Privacy Policy

Who is responsible

For any question about your data: support@locametra.com.

Your account data

• The country you sign in from, derived from your IP address by our hosting provider. The IP address is also recorded in a security log when you sign in, and is used to limit repeated attempts.
• Your name and email address, to identify you and write to you (confirmation code, password reset, invitations, reports).
• Your password, stored only as an irreversible hash: nobody can read it, including us.
• Your sign-in sessions, to keep you signed in and let you sign out.
• Your phone number, asked for when you create your location: our payment provider requires it, and it is used only to open the payment page.
• If you agreed to it when signing up, the date of your consent to receive our news.
• Your payment history: plan or pack bought, amount, date and sale reference.
• If you turn on notifications on a device, the technical address your browser provides to send them to you. You can turn them off at any time.

The data you enter

Your locations (name, address, website, industry, services), your keywords, competitors, clients, tasks, content and reports. They are used only to provide the service and are visible only to members of your organization.

Your WordPress site

If you link a WordPress site, Locametra keeps its address, your WordPress username and the application password you created, encrypted before it is stored. It is only used to create or update DRAFTS of your content and, if WooCommerce is installed, of your product pages: Locametra publishes nothing and reads nothing else on your site. You can remove the link in Locametra, or delete the application password in WordPress, at any time.

Demo requests

If you request a demo from the public page, your name, your email address and, if you provide them, your company, the number of profiles you manage and your message are sent to us by email. They are only used to reply to you and are not stored in Locametra. Your IP address is used to limit repeated requests.

Free map requests

If you request a free Google Maps map, your business name, your city, your trade, your email address and, if you provide them, your first name, your phone number and your website are sent to us by email. They are only used to make your map and send it to you; they are not stored in Locametra unless you create an account. Your IP address is used to limit repeated requests.

Your Google account data

You may choose to connect a Google account. Locametra requests only the access needed for the service you connect, and shows you the list of permissions before you agree.

• Google account email address: to name the connection in your workspace.
• Google Search Console, read-only: queries, pages, clicks, impressions, click-through rate and average position of your site, to show you your SEO opportunities. Locametra cannot change anything in Search Console.
• Google Business Profile: your profile information and your reviews, to measure its completeness and track your reputation. The only change Locametra can make to your profile is publishing a reply to a review, and only when you click “Publish” yourself.
• Access tokens provided by Google are encrypted before being stored.
• When you disconnect your Google account, access is revoked at Google, and the tokens and imported data are deleted from Locametra.

Limited use of Google data

Locametra's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• This data is used only to display and improve the Locametra features you use.
• It is neither sold nor used for advertising.
• It is not used to train artificial intelligence models.
• One single case of transfer to a third party: when you click “Generate a reply” under a review, the text of that review is sent to the artificial intelligence provider to draft a reply. Nothing is sent without that click.
• Nobody at Locametra reads this data, unless you ask us to in order to solve a problem, for security reasons, or when required by law.

Third-party services that receive data

Locametra relies on technical providers. Each receives only what it needs.

• Search results providers (Serper, DataForSEO): your keywords and the search city, to check rankings. No personal data.
• Artificial intelligence providers (OpenAI and, when enabled, Google Gemini): the questions in your visibility panel, the location details needed to write content and, at your request, the text of a review.
• Email delivery service (ZeptoMail, by Zoho): the recipient's address and the message content.
• Payment provider (Chariow): when you open the payment page, your name, email address, phone number and IP address. Chariow sends you its own receipt by email. Your card or payment method details are entered at Chariow and never reach us.
• Website and database hosting: Vercel (website) and Supabase (database).

Cookies

Locametra sets a cookie that keeps you signed in, a cookie that remembers the language you chose (for one year) and, for ten minutes, a cookie that secures the connection of your Google account when you ask for it. These cookies are needed for the service to work.

Advertising measurement: on public pages only, and only if you accept it in the banner, cookies from Meta and Google Ads show which advertisement brought you to the site. Without your consent, none is set, and never in your workspace. To withdraw your consent, clear the site data in your browser.

No other audience measurement tool is used.

Deleting your data

• You can delete your account at any time from the “Account” page. Deletion is immediate and permanent; organizations of which you are the only member are deleted with all their data.
• You can remove a location, a keyword, a competitor, a piece of content or a Google connection from your workspace.
• You can also request access to your data, its correction or its deletion by writing to support@locametra.com.

Security

Each organization's data is kept separate from the others. Passwords are never stored in clear text, Google tokens are encrypted, and the access keys to third-party services stay on the server: they are never sent to your browser.

Changes

If this policy changes significantly, the date at the top of the page is updated.