Privacy Policy

Locally Shown Studio helps you discover questions, prepare talking points, and record video answers. Your business profiles, saved questions, saved talking points, and recordings are stored in the browser you use. Unsaved discovery results and topic suggestions may be stored only for the current browser session.

Signing in does not upload, back up, or sync your saved research or recordings. Other browsers, devices, and web addresses have separate storage. Clearing site data, private-browsing sessions, browser storage limits, or a device failure can remove local work. Signing out does not erase it; someone using the same browser profile may still be able to access it.

Camera and microphone access requires your permission. Studio records locally and does not upload your audio or video to our servers or AI providers. You can revoke camera and microphone permissions in your browser settings.

Research exports contain business details, questions, search context, and saved talking points, including personal details you entered. Importing a research file reads it in your browser; it does not create a cloud backup. Check exports before sharing them. Videos are not included in research exports and must be downloaded separately.

Browser storage does not mean every Studio feature works only on your device. When you request an online feature, the information needed to fulfill it is transmitted to our server and the relevant provider:

• Account access: Supabase provides email sign-in and stores account identifiers and authentication records. Resend delivers verification emails through our email configuration. Sign-in and security messages are separate from optional marketing communications.
• Credits and security: we keep server-side records of credit balances, purchases, refunds, request identifiers, feature usage, outcomes, and timestamps. Guest preview uses a browser cookie and a protected identifier derived from the network address to enforce limits and reduce abuse. Hosting and authentication providers also process technical request information needed for delivery and security.
• Sign-in protection: Cloudflare Turnstile processes browser and network signals to help distinguish people from automated traffic and reduce sign-in abuse. See Cloudflare’s Turnstile Privacy Addendum.
• Business and location lookup: Google Maps Platform receives lookup information to find business listings. Location searches are processed to find the selected search market; Studio does not require device GPS permission.
• Question discovery: DataForSEO receives the search query and selected market/language to retrieve Google search questions. Choosing a question for deeper discovery sends that question as a new search query.
• AI suggestions and talking points: OpenAI receives the business name, specialty, intended audience, selected location, and, for answer preparation, the question. Refresh requests may also include previous generated suggestions or points. These requests do not include your account email, payment details, or recordings. Avoid putting sensitive personal or client information in questions or business context.
• Payments: Stripe processes checkout information. We retain account-linked order and payment identifiers, purchase status, and refund information to deliver credits and reconcile payments. We do not store full card numbers or bank credentials.
• Feedback: Formspree receives the message and optional email you submit. Do not include secrets or sensitive client information in feedback.

Studio caches some requests and generated results on its server to avoid duplicate provider calls. This operational cache is not a backup of your saved library. AI requests are configured with response storage disabled where supported; this is not a promise that providers retain no data. Providers process and retain information under their applicable service terms and data-handling policies.

AI preparation is manual by default. If you enable Turbo mode, newly saved questions can trigger the AI processing described above automatically. Turning it off stops future automatic preparation; requests already started may finish.

Use Account settings → Research & data to export research, and My recordings to download videos. Local deletion controls remove the selected work from that browser. They do not erase downloaded exports, files you shared, server-side account or payment records, or records held by providers.

Contact contact@locallyshown.com to request access to or deletion of server-held account information. We may verify your identity and retain transaction, security, or other records as described in the Data retention section. Deleting an account does not remotely erase browser copies; use the local controls or clear Studio site data after saving any work you want to keep.

Local work remains subject to your browser’s storage behavior until you remove it; session-only data can disappear when the session ends. Account, credit, payment, support, and security records follow the retention purposes described below. We cannot restore local work we do not hold.

When you select a business and continue past the first report step, we save its Google Place ID, a random intake identifier, progress, and activity timestamps for up to 30 days to understand unfinished intakes. This does not verify business ownership. We do not save the lookup’s name, address, or reviews in that intake record. If you submit the report request, we link the intake to your lead and report; selecting a listing alone does not subscribe you to emails or start a scan.

When you request a visibility report, we use your email to deliver the report link, your selected business and market to run the requested searches, and a protected identifier derived from your IP address to limit misuse. Marketing updates are optional and use a separate opt-in.

Business lookup and maps use Google Maps Platform. Ranking data is collected through DataForSEO, and we inspect the public homepage you provide or the homepage associated with your matching search listing. Report delivery uses our automation providers. Google processes information under its privacy policy.

We may use OpenAI, directly or through Netlify AI Gateway, to explain the report’s findings. This sends selected public business facts, search terms, and summarized scan results; it does not send your email, report access token, or raw homepage content. The AI overview is saved with your report and may contain mistakes.

Report links and stored scan payloads expire within 30 days. Anyone with the unguessable report link can view its business findings, but your email is not displayed. Lead and consent records remain subject to the contact-information retention and deletion practices described below.

This Privacy Policy explains how Aaron Putnam, a sole proprietor doing business as Locally Shown (“Locally Shown,” “we,” “us,” or “our”), collects, uses, discloses, and protects personal information when you visit locallyshown.com, use Locally Shown Studio at studio.locallyshown.com (including its beta), contact us, request an audit or playbook, use our chat assistant, purchase Studio credits or subscribe through Stripe, or receive Google Ads management and related services.

This policy applies to information we control. Third-party services such as Google and Stripe process information under their own privacy policies and terms.

