Privacy Policy

1. Introduction & Commitment to Privacy

LocalYantra Technologies Pvt. Ltd. ("LocalYantra", "we", "our", or "us") operates https://localyantra.com and provides cloud-based Google Business Profile optimization, ranking audit, and AI review software. We are deeply committed to respecting your privacy, protecting your personal data, and maintaining strict compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act, India), the Information Technology Rules, 2011, GDPR, and official Google API User Data Policies.

2. Data We Collect

We collect information necessary to deliver our services effectively:

• Personal & Contact Details: Name, email address, telephone/WhatsApp number, company name, and account password or OAuth identifiers.
• Google Business Profile Data: Upon authorizing via Google OAuth 2.0, we access verified location names, addresses, Place IDs, customer reviews, replies, media, operating hours, categories, and aggregated search performance metrics.
• Billing & Payment Data: Transaction identifiers, Razorpay Order IDs, billing address, and GSTIN. We do not store raw credit/debit card numbers or bank credentials; all payment processing is performed securely by Razorpay.
• Technical & Usage Telemetry: IP addresses, browser types, session cookies (lp_session), and system performance logs.

3. Google API Services & Limited Use Disclosure

LocalYantra's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements:

• Purpose-Specific Utilization: Google user data is strictly used to display, audit, and optimize your Google Business Profiles, generate AI review responses upon your request, and publish scheduled posts.
• No Data Sales or Transfers: We will never sell, lease, or trade Google user data to third parties, data brokers, or advertising networks.
• No Ad Targeting: Google user data is never used to serve personalized, retargeted, or interest-based advertisements.
• No AI Model Training on Private Data: We do not use Google user data to train generalized machine learning or artificial intelligence models without your explicit opt-in instruction.
• Human Access Restrictions: No employee or engineer at LocalYantra reads your Google Business Profile data unless you explicitly request assistance to troubleshoot an issue, or when strictly required by applicable law or security investigations.

4. Legal Grounds for Processing (GDPR & DPDP Act)

We process your personal data under the following lawful bases:

• Contract Performance: To provision and fulfill your software subscription and process payments.
• Legitimate Consent: When you connect your Google Account via Google OAuth or contact customer support.
• Legal Compliance: To issue statutory tax invoices and comply with Indian GST and accounting requirements.

5. Data Retention & Permanent Deletion Rights

We retain your account data for as long as your account remains active. You possess the right to:

• Revoke Google Access: You can disconnect LocalYantra at any time via your Google Account Security Permissions.
• Right to be Forgotten: Upon account closure or email request to rankingravils@gmail.com, all stored OAuth tokens, location caches, and profile records are permanently purged from our databases within 30 days.

6. Security Measures

LocalYantra employs enterprise-grade safeguards to protect your information, including TLS 1.3 encryption in transit, strict HTTP-only secure cookie flags, tokenized OAuth secret storage, and PCI-DSS Level 1 compliant payment processing via Razorpay.

7. Grievance Redressal & Data Protection Officer

In accordance with the Information Technology Act, 2000, and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, our designated Grievance Officer is: