Privacy Policy
This policy explains what information LocalBigFish (the "Portal") collects, how we use it, how long we keep it, and who we share it with. It applies to the Portal at www.localbigfish.com and to our use of the Google Business Profile APIs on your behalf.
Summary. We ask for one Google permission: the ability to manage your Google Business Profile. We use it to read your current business listing, propose better categories and services, and — only after you approve them — publish those changes back. We keep Business Profile content for no more than 30 days. We do not sell your data, do not use it for advertising, and do not use it to train AI models.
1. Who we are
LocalBigFish ("we", "us") is a marketing services provider operating the Portal. For any privacy question, data access request, or deletion request, contact support@localbigfish.com. We respond within five business days.
Legal entity and registered address: [INSERT LEGAL ENTITY NAME AND MAILING ADDRESS].
2. Google user data we access
When you sign in with Google, we request the OAuth scope
https://www.googleapis.com/auth/business.manage. This is the only Google permission
the Portal requests. We also receive your basic Google profile information (name, email address)
so we can identify your account within the Portal.
| Data | Why we need it |
|---|---|
| Your Business Profile accounts and the locations within them | So you can choose which location the Portal should work on. |
| Location details: business name, address, phone number, website, primary and additional categories, service items | To show your current listing, check it for consistency, benchmark your categories, and build the proposed replacement. |
| Name and email address on the Google account you sign in with | To create and identify your Portal account and send you change notifications. |
| OAuth access and refresh tokens | To make the above calls on your behalf without asking you to sign in repeatedly during an engagement. |
3. How we use it
We use Google user data solely to provide the Portal's user-facing features:
- Display your current Business Profile categories and services inside the Portal.
- Compare your listing against your website and against publicly visible competing businesses to propose category and service recommendations for your review.
- Generate draft service names and descriptions for you to edit and approve.
- Take a backup snapshot of your existing categories and service items immediately before any change.
- Publish the categories and service items you have explicitly approved, to the location you selected.
- Send you the change notification described in section 6.
We do not use Google user data for any other purpose. Specifically, we do not use it for advertising or ad targeting, we do not use it to determine creditworthiness or for lending purposes, and we do not use it to train, retrain or fine-tune any machine learning or artificial intelligence model.
4. Automated processing and AI
The Portal uses a third-party large language model provider (Anthropic, PBC) to draft category recommendations and service descriptions. Where this is used, the relevant business listing content and your website content may be transmitted to that provider for processing under a commercial agreement that prohibits the use of submitted content for model training. No credentials, access tokens or account identifiers are transmitted.
All output produced this way is presented to you as a draft. It is never published to your Business Profile without your explicit approval.
5. How we store and retain it
- Business Profile content (categories, service items, location details, backups) is retained for no more than 30 calendar days, after which it is permanently deleted from our systems. This matches the Google Business Profile API third-party retention requirement.
- OAuth tokens are encrypted at rest and are deleted when you disconnect the Portal, when your engagement ends, or after 30 days of inactivity — whichever comes first.
- Account and billing records (your name, email, invoices) are retained for as long as your account is active and afterwards only as required for tax and accounting purposes.
- Data is stored on encrypted infrastructure, transmitted over TLS, and accessible only to LocalBigFish personnel who need it to deliver the service.
- We do not aggregate, resell, or build derivative datasets from Business Profile content.
6. Change notifications
Whenever we make a change to your Google Business Profile, we send a notice to the email address on your Portal account within 48 hours. That notice is sent separately from any other correspondence, states what was changed, and tells you how to reverse it.
7. Who we share it with
We do not sell, rent, or trade your information. We do not transfer Google user data to third parties except to the service providers below, each of which processes it only on our instructions:
| Provider | Purpose | Data involved |
|---|---|---|
| Cloud hosting and database provider | Running the Portal and storing data | All data described above |
| Anthropic, PBC | Drafting category and service recommendations | Business listing and website content only |
| Stripe, Inc. | Payment processing | Name, email, billing details. No Google data. |
| Transactional email provider | Sending change notifications and account email | Name, email, change summary |
We may also disclose information where legally required, or as part of a merger or acquisition, in which case you will be notified before your data becomes subject to a different policy.
8. Google API Services User Data Policy
LocalBigFish's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
9. Your choices and control
- Revoke access at any time. Go to myaccount.google.com/permissions, select LocalBigFish, and choose Remove Access. This immediately stops all API access. It does not undo changes already published; contact us for a rollback.
- Request a copy or deletion of your data. Email support@localbigfish.com. We will action deletion within 30 days.
- Offboarding. When your engagement ends, we revoke our own access and return exclusive control of your Business Profile to you within seven business days.
- If you are in California, the EEA or the UK, you may have additional rights of access, correction, portability and erasure. Contact us and we will honour them.
10. Children
The Portal is a business tool and is not directed to anyone under 18. We do not knowingly collect data from children.
11. Changes to this policy
If we make a material change to how we handle Google user data, we will update the effective date above and notify account holders by email before the change takes effect.
12. Contact
LocalBigFish
support@localbigfish.com
[INSERT MAILING ADDRESS]