Privacy Policy

1. Who We Are

LocReady ("LocReady," "we," "our," or "us") is a localization readiness audit tool operated by HocusBuzz, a digital agency based in San Marcos, California, USA. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you visit locready.io or use any related service (collectively, the "Service").

If you have questions about this policy, contact us at info@hocusbuzz.com.

2. Information We Collect

2.1 Information You Provide Directly

• Account registration: email address and password (hashed) when you create an account.
• Contact form: name, email address, company name, and message content when you contact us.
• Audit input: URLs you submit for localization readiness audits.
• Payment information: billing details collected and processed by our payment processor (Stripe). We do not store full card numbers on our servers.

2.2 Information Collected Automatically

• Usage data: pages visited, features used, audit counts, timestamps, and click interactions.
• Device & browser data: IP address, browser type and version, operating system, and referring URL.
• Cookies and local storage: session identifiers, audit usage counters, and user preferences (see Section 6).
• Log data: server logs generated when you access the Service, retained for security and debugging.

2.3 Information from Third Parties

• Authentication provider (Supabase): we use Supabase to manage user authentication. Supabase may collect technical data as described in their own privacy policy.
• Payment processor (Stripe): Stripe processes payments and shares limited transaction data with us (amount, date, card type last four digits).

3. How We Use Your Data

We use your personal information for the following purposes:

• To provide, operate, and maintain the Service, including running localization audits on submitted URLs.
• To create and manage your user account and dashboard.
• To process payments and send receipts.
• To respond to your inquiries and support requests.
• To send transactional emails (e.g., account confirmation, password reset). We do not send marketing emails without your explicit consent.
• To analyze usage patterns and improve the Service's functionality and user experience.
• To detect and prevent fraud, abuse, and security incidents.
• To comply with applicable laws and enforce our terms.

4. Legal Bases for Processing (GDPR)

If you are in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:

• Contractual necessity: Processing required to provide the Service you requested (e.g., running audits, managing your account).
• Legitimate interests: Improving and securing the Service, fraud prevention, and analyzing usage data — where these interests are not overridden by your rights.
• Legal obligation: Complying with applicable laws and responding to lawful requests.
• Consent: Where we rely on consent (e.g., optional marketing communications), you may withdraw it at any time without affecting the lawfulness of prior processing.

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share it only in the following circumstances:

• Service providers: We share data with trusted third-party vendors who process it on our behalf (e.g., Supabase for authentication, Stripe for payments, Resend for transactional email, Hostinger for hosting). These parties are bound by confidentiality agreements and may only process data as instructed.
• Legal requirements: We may disclose data if required by law, court order, or government authority, or to protect the rights, property, or safety of LocReady, its users, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of our assets, your data may be transferred as part of that transaction. We will provide notice before your data becomes subject to a different privacy policy.

6. Cookies and Tracking Technologies

We use the following types of storage technologies:

• Essential cookies: Required for authentication and session management. Cannot be disabled without breaking core functionality.
• Local storage: Used to track your daily audit usage count and reset window on your device. This data stays on your device and is not transmitted to our servers.
• Analytics (if applicable): If we use analytics tools in the future, we will update this section and provide opt-out options.

You can clear cookies and local storage data through your browser settings at any time. Doing so will reset your usage counters and sign you out of your account.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Specifically:

• Account data: Retained until you delete your account or request deletion. Audit history in your dashboard is retained for the duration of your account.
• Contact form submissions: Retained for up to 2 years for correspondence records, then deleted.
• Server logs: Retained for up to 90 days for security and debugging purposes.
• Payment records: Retained for 7 years to comply with financial regulations.

After the applicable retention period, data is securely deleted or anonymized.

8. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data:

To exercise any of these rights, contact us at info@hocusbuzz.com. We will respond within 30 days. We may need to verify your identity before fulfilling your request.

9. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

9.1 Right to Know

You may request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share it.

9.2 Right to Delete

You may request that we delete personal information we collected from you, subject to certain exceptions (e.g., data needed to complete a transaction, detect fraud, or comply with legal obligations).

9.3 Right to Correct

You may request that we correct inaccurate personal information we maintain about you.

9.4 Right to Opt Out of Sale or Sharing

We do not sell or share your personal information for cross-context behavioral advertising. No opt-out is necessary.

9.5 Right to Limit Use of Sensitive Personal Information

We do not collect sensitive personal information as defined under the CPRA beyond what is necessary to provide the Service.

9.6 Non-Discrimination

We will not discriminate against you for exercising any of your California privacy rights. You will not receive a different level of service or price as a result of making a privacy request.

9.7 Submitting a California Privacy Request

Submit requests by emailing info@hocusbuzz.com with the subject line "California Privacy Request." We will respond within 45 days, with a possible 45-day extension where reasonably necessary.

9.8 Categories of Personal Information Collected (Last 12 Months)

• Identifiers: Email address, IP address, user ID.
• Internet or network activity: Browsing behavior on the Service, audit usage data.
• Commercial information: Subscription plan and payment history.
• Inferences: Usage patterns derived from the above.

We have not sold or shared any of these categories of personal information in the preceding 12 months.

10. International Data Transfers

LocReady is operated from the United States. If you are located outside the US (including in the EEA or UK), your information will be transferred to and processed in the US, which may have different data protection laws than your jurisdiction.

Where required, we rely on appropriate transfer mechanisms such as the EU Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement to protect data transferred outside the EEA or UK.

11. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have inadvertently collected personal information from a child under 16, we will delete it promptly. If you believe we may have collected such information, please contact us at info@hocusbuzz.com.

12. Security

We implement industry-standard technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These include:

• HTTPS/TLS encryption for all data in transit.
• Hashed and salted password storage (managed by Supabase Auth).
• Access controls limiting data access to authorized personnel only.
• Regular security reviews of our infrastructure and code.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach that affects your rights and freedoms, we will notify you and the relevant authorities as required by law.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Notify registered users via email or a prominent notice within the Service.

We encourage you to review this policy periodically. Your continued use of the Service after changes become effective constitutes your acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For EU/EEA residents, if you are not satisfied with our response, you have the right to lodge a complaint with your local supervisory authority.