Privacy Policy

Who we are

localbot is a product of Fokusbloks Oy, a Finnish limited company. We are the data controller for the information we collect through localbot.io and the localbot service.

Questions about privacy: privacy@localbot.io.

What we collect

When you create a localbot account, we store:

• Your email address (for login and account communication)
• Your phone number (so we can send you SMS notifications)
• Your website URL and widget configuration
• Stripe customer ID for paid subscriptions (Stripe handles the card data — we never see it)

When a visitor submits your contact form, we process the name, contact detail, and message they typed — and the widget ID that identifies your account. We do not track visitors across sites or set non-essential cookies.

Where we store it

All data is held on European Union servers:

• Supabase (database + auth) — Frankfurt region
• Vercel (application hosting) — EU regions
• Stripe (payments) — EU-processed, governed by Stripe's own DPA
• Twilio (SMS delivery) — processes destination phone numbers only

Why we process it

• To deliver the localbot service — receiving form submissions, sending you SMS, showing leads in your dashboard
• To send you subscription and billing emails
• To follow up with you during your trial (for example, the day-25 check-in from Benjam)
• To meet legal and accounting obligations as a Finnish company

How long we keep it

Account data: as long as your account is active, plus 90 days after deletion to cover invoicing and backup cycles. Leads in your dashboard: until you delete them or close your account. Accounting records: kept for the period Finnish tax law requires (typically six years).

Your rights

Under the GDPR you can ask for a copy of your data, correct anything wrong, have it deleted, or move it elsewhere. Email privacy@localbot.io and we'll respond within 30 days. If you think we mishandled your data, you can complain to the Finnish Data Protection Ombudsman (tietosuoja.fi).

Passing data to your visitors

The content your visitors type into your localbot form is your data to handle as the controller, not ours. You are responsible for telling your visitors what happens to it. Most sites link their own privacy notice near the contact form — the same pattern works for localbot.

Cookies

localbot.io uses only what we need to keep you signed in. No advertising or tracking cookies. We use Vercel Analytics for anonymous page view counts; it does not set cookies or collect personal data.

Changes

If we change how we handle data in a meaningful way, we'll email active customers before the change takes effect. The "last updated" date above is the source of truth.