Privacy Notice

1. Who we are

Local AI Toolbelt (the "Service") is operated by Laura Cruz ("Local AI Toolbelt", "we", "us"). We act as the data controller for personal information collected through the Service. You can contact us about privacy matters at lrcrz7@gmail.com.

2. Information we collect

• Account data: name, email address, password (hashed), and authentication identifiers when you sign up or log in (including via Google).
• Profile and business data: the business name, location, services, tone, and other information you save in your profiles to power the generation tools.
• User-submitted content: prompts, photos, reviews, and other content you upload to use the AI tools, plus the outputs we generate for you.
• Support and communications: messages you send us and our replies.
• Usage and device data: log data, pages visited, feature interactions, IP address, browser, device identifiers, and approximate location derived from IP.
• Cookies: essential cookies for authentication and session management, and limited analytics cookies (see Section 8).

Payment card details are collected and processed by Paddle, our Merchant of Record. We do not store full card numbers.

3. How we use your information

• Provide the Service — create accounts, run the generation tools, save your work, and surface relevant content (legal basis: contract).
• Customer support — respond to your questions and resolve issues (legal basis: contract / legitimate interests).
• Security and fraud prevention — detect abuse, protect accounts, and enforce our Terms (legal basis: legitimate interests / legal obligation).
• Improve the Service — analyze aggregated usage to understand what works and fix what doesn't (legal basis: legitimate interests).
• Marketing — send product updates and tips by email where permitted; you can opt out at any time (legal basis: consent / legitimate interests).
• Legal compliance — meet our regulatory and legal obligations (legal basis: legal obligation).

4. Who we share data with

• Service providers (subprocessors): hosting and database (Lovable Cloud / Supabase), AI model providers (Google, OpenAI), email infrastructure, and analytics tooling. These providers process data only on our instructions.
• Paddle (Merchant of Record): for payment processing, subscription management, billing, tax compliance, and invoicing. Paddle is an independent controller for the data it collects to perform these functions.
• Professional advisers: legal, accounting, and similar advisers, where reasonably necessary.
• Authorities: where required by law, regulation, or valid legal process.

We do not sell your personal information.

5. International transfers

Some of our service providers operate outside your country (including in the United States). Where personal data is transferred outside the UK or EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or equivalent mechanisms.

6. Data retention

We keep account and profile data for as long as your account is active. After you delete your account, we delete or anonymize personal data within a reasonable period, except where we must retain it to comply with legal, accounting, or security obligations.

7. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to or withdraw consent for certain processing. For users in the UK and EEA, you also have the right to lodge a complaint with your local supervisory authority. We respond to verified requests within one month. To exercise these rights, email lrcrz7@gmail.com.

8. Cookies

We use essential cookies (required to keep you logged in and to remember your preferences) and limited analytics cookies (to understand aggregate usage). You can manage cookies through your browser settings; disabling essential cookies will prevent the Service from working correctly.

9. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and least-privilege practices for our team. No system is perfectly secure; we encourage you to use a strong, unique password.

10. Children

Local AI Toolbelt is intended for use by adults operating a business. We do not knowingly collect personal data from children under 16.

11. Changes to this notice

We may update this Privacy Notice from time to time. We will notify you of material changes through the Service or by email.

12. Contact

Questions or requests? Email lrcrz7@gmail.com.