending, as the rules for domain names require.

For this information we act for the agency, which decides how it is used. Please contact the agency first; we will help them respond.

Contact forms. When you send a message through a website’s contact form, we store your name, contact details and message for the business that owns the website, and pass them on to the places that business has chosen, such as its email inbox or another app. We don’t store your IP address with it.

Demo websites. Agencies share demo versions of websites before they go live. When a demo is opened we record the time, the page that linked to it and the type of browser, so the agency knows it was seen. We don’t record IP addresses. If a demo is password-protected, a cookie remembers for 30 days that you entered the password.

The owner’s own tools. A website’s owner can add their own tools, such as Google Analytics, Google Tag Manager, a Meta Pixel or a WhatsApp chat button. Those are the owner’s choice and are covered by the owner’s privacy notice and the tool provider’s.

Reviews. Reviews shown on a website come from Google and appear with the reviewer’s name as Google publishes it.

For this information we act for the website’s owner. Please contact them about it first.

Our customers can send email from their own mailbox through LocalGap, prepare LinkedIn messages and texts, and make phone calls. For each message we keep a copy, its delivery status and any reply, so the customer can follow the conversation. If the sender turns on open tracking, emails include a small image that tells them whether the email was opened.

For calls we keep the phone numbers, time, length, outcome and the caller’s notes. If the caller chooses to record a call, the recording is stored by our calling provider, Telnyx or Twilio.

Every automated email includes an unsubscribe link. Using it stops that customer’s LocalGap emails to you. You can also reply to the sender and ask them to stop.

The customer who contacted you decides how your information is used, and we act for them. Please contact them about it first.

If you connect a Gmail or Google Workspace mailbox, LocalGap asks Google for permission to send email on your behalf and to see your basic profile (your name and email address).

• We use the sending permission only to send the messages you write or schedule in LocalGap, from your own mailbox. It does not let us read, search or delete the email in your mailbox.
• We use your name and email address to show which mailbox is connected and as the sender details.
• We store the access Google gives us encrypted, and ask Google to cancel it when you disconnect the mailbox. You can also remove LocalGap’s access at any time from your Google Account settings (opens in a new tab).
• We don’t use Google user data for advertising, we don’t sell it, and we don’t use it to train AI models. Nobody at LocalGap reads it unless you ask us to for support, or we must for security or to comply with the law.

LocalGap’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy (opens in a new tab), including the Limited Use requirements.

LocalGap also uses Google Maps features and content. Google’s handling of them is covered by the Google Privacy Policy (opens in a new tab).

We share personal information with these service providers, only as far as each needs it to do its job for us:

We also share information with the LocalGap customer it relates to (for example, a website’s enquiries go to its owner); when the law requires it, or to protect people’s rights and safety; and with a buyer or successor if our business is sold or merged, who must keep to this policy.

We don’t sell our customers’ personal information and don’t share it for advertising. Business contact information in our search results is made available to our customers as part of the service, as section 4 describes; the rights in section 12 apply to it.

LocalGap is operated by a US company, and most of our providers process information in the United States. DeepSeek processes the requests we send it in China, and Alibaba Cloud processes ours in Singapore. These countries may not protect personal information the way yours does. When we transfer personal information from the European Economic Area, the UK or Switzerland, we rely on safeguards such as the European Commission’s standard contractual clauses where our providers offer them.

Depending on where you live, you may have the right to:

• get a copy of the personal information we hold about you;
• have it corrected if it is wrong;
• have it deleted;
• object to how we use it, including an absolute right to object to its use for direct marketing;
• ask us to limit how we use it;
• receive it in a portable format;
• withdraw consent, where we rely on consent.

If you are in the European Economic Area, the UK or Switzerland, you can also complain to your data protection authority. We would appreciate the chance to sort it out with you first.

If you are a California resident, you have the right to know what personal information we collect, use and disclose about you; to have it deleted or corrected; to opt out of its sale or sharing; and not to be treated differently for using these rights. You can authorise someone to make a request for you.

How to ask. Email support@localgap.io. We will reply within 30 days (45 days for California requests), and may first ask you to confirm your identity. If your request is about information we hold for one of our customers (sections 5 to 7), we will pass it to them and help them respond.

These are strictly necessary for the service to work, so we don’t ask for consent to them. Websites our customers host may use other cookies their owners add (section 6).

Everything travels over encrypted connections (HTTPS). Account passwords and demo passwords are stored only in hashed form. Mailbox passwords, sign-in tokens and the secrets of connected apps are encrypted, and database access rules limit each account to its own data. No system is perfectly secure; if a breach affects your information, we will tell you and the authorities as the law requires.

LocalGap is for businesses and is not meant for anyone under 18. We don’t knowingly collect information about children. If you think we have, email support@localgap.io and we will delete it.

We will update this policy when LocalGap or the law changes, and the date at the top shows the latest version. If a change is significant, we will tell account holders before it takes effect.

Email support@localgap.io, or write to 1209 Mountain Road Pl NE, Ste R, Albuquerque, NM 87110, USA. See also our Terms of Service.