Privacy

Who is responsible

inlocal is operated by PROJECT82 LLC, 30 North Gould Street, STE R, Sheridan, Wyoming 82801, United States. We are the controller of the personal data described here. This policy explains what we collect when you apply for, order or use inlocal, why, where it is kept, for how long, and what you can ask of us.

What we collect and why

1. Application: the email address you enter, your company or website, your note and the countries you name, and the version of the terms you consented to. We use it to answer your application and to decide whether we can serve you.

2. Sign-in: your email address and, if you turn it on, a second factor. We use it to sign you in with a magic link and to keep your dashboard yours.

3. Order and billing: the identifiers Stripe gives us for your customer record, subscription, checkout session and invoices, the plan you chose, and the version of the terms you accepted at checkout. Your card details are collected and stored by Stripe, not by us.

4. Accounts and requests: the label and profile link of each managed account, the titles, links, notes and captions of the content requests you hand in, and the review notes our operators write. We use them to publish your content and to show you its status and receipts.

5. Clips: the file you hand in is stored until the post is confirmed, then deleted; a hash of the file and caption and the link of the post are kept as the receipt.

6. Phone facts: for each managed phone we record the carrier, the line's country and its status. We do not store phone numbers or SIM identifiers in these records.

7. Technical: a hash of your IP address per form, kept only to limit abuse; five product events (page views and form states) sent to our analytics provider without a person profile, IP address or device fingerprint; error reports that carry an event identifier and an error code, with personal data collection switched off.

We do not sell personal data and we do not use it for advertising.

Where it is kept and who processes it

Our database and files are hosted by Supabase in the Seoul region of the Republic of Korea. The website runs on Vercel, which also counts page views with Vercel Web Analytics (cookieless and aggregate only: no IP address, person profile or device fingerprint is stored). Payments are processed by Stripe, Inc. in the United States. Sign-in and notification emails are delivered by Resend. Product analytics are processed by PostHog and error reports by Sentry, both configured as described above. Each of these providers processes data on our instructions under its own data processing terms. Because PROJECT82 LLC is a United States company, data may be accessed from the United States for the operation of the service.

How long we keep it

1. Applications: 24 months after the decision, then deleted.

2. Sign-in data: while your account exists, and deleted when you ask us to close it.

3. Orders and invoices: for as long as accounting and tax law requires after the last payment.

4. Requests, captions and receipts: while your plan is active and for 30 days after it ends, so you can export your performance data; the clip file itself is deleted when the post is confirmed.

5. Phone facts: reviews expire after 30 days; the record of a phone is kept while the phone is in service.

6. IP hashes: rotated within the rate-limiting window and not kept beyond it.

Your rights

You can ask us to show you the personal data we hold about you, to correct it, to delete it, to give it to you in a portable form, and to stop processing it where the law gives you that right. You can withdraw consent at any time without affecting what was done before. If you are in the Republic of Korea you have the rights set out in the Personal Information Protection Act, including the right to refuse consent and the right to ask for suspension of processing; if you are in the European Economic Area or the United Kingdom you have the rights of the GDPR, including the right to complain to your supervisory authority. Requests go through the contact form on inlocal.ai or by replying to any email we send you, and we answer within 30 days.

Security

Access to the dashboard used by our operators requires a second factor. Captions and hand-ins are scanned for anything that looks like a credential and refused if one is found, so that a password or key cannot be published by mistake. Managed phones are real devices with stock software, kept by us, and their accounts use two-factor authentication that only we hold.

Cookies

The site uses the cookies needed to keep you signed in and to protect forms against abuse. It does not use advertising cookies or cross-site tracking.

Children

The service is offered to businesses and is not directed at children. We do not knowingly collect personal data from anyone under the age of 18.

Changes

We may update this policy; the date at the top of this page is the date of the current version. A material change is announced on the site and, for customers, by email before it takes effect.

Contact

The person responsible for personal data at PROJECT82 LLC is its managing member. Requests and questions go through the contact form on inlocal.ai or by replying to any email we send you.