Privacy Policy

Effective Date: October 9, 2026

This Privacy Policy describes how Locally123 LLC, a Florida limited liability company trading as Locally123 (“we,” “us,” or “our”), collects, uses, discloses, and protects your personal information when you use our mobile application and web platform (the “Service”). Locally123 LLC is the controller of that information. We are committed to protecting your privacy and complying with applicable data protection laws.

1. Information We Collect

Information You Provide Directly:

• Account registration data (name, email address, phone number, password)
• Profile information (business name, service categories, certifications, address)
• Identity verification documents (government-issued ID, selfie photos, license numbers)
• Payment information (processed and stored by Stripe; we do not store full card numbers)
• Communications (messages, support tickets, reviews, call recordings when disclosed)
• Voice recordings you make with the dictation button, or to describe a service request on the request page, which are sent to our AI provider to be converted to text. We do not store the audio — only the resulting text: wherever you chose to dictate it, and, for a service request you submit, on that request, so the technician can read what you said
• Talky messages, if your company uses Talky (the in-app walkie-talkie): the voice messages you send to your teammates, the text they are transcribed and translated into, which teammates have heard them, whether your app is open, and your work status (at a job, on the way, available or offline), which the other people in your company who use Talky can see. Unlike dictation, Talky keeps the audio: for seven days, after which it and the text are deleted automatically. Only the people in that conversation can hear or read a message, and you can delete one you sent, for everyone, sooner
• Job-related data (service descriptions, photos, evidence packages, inspection reports)

Information Collected Automatically:

• Device information (device type, operating system, app version, unique device identifiers)
• Location data (GPS coordinates, for dispatching and tracking purposes; for technicians who enable Live location sharing, collection continues in the background — see Section 8)
• Nearby devices (Bluetooth): the app uses Bluetooth only for a Stripe card reader. It scans for and connects to a reader when a person chooses to connect one, and reconnects to that reader if the connection drops. The reader’s serial number and connection status are shared with Stripe, so that a card can be taken with it
• Usage data (pages visited, features used, timestamps, interaction patterns)
• Log data (IP address, browser type, access times, error logs)
• Push notification tokens (for delivering service updates and alerts)

Information from Third Parties:

• Payment processors (Stripe) — transaction confirmations and merchant data
• Accounting platforms (Intuit QuickBooks) — synchronized financial records when you connect your account
• Communication providers (Twilio) — SMS delivery status, call metadata
• Mapping services (Google) — geocoding and address verification data

2. How We Use Your Information

We use your information to:

• Provide, operate, and maintain the Service
• Process transactions and send related notifications
• Connect customers with service providers and facilitate job dispatching
• Verify user identities and prevent fraud
• Send service updates, safety alerts, and administrative messages
• Provide customer support and respond to inquiries
• Improve, personalize, and expand the Service
• Comply with legal obligations and enforce our agreements
• Generate anonymized analytics and business intelligence reports
• Facilitate accounting integrations (QuickBooks) at your request
• Enable real-time communication between parties via SMS and voice (Twilio)

3. SMS / Text Messaging and Mobile Information

4. How We Share Your Information

We may share your information with:

• Service Providers/Customers: Limited profile information necessary to facilitate jobs (name, phone, location for active jobs)
• Payment Processors: Transaction data sent to Stripe for payment processing
• Communication Providers: Phone numbers and message content are transmitted to Twilio solely to deliver SMS and voice communications you have requested. Mobile opt-in data and consent are never shared with any third party for any purpose.
• Accounting Integrations: Customer, invoice, and payment data sent to QuickBooks when you authorize the connection
• AI Providers: Text you send to the assistant, job descriptions you ask it to parse, dictated audio, a service request you describe by voice, voice messages you send in Talky, and the transcripts of calls handled by the AI receptionist are sent to our AI provider to produce the transcription, translation, draft, filled-in form or reply you asked for, and for no other purpose
• Legal Authorities: When required by law, subpoena, court order, or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or asset sale

We do NOT sell, rent, or share your personal information with third parties for marketing or advertising purposes.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. After account deletion, we may retain certain data as required by law or for legitimate business purposes:

• Transaction records: 7 years (tax and financial compliance)
• Identity verification data: 3 years after account closure
• Communication logs: 2 years
• Evidence and Job Protection records (photos, signatures, location, seals): 1 year from capture, then permanently deleted — this happens automatically and independently of whether the job record still exists. Download and keep your own copy of anything you may need later.
• Anonymized analytics: Indefinitely
• Uploaded files, photos, and evidence: may persist in encrypted backups after deletion and are purged on a rolling schedule

6. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Row-level security policies on database tables
• Secure authentication with session management
• Regular security audits and vulnerability assessments
• Access controls limiting employee access to personal data
• Two-factor authentication options for accounts

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Your Rights & Choices

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data (subject to legal retention requirements)
• Portability: Request your data in a structured, machine-readable format
• Opt-Out: Opt out of non-essential communications via account settings, or reply STOP to any text message
• Withdraw Consent: Withdraw consent for optional data processing at any time
• Disconnect Integrations: Revoke third-party connections (QuickBooks, etc.) from your settings

To exercise these rights, contact us at app@locally123.com. We will respond within 30 days.

8. Location Data

We collect precise location data from technicians during active jobs for dispatching, navigation, and customer-facing real-time tracking. Location data is only actively collected when:

• A technician is on-duty and has location sharing enabled
• A customer has an active service request
• The “Shield Mode” safety feature is activated

Background location (technicians only):

When a technician turns on the “Live” switch in the app, Locally123 collects the technician’s location data to route nearby jobs, show the assigned customer the technician’s live position and estimated arrival time, and detect arrival at the job address — even when the app is closed or not in use. This background collection happens only while the Live switch is on. Technicians are shown an in-app disclosure and must expressly agree before background collection begins, and on Android a persistent notification is displayed the entire time location is being shared. Turning the Live switch off stops all location collection immediately. Location is never collected in the background for customers or for technicians who are not Live.

You can also disable location access at any time through your device settings, though dispatch, live tracking, and related features may not function properly.

9. Cookies & Tracking

We use essential cookies and local storage to maintain your session and preferences. We do not use third-party advertising cookies or cross-site tracking technologies.

10. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we discover that we have collected information from a minor, we will promptly delete it.

11. International Data Transfers

Your data may be transferred to and processed in the United States where our servers are located. By using the Service, you consent to the transfer of your information to the United States. We ensure appropriate safeguards are in place for international transfers.

12. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act, including:

• Right to know what personal information is collected and how it is used
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell personal data)
• Right to non-discrimination for exercising privacy rights

13. Artificial Intelligence & Automated Processing

We use artificial intelligence and automated systems to operate features of the Service, including an automated SMS assistant, in-app chat, automated drafting of documents and line items, transcription and translation of voice messages, and categorization. To provide these features, information you submit — such as messages, job details, and addresses — may be processed by us and by third-party AI service providers acting on our behalf. AI-generated output is not professional advice, and you are responsible for reviewing it before relying on it. We do not use AI to make legally significant decisions about you without human involvement.

14. Publicly Accessible Content & Uploaded Files

Some content is stored in publicly accessible storage so it can be displayed as intended — for example, business profile photos, public business cards, and public map listings. Content you publish to public areas may be accessible to anyone with the link, may be cached, and may be indexed by search engines; do not publish anything you need to keep private. Files, photos, documents, and evidence you upload may be retained even after you delete them or close your account — including in encrypted backups and where retention is required for legal, tax, compliance, audit, safety, dispute, or evidentiary purposes, or where immediate deletion is not technically feasible. Backups are purged on a rolling schedule.

15. Linked Bank & Card Accounts

If you choose to link a bank or card account, we use Stripe Financial Connections to read that account’s transaction history. We request transaction data only — for each transaction, its amount, currency, description, status, and dates. We do not receive your online banking username or password, your account balances, your full account or routing numbers, or any ability to move money. From the account itself we store what identifies it: the institution name, the account’s display name, its type, its last four digits, and Stripe’s identifiers for the account and for you as its customer. We also keep housekeeping for the connection — whether it is still active and subscribed, when it last synced, and any error from that sync. The bank login happens inside Stripe’s own secure flow and never passes through Locally123.

We use this data for one purpose: to show you your own transactions inside Locally123 so you can match them against your business expenses. It is visible only to the owner of your business account, is stored in the United States, and is not sold. We do not share it with third parties other than Stripe, which retrieves it on our behalf as our service provider, and we never use it for credit, lending, insurance, or other eligibility decisions.

You can disconnect a linked account at any time from your business settings. Disconnecting stops any further retrieval from that account and deletes the transactions we imported from it.

16. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated effective date. Material changes will be communicated via email or in-app notification. Continued use of the Service after changes constitutes acceptance of the updated policy.

17. Contact Us

For privacy-related questions, data access requests, or concerns: