Privacy — Find Local Merchants

Find Local Merchants ("we", "us", "our") operates the hyperlocal marketplace at findlocalmerchants.com (the "Service"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. By using the Service you agree to the practices described here.

1. Information we collect

a. Information you provide

Account details: name, email address, password, phone number, and profile photo when you sign up or sign in (including via Google).
Shopper preferences: ZIP code and primary local area used to personalize listings.
Merchant business info: business name, address, contact email and phone, website and social links, business hours, service and delivery areas, logo, banner, and product catalog (including product images, prices, and descriptions).
Inquiries and messages: the content of messages you send to merchants or shoppers through the Service, including your name, email, phone (if provided), and any details about the request.
Reports: information you submit when reporting content, including an optional contact email.

b. Information collected automatically

Usage and analytics: page views, profile and listing views, search activity, and similar interaction events linked to merchants and local areas. This is used in aggregate to power merchant dashboards and improve the Service.
Device and log data: IP address, browser type, operating system, referring pages, and timestamps, collected by our hosting and authentication providers as part of normal operation.
Cookies and local storage: we use cookies and browser storage to keep you signed in, remember accessibility and display preferences, cache content for offline use, and store items you save for later. These on-device preferences never leave your browser.

c. Information from third parties

Google sign-in: if you sign in with Google, we receive your name, email address, and profile picture from Google.
Stripe (payments): for merchant subscriptions, Stripe collects and processes payment details directly. We receive only your subscription status and Stripe customer/subscription identifiers — we do not store full card numbers.

2. How we use information

Create and maintain your account and authenticate you.
Operate the marketplace: display merchant profiles and products, route shopper inquiries to the correct merchant, and enable replies.
Send transactional emails (inquiry notifications, replies, account and billing messages, and unsubscribe handling).
Process subscription payments through Stripe.
Provide merchants with aggregated analytics about their listings and reach.
Maintain safety and integrity: review reported content, detect abuse, and enforce our Terms.
Comply with legal obligations and respond to lawful requests.

3. Legal bases (EEA/UK users)

Where applicable, we rely on: performance of a contract (to provide the Service you signed up for), legitimate interests (to operate, secure, and improve the Service), consent (for optional features such as marketing emails), and legal obligation.

4. How we share information

Publicly: merchant profiles, products, and the local areas they serve are visible to anyone using the Service. Do not include private information in fields meant to be public.
Between shoppers and merchants: when you send an inquiry, the merchant receives your message and the contact details you supplied so they can respond.
Service providers: infrastructure, database, email delivery, and payment partners (including Lovable Cloud / Supabase, Stripe, and Google) that process data on our behalf under appropriate agreements.
Legal and safety: when required by law, to enforce our Terms, or to protect the rights, property, or safety of users or the public.
Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Policy.

We do not sell your personal information.

5. Data retention

We keep account data for as long as your account is active. Inquiries, messages, analytics events, and email logs are retained as needed to operate the Service, resolve disputes, and meet legal obligations. You can delete your account at any time from your profile settings; some records may be retained in backups or where required by law.

6. Security

We use industry-standard safeguards including encrypted transport (HTTPS), managed authentication, row-level security on our database, and least-privilege access for our team. No system is perfectly secure; please use a strong, unique password and notify us immediately if you suspect unauthorized access.

7. Your choices and rights

Access and update: view and edit your profile, merchant details, and listings from your account.
Delete: request deletion of your account and associated personal data by contacting us.
Email preferences: use the unsubscribe link in any non-essential email to opt out. Transactional emails (such as inquiry replies and billing notices) are required for the Service.
Cookies and local storage: manage these through your browser settings; disabling them may break sign-in and other features.
Regional rights: depending on your location (e.g. EEA, UK, California), you may have additional rights to access, correct, port, restrict, or object to processing of your personal data, and to lodge a complaint with your local data protection authority.

8. Children

The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us so we can delete it.

9. International transfers

Our service providers may process data in countries other than your own. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses for international transfers.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Service or by email. The "Last updated" date above reflects the latest revision.

11. Contact us

Questions or requests about this Privacy Policy? Reach us through the contact page.