Last updated: March 2026
1. Introduction
LimeLocal ("we", "our", "us") operates the website builder platform at limelocal.site and app.limelocal.site. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
2. Information We Collect
Account Information
When you create an account via Google Single Sign-On (SSO), we receive:
- Your name and email address from your Google account
- Your Google profile picture (optional)
- A unique Google account identifier
Business Information
When you create a website, you may provide:
- Business name, address, and phone number
- Business description and services offered
- Operating hours and service areas
- Photos, logos, and other media
- Social media links and Google Business Profile information
Automatically Collected Information
- IP address and approximate geolocation
- Browser type and device information
- Pages visited and actions taken within the platform
- Referring website and search terms
3. How We Use Your Information
We use your information to:
- Create and manage your account
- Build, publish, and host your website
- Generate SEO metadata, structured data (JSON-LD), and AI-readable content
- Provide analytics on your website performance
- Process payments for Pro plan subscriptions
- Send transactional emails (welcome, billing, site published notifications)
- Improve our service and develop new features
- Prevent fraud and enforce our terms of service
4. Cookies and Tracking
We use cookies and similar technologies for:
- Essential cookies: Authentication, session management, and security
- Analytics cookies: Understanding how visitors interact with published websites (page views, referrers, device type)
- Preference cookies: Remembering your language and editor settings
Published websites include a GDPR-compliant cookie consent banner that allows visitors to accept or decline non-essential cookies.
5. Third-Party Services
We share data with the following third-party services as necessary to operate our platform:
- Google (Authentication): We use Google SSO for account creation and login. Google's privacy policy applies to the authentication process.
- Stripe (Payments): Payment information is processed directly by Stripe. We do not store your credit card details. See Stripe's Privacy Policy.
- Cloudflare (CDN and DNS): Published websites are served through Cloudflare's network for performance and security. Custom domain DNS is managed via Cloudflare.
- Amazon Web Services (Hosting): Our platform infrastructure, including databases and serverless functions, is hosted on AWS in secure, encrypted environments.
6. Data Retention
We retain your data as follows:
- Account data: Retained for as long as your account is active. Deleted within 30 days of account deletion request.
- Published websites: Retained until you delete the site or close your account.
- Analytics data: Aggregated analytics are retained for up to 24 months.
- Billing records: Retained for 7 years as required by applicable financial regulations.
- Soft-deleted sites: Sites in the trash can be restored within 30 days, after which they are permanently deleted.
7. Your Rights (GDPR)
If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR):
- Right of access: Request a copy of your personal data
- Right to rectification: Correct inaccurate or incomplete data
- Right to erasure: Request deletion of your personal data
- Right to restriction: Restrict processing of your data
- Right to data portability: Receive your data in a structured, machine-readable format
- Right to object: Object to processing based on legitimate interests
- Right to withdraw consent: Withdraw consent at any time where processing is based on consent
To exercise these rights, please contact us at hello@limelocal.site. We will respond within 30 days.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- Encryption in transit (TLS/HTTPS) and at rest
- Access controls and authentication for all internal systems
- Regular security reviews of our infrastructure
- DynamoDB encryption and AWS security best practices
9. Children's Privacy
LimeLocal is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Continued use of our service after changes constitutes acceptance of the revised policy.
11. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
Email: hello@limelocal.site
For GDPR-specific requests, please see our GDPR Compliance page.