Depending on how you interact with us, we may collect:

• Contact and business information: name, company, email, phone number, service area, website, primary services, and messages you send us.
• Advertising and audit information: campaign status, approximate ad-spend range, goals, challenges, Google Ads account information, campaign settings, performance data, search terms, conversions, and related measurement data you authorize us to access.
• Subscription and transaction information: plan, price, subscription status, Studio credit purchases and balances, billing contact, billing address, transaction identifiers, and limited payment details supplied by Stripe. Stripe processes full card or bank-account details; we do not receive or store full payment credentials on this site.
• Chat and generated-content information: questions, conversation text, and any business or contact details you choose to provide through interactive tools.
• Partner-page and visibility information: public business-profile observations, readiness scores, owner-approved page content, approval records, report requests, and business-representative contact information.
• Device and usage information: IP address, browser and device type, approximate location, referring page, pages viewed, interactions, timestamps, and cookie or similar identifiers.

Please do not send passwords, verification codes, sensitive personal information, or payment-card details through our forms, chat, or email.

We collect information directly from you; automatically from your browser or device; from tools and accounts you connect or authorize, including Google Ads and measurement products; from payment and service providers; and from public business sources when we research a prospective or current client’s market presence.

We may use information to:

• respond to inquiries and provide audits, playbooks, support, and requested services;
• set up, manage, measure, troubleshoot, and report on advertising campaigns;
• process subscriptions, Studio credits, payments, renewals, cancellations, refunds, and accounting records;
• personalize and improve our website, services, content, and interactive tools;
• understand site traffic and the effectiveness of our marketing;
• communicate about your account, service changes, security, and—where permitted—relevant offers;
• detect fraud, abuse, technical problems, or security threats; and
• comply with law, enforce agreements, and protect our rights and the rights of others.

We may disclose information to:

• Service providers that support hosting, databases, form delivery, customer relationship management, workflow automation, analytics, communications, artificial intelligence, security, accounting, and professional services.
• Advertising and payment platforms, including Google products used to manage and measure campaigns and Stripe used to process payments and subscriptions.
• Advisers and authorities when reasonably necessary for legal, tax, audit, security, or compliance purposes, or to protect people, rights, and property.
• A successor organization in connection with a merger, financing, reorganization, sale of assets, or similar business transaction.

We do not disclose personal information to third parties for money. We may use analytics and advertising technologies that are treated as “sharing,” “targeted advertising,” or a similar concept under some privacy laws. Your available choices are described below.

Our current service stack may include Stripe for payments, Google for advertising, analytics, and public business information, OpenAI for AI-assisted features, Formspree for form and lead delivery, Local Falcon for requested local-visibility reporting, Supabase for database and authentication services, Resend for verification email, DataForSEO for search data, Netlify for site hosting and delivery, and automation or customer-management providers used to route and respond to inquiries.

These providers may process information in the United States or other countries under their own terms and privacy notices. The providers we use can change as our operations evolve.

When you authorize access to an advertising or analytics account, we use the accessible data to provide the requested management, measurement, reporting, and support. Access may include campaign configuration, budgets, performance, search terms, conversion data, and account-user information, depending on the permissions you grant.

You control the client account and may remove our manager access. Removing access can prevent us from continuing the services. We do not use one client’s non-public campaign or customer data to market another client’s business.

We use cookies and similar technologies to operate the site, remember preferences, understand visits, and measure interactions. Google Analytics may set or read identifiers and receive device, usage, and approximate-location information. Your browser can block or delete cookies, although some features may work differently.

Our chat feature may temporarily save conversation history in your browser’s local storage so the conversation remains available while you use the feature. Closing or resetting the chat may remove that local copy. Messages sent to the assistant are also transmitted to our server and AI service provider so a response can be generated.

You can learn about Google Analytics controls and its browser opt-out tool at Google’s opt-out page.

You may unsubscribe from promotional email using the instructions in the message or by contacting us. Service, billing, and security messages are not promotional and may continue while we provide services.

Depending on where you live, you may have rights to request access to, correction of, deletion of, or a copy of personal information, or to object to or restrict certain processing. You may also have the right to appeal a decision or complain to a privacy regulator. These rights can be subject to exceptions, including our need to keep transaction, security, legal, and service records.

To make a request, email contact@locallyshown.com. Describe the request and the email or business name connected to the information. We may need to verify your identity or authority before completing it. Authorized agents may submit requests where permitted by law, subject to verification.

We retain information for as long as reasonably necessary to provide services, maintain business and transaction records, resolve disputes, enforce agreements, meet legal obligations, and protect security. Retention varies by the type of information and why it was collected. When information is no longer needed, we may delete it, de-identify it, or securely archive it until deletion is practical.

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No internet transmission, account, or storage system is completely secure, so we cannot guarantee absolute security. You should use unique credentials, enable multi-factor authentication where available, review account access regularly, and avoid sending sensitive credentials to us.

Our site and services are intended for businesses and adults, not children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided information to us, contact us so we can review and delete it as appropriate.

We may update this Privacy Policy as our practices, providers, or legal obligations change. We will post the updated version here and change the effective date above. If a change is material, we may also provide notice through the site, by email, or through another reasonable channel.

For privacy questions or requests, contact Locally Shown at contact@locallyshown.com, call 818-925-4878, or use our contact page. Locally Shown is based in Los Angeles, CA.