1. Introduction

Welcome to LocalWashAdvisor ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at localwashadvisor.com (the "Service").

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide to Us

2.2 Information Collected Automatically

• Usage Data: Pages viewed, features used, time spent on platform, click patterns
• Device Information: Browser type, operating system, device type, screen resolution
• Log Data: IP address, access times, referring URLs, user agent strings
• Analytics Data: Profile views, direction requests, phone clicks, website clicks, coupon interactions
• Cookies and Tracking: Session cookies, authentication tokens, preference cookies

2.3 AI Chat Data

When you use our AI chat assistant, we collect and store:

• Chat conversation history
• Questions asked and responses provided
• Context data to improve AI responses
• Timestamps and session information

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Provision: Create and manage user accounts, display business profiles, process reviews and ratings
• Payment Processing: Handle subscriptions, process coupon redemptions, manage billing
• Analytics: Provide business insights, track engagement metrics, improve platform performance
• AI Chat Assistance: Answer user questions, provide recommendations, improve AI responses over time
• Communication: Send transactional emails, subscription notifications, important updates
• Platform Improvement: Analyze usage patterns, fix bugs, develop new features
• Security: Detect fraud, prevent abuse, protect against unauthorized access
• Legal Compliance: Comply with legal obligations, enforce our terms, resolve disputes

4. Data Storage and Security

We implement industry-standard security measures to protect your personal information:

• Encryption: All data is encrypted in transit (SSL/TLS) and at rest
• Database Security: Data stored in Supabase with role-based access controls
• Password Security: Passwords are hashed using bcrypt (never stored in plain text)
• Payment Security: Credit card data handled by PCI-compliant payment processors (Creem.io/Stripe)
• Access Controls: Limited employee access to personal data, audit logs maintained
• Regular Backups: Automated backups to prevent data loss

Data Retention: We retain your data for as long as your account is active or as needed to provide services. You may request deletion of your data at any time by contacting us.

5. Third-Party Services

We use the following third-party services that may collect and process your data:

• Payment Processing: Creem.io and Stripe (for secure payment processing)
• Database Hosting: Supabase (PostgreSQL database with encryption)
• Web Hosting: Vercel (application hosting and CDN)
• Authentication: Google OAuth (optional login method)
• Mapping Services: Google Maps API (for directions and location display)
• AI Services: OpenAI or similar (for AI chat functionality)

These third parties have their own privacy policies. We encourage you to review them. We are not responsible for the privacy practices of third-party services.

6. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Public Information: Business profiles, reviews, and ratings are publicly visible
• Service Providers: Third-party vendors who assist in operating our platform (hosting, payment processing, etc.)
• Business Transfers: In the event of a merger, acquisition, or sale of assets
• Legal Requirements: When required by law, court order, or government request
• Protection of Rights: To protect our rights, property, safety, or that of our users
• With Your Consent: When you explicitly authorize us to share specific information

7. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal data (subject to legal obligations)
• Data Portability: Request your data in a machine-readable format
• Opt-Out: Unsubscribe from marketing communications (transactional emails cannot be opted out)
• Account Deletion: Delete your account entirely from your dashboard settings

To exercise these rights, please contact us at privacy@localwashadvisor.com

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to improve your experience:

• Essential Cookies: Required for authentication and basic functionality
• Analytics Cookies: Help us understand how users interact with our platform
• Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings. However, disabling essential cookies may affect platform functionality.

9. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

13. Additional Rights for EU and California Residents

GDPR (EU Residents):

If you are located in the European Union, you have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with a supervisory authority.

CCPA (California Residents):

If you are a California resident, you have the right to know what personal information we collect, the right to delete your personal information, and the right to opt-out of the sale of your personal information. We do not sell personal information.