Privacy Policy

This Privacy Policy explains how ShotPro Technologies, Inc. (“ShotPro”, “we”, “us”) collects, uses, shares and protects information in connection with the LocalShot platform at localshot.io, the customer portal, and the websites we publish and host on behalf of our customers (together, the “Service”).

LocalShot is a business-to-business product sold to shooting ranges and similar local businesses. If you are a customer of one of those businesses and you submitted a form on a website we host, see Information we process on behalf of our customers below.

Information we collect

Information you give us

• Account and business details — your name, business name, email address, phone number, business address and city, and your existing website address, collected when you request a score, sign up, or add a location.
• Billing information — handled by Stripe. We store a Stripe customer identifier and your subscription plan. We never receive or store full card numbers.
• Content you upload — logos, images and any text you enter or approve in the portal.
• Support correspondence — messages you send us through the contact, help, or support forms.

Information we collect automatically

• Usage and device data — pages viewed, referring page, browser and device type, and IP address, via Google Analytics 4 on localshot.io and on the sites we publish for customers.
• Server logs — requests to our application, retained for security and debugging.

Information we collect from third parties

• Google Places — when you search for your business during the free score, we retrieve its public listing details, including name, address, place identifier and coordinates.
• Google Analytics and Google Search Console — if you connect your Google account, we read the traffic and search-performance data described below.

How we use information

• To provide, operate and support the Service, including publishing and hosting your websites.
• To generate your Range Engagement Score, AI visibility checks and content recommendations.
• To generate draft page and blog content for your review. Nothing is published without your action.
• To process payments, manage your subscription and send billing notices.
• To send you service messages, and — where you have consented — marketing email and SMS.
• To detect, investigate and prevent abuse, fraud and security incidents.
• To comply with legal obligations.

We do not sell personal information, and we do not share it for cross-context behavioural advertising.

Google user data

Connecting your Google account is optional. If you connect it, you grant us read-only access to Google Analytics and Google Search Console for the properties you explicitly select. We use that access only to display your traffic and search performance inside your portal, to compute your score, and to provide recommendations. We store the resulting metrics, and we store your Google refresh token in encrypted form so that reporting continues to work without you reconnecting.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer this data to others except as needed to provide the Service, we do not use it for advertising, and we do not allow humans to read it except with your explicit permission, for security purposes, to comply with applicable law, or where the data has been aggregated and de-identified.

You can disconnect Google at any time from the Google page in your portal, or revoke our access directly at myaccount.google.com/permissions. Disconnecting stops all further collection; previously stored metrics are deleted with your account.

Text messages

If you ask us to send your free score by text, we send a one-time verification code and, where you have agreed, follow-up messages about your results. Message and data rates may apply. Reply STOP to any message to opt out, or HELP for assistance. Consent to receive marketing texts is not a condition of purchase.

Service providers we share information with

We share information with the following processors, each only to the extent needed to run the Service:

• Vercel — application hosting, file storage and caching.
• Neon / PostgreSQL — primary application database.
• Clerk — account authentication and session management.
• Stripe — payment processing and subscription billing.
• Anthropic — AI generation of draft content and analysis. Inputs are not used to train their models.
• Google — Analytics, Search Console, Places and Maps.
• Revfinity / HighLevel — the CRM and marketing automation included with your plan, and delivery of SMS.
• Resend — transactional email delivery.

We may also disclose information if required by law, to enforce our agreements, or in connection with a merger, acquisition or sale of assets, in which case we will give notice before your information becomes subject to a different policy.

Information we process on behalf of our customers

When a visitor submits a contact form on a website we host for one of our customers, we collect that visitor’s name, email, phone number and message, and pass it to that customer’s CRM. In that arrangement our customer is the controller of the information and we act as their processor. We use it only to deliver it to them and to operate the Service. If you submitted such a form and want your information corrected or deleted, please contact the business you submitted it to, or write to us and we will forward your request.

Retention

We keep account and site information for as long as your account is active. After you cancel, we retain it for up to 90 days so the account can be restored, then delete or anonymise it, except where we must keep records longer for tax, accounting or legal reasons. Free-score leads are retained for up to 24 months.

Security

Information is transmitted over TLS and stored on managed infrastructure with access restricted to personnel who need it. Third-party access tokens are encrypted at rest. No system is perfectly secure, and we cannot guarantee absolute security.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to withdraw consent, and to appeal a refusal. California residents have rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them. Residents of the EEA and UK have rights under the GDPR. To exercise any of these, email support@localshot.io. We will verify your request and respond within the period required by applicable law.

Children

The Service is not directed to children under 16 and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

International transfers

We operate in the United States and our providers may process information there. If you access the Service from outside the United States, you understand your information will be transferred to and processed in the United States.

Changes

We may update this policy. If we make a material change we will update the date above and, for significant changes, notify account holders by email before the change takes effect.

Contact

ShotPro Technologies, Inc.
Email: support@localshot.io