Privacy Policy

Overview

This Privacy Policy describes how LocalSpark ("LocalSpark," "we," "us," or "our") collects, uses, stores, and protects information in connection with our software-as-a-service platform (the "Service"). Our Service helps local businesses create advertising content and publish ads on Meta platforms (Facebook and Instagram) using automation and artificial intelligence.

By creating an account or using the LocalSpark platform, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

Who We Are

LocalSpark is a marketing technology company that provides an automated advertising platform for local service businesses. We help businesses create professional ad content and publish it on Facebook and Instagram without requiring technical expertise or a marketing agency.

Information We Collect

A. Account & Identity Information

When you create an account, we collect:

• Full name and email address
• Business name, address, and phone number
• Password (stored in encrypted, hashed form — we never see your actual password)
• Billing information (processed securely by Stripe — we do not store full card numbers)
• Profile preferences and notification settings

B. Brand & Business Information

To generate your ad content, we collect:

• Business logo, brand colors, and font preferences
• Service descriptions, pricing, and promotional offers
• Photos and videos you upload for use in advertisements
• Brand voice notes and messaging preferences
• Geographic service area and targeting preferences

C. Usage & Technical Information

When you use the platform, we automatically collect:

• IP address, browser type, and device information
• Pages visited within the platform and time spent
• Feature interactions (buttons clicked, forms submitted)
• Error logs and performance data to improve our service
• Cookies and session tokens to keep you logged in

D. Advertising Performance Data

Once your ad campaigns are running, we receive and store:

• Campaign impressions, clicks, reach, and engagement metrics
• Lead count and cost-per-lead data
• Ad spend and budget utilization data
• Audience targeting data (aggregated, not individual user data)

Meta Platform Data (Facebook & Instagram)

What We Access on Meta's Platform

When you connect your Facebook Business account to LocalSpark, you grant us permission to access the following on your behalf:

• ads_management — to create, edit, pause, and publish ad campaigns, ad sets, and individual ads in your Facebook Ad Account
• ads_read — to read campaign performance metrics, impressions, clicks, and spend data to display in your LocalSpark dashboard
• business_management — to access your Business Manager account and associated ad accounts
• pages_read_engagement — to associate your Facebook Page with ad campaigns
• instagram_basic — to connect your Instagram account for Instagram ad placements

How We Use Meta Data

All Meta platform data accessed through our integration is used solely to provide the LocalSpark service to you — specifically:

• To create and publish ad campaigns on your behalf in your own Meta Ad Account
• To display performance analytics in your LocalSpark dashboard
• To optimize your campaign settings and ad creative based on performance
• To send you notifications about your campaign status and results

What We Do Not Do With Meta Data

• We do not sell, share, or transfer your Meta data to any third parties
• We do not use Meta data for advertising our own products
• We do not use Meta data to build profiles on individuals who see your ads
• We do not use Meta data for any purpose other than providing the LocalSpark service
• We do not retain Meta data after you delete your account (see Data Retention section)
• We do not grant any other applications or services access to your Meta data

Revoking Meta Access

You may revoke LocalSpark's access to your Meta account at any time through Facebook's Settings → Security → Apps and Websites. Revoking access will stop all automated ad management but will not affect existing campaigns already published.

How We Use Your Information

We use the information we collect to:

• Provide the Service — create your account, generate ad creative, launch campaigns, and manage your subscriptions
• Generate AI Ad Content — your brand assets and uploaded photos are sent to third-party AI services (OpenAI, Stability AI) for ad creative generation. These services do not retain your content for training purposes under our enterprise agreements
• Display Analytics — present campaign performance data in your dashboard in a clear, actionable format
• Send Communications — notify you about new leads, ad approvals, performance reports, billing, and important account updates
• Improve the Service — analyze aggregate usage patterns to improve features, fix bugs, and enhance the user experience
• Process Payments — manage subscription billing through Stripe
• Ensure Security — detect fraud, prevent unauthorized access, and protect user accounts
• Comply with Legal Requirements — respond to lawful requests from government authorities where required

We do not use your information for behavioral advertising, sell your data to data brokers, or share your data for any purpose not described above.

Sharing & Disclosure

We share your information only with the following categories of trusted service providers, strictly to operate the LocalSpark platform:

• Meta Platforms, Inc. — to publish and manage your ad campaigns on Facebook and Instagram via the Marketing API
• OpenAI / Stability AI — to generate AI-powered ad images and copywriting from your brand assets. Data is not retained for AI training under our agreements
• Stripe, Inc. — to securely process subscription payments. Stripe handles all card data; we never store full payment card numbers
• Email Provider — to send transactional emails (login, campaign alerts, weekly reports)
• Cloud Hosting Providers — to store your data securely in encrypted cloud infrastructure
• Review Management Providers (if add-on enabled) — aggregated review data from Google/Yelp accessed via their official APIs

We may also disclose information if required by law, court order, or to protect the rights, property, or safety of LocalSpark, our users, or the public.

We never sell your personal information to third parties. We never share your data for cross-context behavioral advertising.

Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Specifically:

• Account data — retained for the duration of your subscription plus 30 days after cancellation
• Uploaded media (photos, logos, videos) — retained while your account is active; deleted within 30 days of account deletion
• Campaign performance data — retained for 24 months to provide historical reporting; aggregated data may be kept longer for internal analytics
• Meta platform data — retained only as long as necessary to operate the service; deleted upon account deletion or access revocation within 30 days
• Billing records — retained for 7 years to comply with financial regulations

To request deletion of your data, contact us at privacy@localsparkhq.com or use the "Delete Account" option in your Settings page.

Security

We implement industry-standard security measures to protect your information:

• All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher (HTTPS)
• Passwords are hashed using bcrypt and never stored in plain text
• Meta access tokens are stored encrypted and are scoped to the minimum permissions required
• Our infrastructure uses encrypted storage with restricted access controls
• We conduct regular security reviews and vulnerability assessments
• Employee access to user data is limited to those who need it to support you

No method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach affecting your information, we will notify you within 72 hours as required by applicable law.

Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Right to Access — request a copy of the personal information we hold about you
• Right to Correction — request that we correct inaccurate or incomplete information
• Right to Deletion — request that we delete your personal information (subject to legal retention requirements)
• Right to Portability — request your data in a machine-readable format
• Right to Withdraw Consent — withdraw consent for data processing at any time, including revoking Meta API access
• Right to Object — object to certain types of data processing
• Right to Restrict Processing — request that we limit how we use your data in certain circumstances

To exercise any of these rights, please contact us at privacy@localsparkhq.com. We will respond within 30 days of receiving your request.

California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information:

• Right to Know — know what personal information we collect, use, share, and sell
• Right to Delete — request deletion of your personal information
• Right to Opt-Out — opt out of the sale of your personal information. Note: LocalSpark does not sell personal information.
• Right to Non-Discrimination — we will not discriminate against you for exercising your CCPA rights

To submit a verifiable consumer request, contact us at privacy@localsparkhq.com with the subject line "CCPA Request."

Children's Privacy

LocalSpark is a business-to-business platform intended for use by adults (18+) operating legitimate businesses. We do not knowingly collect personal information from children under the age of 13. If we become aware that a child under 13 has provided us with personal information, we will delete that information promptly.

If you believe a child has provided us with personal information, please contact us at privacy@localsparkhq.com.

Changes to This Policy

We may update this Privacy Policy from time to time as our Service evolves or as required by law. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Send an email notification to all registered users at least 14 days before the changes take effect
• Display a banner notification within the LocalSpark platform

Continued use of the Service after the effective date of any changes constitutes acceptance of the revised policy. We encourage you to review this policy periodically.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us through any of the following:

For issues related specifically to your Meta/Facebook ad data or to revoke our access to your Facebook account, you can also manage permissions directly through Facebook App Settings.