Privacy policy

Local Service Ads AI is operated by Local Service Ads AI. Last updated 25 September 2026.

This policy explains what personal information Local Service Ads AI ("we", "us") collects through Local Service Ads AI, why, who sees it and how to get it corrected or deleted. We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth) even where a small-business exemption might apply, and we do not sell personal information.

We collect information directly from you (forms and your dashboard), from Google Ads for the accounts you link, from Stripe about your payments, and from people who fill in a form on a landing page we host. You can look around our website without telling us who you are; to use the service we need your real details. The service is for businesses and is not aimed at children, and we do not knowingly collect information from anyone under 18.

1. What we collect and why

Account holders. Your name, email, password (stored only as a salted hash), business name, phone, website, service area and the business description you give us; your plan and billing status; how you use the dashboard (page views, decisions on proposals). We use this to run the service, send you the daily summary and support you.

Billing. Payments are handled by Stripe. We receive a customer reference, the last four digits and brand of your card, and invoice status; we never see or store full card numbers.

Google Ads data. For accounts you link: campaigns, ad groups, keywords, search terms, ads, conversion data and performance metrics, plus the changes the software makes and why. We use it to audit and improve your account and to show you the change log. We do not use one customer's Google Ads data to benefit another.

Enquiries on landing pages we host. If you fill in a form on a page we host for one of our customers, we collect the name, phone, email and message you enter, the page and version you saw, and the time. We collect it on behalf of that business, pass it to them by email (and by text message if that business has text alerts switched on), and keep a copy so they can see it in their dashboard. That business decides how to respond and is responsible for what it does with your enquiry. If you tap the phone number on a page, we record that a call was started (not the call itself).

Reviews shown on landing pages. Where a business connects its Google listing, we fetch its public Google reviews (the reviewer's display name, star rating and words, exactly as published on Google) and show them on that business's pages. They are refreshed from Google about weekly, so a review that is edited or removed on Google changes or disappears on the page too. A business can also type in reviews it has received; it must only supply genuine ones.

Visitors to landing pages and retargeting. Landing pages carry the business's Google Ads tag. It records that an ad click led to a call or an enquiry and lets Google add your browser to that business's list of people who visited its page, so the business's ads can be shown to you again on other sites for up to 90 days (people who send an enquiry are taken off the list). On the pages of businesses in the UK, EEA and Switzerland none of this uses cookies unless you press "Accept" in the cookie pop-up. Neither we nor the business can see who is on the list. You can switch this off for every site in Google's Ads Settings; the cookie policy has the details.

Call requests. If you ask us to call you, we keep the name, phone number, email, preferred time and note you give us, use them only to call you back about the service, and delete them within 90 days.

Affiliates. Name, email, password hash, payout details you enter, referral clicks and commissions earned.

Technical. Standard server logs (IP address, browser, pages requested, timestamps) kept for security and debugging, and the cookies described in the cookie policy.

We only ask for what the service needs. Everything marked optional really is optional.

2. Automated decisions and AI

The software makes automated changes to Google Ads accounts within the settings each customer chooses (for example adding a negative keyword). Which changes happen automatically and which wait for a human is under the customer's control, and every change is logged and reversible. These decisions are about advertising accounts, not about people: we do not make automated decisions about individuals that have a legal or similarly significant effect on them. To judge whether a search term is relevant to a business, and to write landing page copy, we send the business description, search terms and the details you supply to Anthropic's Claude API. The same goes for anything you type or paste into "Talk to your agent" (including screenshots you attach), the notes you give us about how good your leads were, the public Google reviews shown on your page (so the page copy can refer to them), and any example pages you upload for the design to follow. Under our agreement with Anthropic that data is not used to train their models. We do not send enquiry (lead) details to the AI. Pictures for landing pages (the top photo, badges and the "How to get a quote" icons) are drawn by OpenAI's image API from a short written description: your business name, service, colours and the words on the page; your photos and logo are never sent. Questions typed into the "Ask a question" box on our website are sent to Anthropic's API to generate the answer and are kept by us, with the IP address they came from, for up to 90 days so we can improve the site and stop abuse; please don't type personal details into it.

3. Google API data

We access Google Ads through Google's API with permission the account owner grants by accepting a manager-account link. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google Ads data is used only to provide and improve the service to the customer whose account it is, is never sold, and is never used for advertising to you. We don't transfer it to anyone else except the providers listed in section 4 as needed to run the service (Anthropic receives search terms, business details and what you type to the agent; OpenAI receives only the written description of a picture), and people read it only to support you at your request, for security, or where the law requires.

