Privacy Policy

This Privacy Policy explains how Downlocal ("Downlocal," "we," "us," or "our") collects, uses, and shares information when you use our website at downlocal.com, our mobile applications, and related services (collectively, the "Service"). By using the Service, you agree to the practices described here.

Downlocal is operated from Michigan, United States. If you are accessing the Service from outside the United States, your information will be transferred to and processed in the U.S.

1. Information we collect

We collect the following categories of information:

Account & business information

When you create an account, we collect your name, email address, and a hashed password. When you set up a business, we collect the business name, address, phone number, hours, and any other details you choose to add.

Content you provide

We collect the deals, events, descriptions, tags, photos, and other content you submit so the Service can generate and schedule posts on your behalf.

Connected social accounts

When you connect a Facebook Page or Instagram Business account, Meta provides us with an access token, your page or account ID, your page or profile name, and the permissions you grant. We use these to publish posts you have approved. We do not access your personal Facebook profile, friends list, or direct messages.

Payment information

Subscriptions are processed by Stripe. We do not store your full credit card number. We receive limited billing details from Stripe (such as the last four digits of your card, brand, expiration, and billing ZIP) to display in your account and to handle renewals, refunds, and dunning.

Usage data

We collect technical information about how you use the Service: IP address, browser or device type, referring pages, timestamps, posts generated, and actions taken. We use standard server logs and first-party analytics for this purpose.

Communications

If you email us, fill out a form, or message us through the app, we keep a record of that correspondence.

2. How we use information

We use the information we collect to:

• Provide, maintain, and improve the Service.
• Generate post text and images using artificial intelligence based on the content you provide.
• Schedule and publish approved posts to your connected social media accounts.
• Process subscription payments and prevent fraud.
• Send transactional messages (account confirmations, password resets, billing notices, posting failures) and, if you opt in, occasional product updates.
• Monitor performance, debug issues, and protect the Service and our users.
• Comply with legal obligations and enforce our Terms.

3. AI & content generation

Downlocal uses third-party AI providers to generate post text and, in some cases, images. When you create a deal, event, or other content, the relevant inputs (such as your business name, the content you describe, and the tags you assign) are sent to these providers so they can return generated content.

We do not authorize these providers to use your content to train their general-purpose models. Generated content belongs to you, subject to the licenses described in our Terms of Service.

4. Third-party services

We share information with the following service providers strictly so they can perform services on our behalf:

• Meta (Facebook & Instagram) — to publish posts you have approved to your connected accounts.
• Stripe — to process subscription payments.
• Cloud hosting providers — including Laravel Cloud and Amazon Web Services (AWS), to host the Service and store media.
• AI providers — to generate post content from inputs you supply.
• Email delivery providers — to send transactional emails.
• Analytics & error monitoring — to understand product usage and detect issues.

We may also disclose information when required by law, to protect the rights or safety of Downlocal or others, or in connection with a corporate transaction such as a merger or acquisition.

We do not sell your personal information.

5. Data retention

We keep your information for as long as your account is active or as needed to provide the Service. When you delete your account, we delete your account, business, content, and connected-channel data within 30 days, except where we are legally required to retain certain records (for example, payment and tax records).

6. Security

We use industry-standard measures to protect your information, including encryption in transit (TLS), encrypted password storage, and access controls. No system is perfectly secure, so we cannot guarantee absolute security, but we take reasonable steps to protect what you entrust to us.

7. Your choices & rights

You can review and update your account information, business details, and connected accounts at any time in your account settings. You can delete your account from the web or mobile app, which will remove your data as described in Section 5.

California residents have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right not to be discriminated against for exercising these rights. To make a request, email hello@downlocal.com.

European Economic Area, U.K., and Swiss residents, where applicable under GDPR or similar laws, have rights to access, correct, port, or erase personal data, and to object to or restrict certain processing. To exercise these rights, email hello@downlocal.com.

8. Children's privacy

The Service is intended for use by business owners and is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with information, please contact us so we can remove it.

9. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service. The "Last updated" date at the top of this page reflects the current version.

10. Contact us

If you have questions about this Privacy Policy or how we handle your information, email hello@downlocal.com.