Privacy Policy

1. Information we collect

• Account data — your name and email when you sign up (including via “Sign in with Google”).
• Restaurant data — business name, city, menu, branding, opening hours and settings you enter.
• Billing data — handled by our processor Stripe; we store only your subscription status and a customer reference, never card numbers.
• Diner data — information your customers submit on your public pages (name, email, phone, reservation/order details, feedback) so you can manage their experience.
• Google Business Profile data — see Section 4.
• Usage data — basic analytics events (e.g. page views, QR scans) to power your dashboard.

2. How we use information

• To provide and operate the service (menus, reservations, orders, reviews, notifications).
• To generate AI-drafted review replies and menu content at your request.
• To send transactional emails (confirmations, alerts) via our processor Resend.
• To process subscriptions via Stripe.
• To secure, debug and improve the service.

We do not sell your personal data or your diners’ personal data.

3. Sub-processors

We share data only with providers that help us run the service: Supabase (database/auth hosting), Vercel (application hosting), Stripe (payments), Resend (email), OpenAI (AI text generation), and Google (Business Profile integration). Each processes data on our behalf under their own terms.

4. Google user data & Google API scopes

Connecting Google is optional. When you do, we request only the scopes needed for the features you use, and with your authorization we access the following:

Google Business Profile — scope business.manage:

• Your Business Profile location details (name, address, phone, Place ID) — used to set up your account, build your review link, and (at your request) import your address and phone onto your Localisr website.
• Your reviews — imported so you can read and reply to them in one place.
• The ability to post replies you approve back to Google.
• Place action links — to add a “Reserve a table” or “Order online” button to your Google listing that points to your own Localisr booking / ordering page, when you choose to.

Google Search Console — scope webmasters.readonly (read-only):

• Your site’s search performance (queries, clicks, impressions, positions) — read only, to show SEO insights in your dashboard. We never modify your Search Console data.

Limited Use. Localisr’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We use Google data only to provide and improve user-facing features within Localisr, do not transfer or sell it, do not use it for advertising, and do not allow humans to read it except where you ask us to, for security/abuse, or as required by law. We store a Google refresh token (encrypted at rest) solely to keep your connection working, and you can disconnect at any time, which revokes our access.

5. Data retention

We keep account and restaurant data while your account is active. You can delete content from your dashboard, and you can request deletion of your account and associated data by emailing us. Disconnecting Google removes the stored Google credentials.

6. Your rights

Under the GDPR you may access, correct, export or delete your personal data, and object to or restrict certain processing. To exercise these rights, contact us at the address below.

7. Security

Data is encrypted in transit (HTTPS) and at rest. Access to production data is restricted. No system is perfectly secure, but we take reasonable measures to protect your information.

8. Contact

Questions or requests: localisrapp@gmail.com.