4. Who we share it with

Only with providers we need to run the service, each bound by their own privacy terms and used only for the purpose listed: Railway (hosting, USA), Stripe (payments, USA), Resend (email delivery, USA), Twilio (SMS, USA; only for businesses with text alerts switched on), Anthropic (AI text, USA), OpenAI (AI pictures, USA), Google (Google Ads API, conversion measurement, fonts, Google Public DNS for checking a domain you connect, and Google Maps Platform for finding a business's public listing and reviews, USA), CARTO and OpenStreetMap (the map you tap to set your service area, loaded through the cdnjs and jsDelivr content networks: your browser sends its IP address to fetch the map, nothing else), Cloudflare (encrypted nightly backups, USA and other countries), and a domain registrar (Name.com or Namecheap, USA) if you buy a domain through us. Enquiries from a landing page also go to any extra email addresses the business itself chooses to send them to. Some of these providers store data outside Australia, mainly in the USA; we take reasonable steps to make sure they handle it in line with the Australian Privacy Principles. Google's handling of listing and review data is covered by the Google Privacy Policy. We also share information when the law requires it, and with a buyer if the business is sold (you would be told). Our staff see your data only to support you.

5. Marketing

We send account holders service emails (daily summary, weekly report, billing notices, trial-ending reminders); these are part of the service and identify us as the sender. The daily summary and the weekly report each have a link at the bottom that stops them, and you can turn them back on from "Email settings" at the bottom of any page. We only send marketing emails with your consent and every one has an unsubscribe link. We never text people who enquire on a landing page other than to confirm the business has received their enquiry.

6. How long we keep it

Account, Google Ads and change-log data, landing pages and photos: while your subscription is active. If you close your account it is deleted 30 days after your paid period ends; if your subscription is cancelled another way it is deleted 90 days after it ends (billing records are kept for as long as tax law requires, currently 5 years). Enquiries from landing pages: while the business you contacted is a customer, and deleted with their account. Call requests and website-assistant chats: 90 days. Encrypted backups are overwritten on a rolling basis and kept for no more than 30 days, so deleted data leaves them within 30 days. Server logs: kept by our hosting provider for a short period (up to 30 days). Email us at any time to have your data deleted sooner; we will do it within 30 days unless the law requires us to keep it.

7. Security

Data is encrypted in transit (HTTPS) and stored on access-controlled infrastructure; passwords are hashed; card details never touch our servers. No system is perfectly secure. If a data breach is likely to cause serious harm we will notify affected people and the Office of the Australian Information Commissioner as the Notifiable Data Breaches scheme requires.

8. Your rights

You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Account holders can change most details in the dashboard and close their account from Settings. Email the address in the footer and we will respond within 30 days. If you are not happy with our response you can complain to the Office of the Australian Information Commissioner.

If you are in the UK or the European Economic Area. The UK GDPR and the EU GDPR give you the right to see the personal data we hold about you, have it corrected or deleted, have its use restricted, object to uses that rely on our legitimate interests, receive the data you gave us in a portable form, and withdraw a consent at any time. Optional cookies are only set there if you press "Accept" in the cookie pop-up, and the "Cookie settings" link at the bottom of the page changes your answer whenever you like. For the rest, use the address above; we answer within one month. For account holders, affiliates and visitors to our own site, Local Service Ads AI is the controller. Our legal bases are our contract with you (running your account, billing), our legitimate interests (keeping the service secure, stopping abuse, improving it, and passing an enquiry to the business it was meant for), legal obligations (tax records) and your consent (optional cookies, marketing emails). For enquiries on a business's landing page, that business is the controller and we process the enquiry for it under the data processing terms in our terms of service; ask that business first, and we will help it answer you. Ad-measurement and retargeting cookies are switched off by default for visitors in the UK, EEA and Switzerland. We are based in Australia and our providers are mainly in the USA: when personal data from the UK or EEA goes to a country without an adequacy decision, we rely on the European Commission's standard contractual clauses and the UK addendum to them in our agreements with those providers, or on the provider's certification under the EU-US Data Privacy Framework and its UK extension. You can complain to the UK Information Commissioner's Office or your local data protection authority at any time.

If you live in California: we don't sell or share personal information for cross-context behavioural advertising, you can ask to know, correct or delete what we hold using the address above, and we won't treat you differently for asking.

9. Changes

We will post any changes here and update the date at the top. For significant changes we will email account holders.