Last updated: [date]
Who we are
MM Two Digital FZE LLC, [registered address], operates this service ("we"). Contact for privacy questions: hello@localios.com. [EU representative / UK representative / DPO, if required.]
Two roles
Controller. For your account data (name, email, sign-in records, billing details, support messages) we decide why and how it is processed.
Processor. For data you put into a workspace (prospect lists, notes, audit results about businesses, reports) your organization is the controller and we process it on your instructions under our data processing agreement.
What we collect
- Account data: name, email address, password hash, two-factor settings, sign-in times, IP address and browser for security.
- Workspace data: organization details, team members and roles, settings.
- Billing data: plan, invoices and payment status. Card data is handled by Stripe; we never see or store full card numbers.
- Usage data: which features were used and how many credits they cost, to bill you and to improve the product.
- Support data: messages you send us.
Why we use it (and the legal basis)
- To provide the service you signed up for (contract).
- To bill you and keep accounting records (contract, legal obligation).
- To keep accounts secure, prevent abuse and enforce limits (legitimate interest).
- To understand which features help customers, using aggregated product events (legitimate interest).
- To send service messages such as verification, password reset and invoices (contract). We send marketing email only with consent.
Data about businesses you research
Workspace modules analyse publicly available information about businesses (websites, public business listings from permitted sources). Where this contains personal data (for example a sole trader's name), your organization decides why it is processed and must have a lawful basis. We do not sell this data and do not use it to train models.
Processors we use
- Stripe (payments)
- [Email provider, e.g. Resend] (transactional email)
- [Hosting provider and region]
- [AI provider, once the assistant ships]
A current list is available on request.
International transfers
[Describe transfer mechanisms, e.g. EU Standard Contractual Clauses, UK IDTA, adequacy decisions.]
How long we keep data
- Account data: while your account exists, then deleted within [30] days, except what we must keep by law.
- Deleted workspaces: locked immediately, purged after 30 days.
- Invoices and accounting records: [10 years / as required by law].
- Security logs: [12 months].
Your rights
Depending on where you live you can ask for access, correction, deletion, restriction, portability, or object to processing. Workspace owners can export all workspace data under Settings, Data. Write to hello@localios.com. You may also complain to your data protection authority.
Security
Passwords are hashed, two-factor sign-in is available, secrets are encrypted at rest, every workspace is isolated and administrative actions are logged.
Changes
We will announce material changes in the product and by email before they take effect.