Last Updated: October 10, 2026
LocalDirect ("LocalDirect," "we," "our," or "us") operates the LocalDirect website, applications, and related services at localdirect.app and seller subdomains (collectively, the "Service" or "Platform"). This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you use the Service as a business user ("Provider") or as someone who books or pays through a Provider storefront ("Client").
This Policy is intended to describe our practices for U.S. users, including California residents, and includes GDPR-style rights language for individuals in the EEA/UK where those laws apply. If you do not agree with this Policy, please do not use the Service.
Provider accounts. For information about your LocalDirect account, business profile, staff, and subscription-related data, LocalDirect determines how that information is processed to provide the Platform.
Client booking data. When a Client books with a Provider, the Provider is the business that collects Client details (such as name, email, and phone) for their own services. LocalDirect processes that Client information on behalf of the Provider to operate bookings, confirmations, reminders, and related Platform features. Providers are responsible for providing any notices and obtaining any consents required for their Clients under applicable privacy and messaging laws.
Clients generally do not create LocalDirect accounts. We store booking-related information entered on a Provider storefront or by a Provider, which may include:
We use first-party cookies and browser storage primarily to:
We do not use third-party advertising or analytics cookies (such as Google Analytics). Our website funnel analytics is first-party and cookieless. Browser settings can block cookies; doing so may prevent login or certain features from working.
We use personal information to:
Where GDPR-style legal bases apply, we typically rely on: performance of a contract (providing the Service you request); legitimate interests (security, product improvement, preventing abuse); and consent where required (for example, certain SMS or marketing messages). You may withdraw consent where processing is based on consent, without affecting prior lawful processing.
We do not sell personal information and we do not share personal information for cross-context behavioral advertising as those terms are commonly defined under California law.
We use vendors that process data on our instructions to run the Service, including:
We may engage additional processors as needed to operate the Service. We will update this Policy when material new processors are added.
Client booking information is visible to the relevant Provider (and their authorized staff) so they can fulfill appointments and communicate with Clients. Providers may also see payment status aids you upload.
We may disclose information if required by law; to protect rights, safety, or security; to enforce our Terms; or in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate safeguards.
We retain Provider account and business data while the account remains active and as needed to provide the Service. Booking and related records are generally retained while associated with an active Provider account and for a reasonable period afterward for dispute resolution, security, and legal compliance. After account deletion or a verified deletion request, we delete or de-identify personal information except where retention is required by law or for legitimate ongoing needs (for example, fraud prevention or resolving disputes).
We use measures appropriate to our size and risk profile, including HTTPS/TLS in transit, password hashing (bcrypt), access controls, and secure hosting. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
This section applies to California residents. In the preceding 12 months, depending on how you use the Service, we may have collected the categories below.
| Category | Examples | Sources | Business purpose | Shared with |
|---|---|---|---|---|
| Identifiers | Name, email, phone, account ID, subdomain, IP (in logs) | You; Providers; automatic; Google OAuth | Account, bookings, security, communications | Hosting, email/SMS, error monitoring, Google (if OAuth) |
| Customer records | Business address, payment handles, booking details | You; Providers | Provide Platform features | Hosting; relevant Provider; payment apps via redirects |
| Commercial information | Services booked, deposit/tip status labels | You; Providers | Bookings and recordkeeping | Hosting; Providers |
| Internet / electronic activity | QR scans, PWA installs, usage logs, error events | Automatic | Analytics, security, reliability | Hosting; error monitoring |
| Geolocation (coarse) | Derived from IP in logs (not precise GPS) | Automatic | Security and operations | Hosting; error monitoring |
| Audio/visual (if uploaded) | Logos, photos, payment screenshots | You; Providers; Clients | Branding and payment status aids | Hosting; Providers |
| Inferences | Not used to build marketing profiles | N/A | N/A | N/A |
We do not sell personal information or share it for cross-context behavioral advertising. California residents may request to know, access, correct, or delete personal information, and to opt out of sale/sharing (though we do not sell or share in that sense). We will not discriminate against you for exercising these rights. To submit a request, email [email protected]. We may verify your identity before fulfilling a request. You may use an authorized agent as permitted by law.
If you are in the EEA or UK and applicable law provides these rights, you may have the right to access, rectify, erase, restrict, or object to certain processing, and to data portability. You may also lodge a complaint with a supervisory authority. Contact [email protected] to exercise these rights.
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Provider accounts are intended for users 18 years of age or older. If you believe we have collected information from a child under 13, contact us and we will take appropriate steps to delete it.
LocalDirect is operated from the United States. Personal information is processed and stored in the U.S. (including by our hosting and vendor providers). If you access the Service from outside the U.S., you understand that your information may be transferred to the U.S., where privacy laws may differ from those in your country.
When SMS features are enabled, LocalDirect (or the Provider you booked with, using our Platform) may send SMS messages if a phone number is provided in connection with a booking. By providing your number, you may opt in to:
If we become aware of a data breach affecting your personal information in a way that requires notice under applicable law, we will notify affected users and regulators as required, and will describe what happened, what information may be involved, and steps you can take, as appropriate. Providers should also use strong unique passwords and notify us promptly of suspected unauthorized access.
We may update this Privacy Policy from time to time. We will post the updated Policy with a revised "Last Updated" date and, for material changes, may also notify Providers by email. Continued use of the Service after changes become effective constitutes acceptance of the updated Policy, except where applicable law requires additional consent.
Privacy requests and questions:
Email: [email protected]
Business: LocalDirect
Last reviewed and updated: September 25, 2026