Security

Database row-level security rules make sure people only see data for workspaces they belong to. Sensitive tables and actions are only reachable from our servers, never directly from the browser.

All traffic uses HTTPS (TLS). Data is encrypted at rest by our hosting provider. Google access tokens are encrypted again by us before storage and are never shown in the browser.

We ask Google only for the Business Profile permission needed to run the features you use. You can disconnect at any time, and we delete the tokens straight away.

Payments are handled by Stripe. We never see or store full card numbers.

Support staff access is limited to named people, checked on every request and logged with a reason.

Please email privacy@localseoai.io with details. Do not test against other customers’ data.