Privacy Policy
Last Updated: 28 February 2026
1. Information We Collect
We collect:
- Business information you provide (name, contact details, description, logo, gallery images)
- Account information (email, name, password for email sign-up)
- Google account information (when using Google Sign-in: email, name, profile picture)
- Business reports (when you report a listing: reason, optional message, timestamp)
- Rate limiting data (stored locally in your browser to prevent spam)
- Usage data and analytics
2. How We Use Your Information
We use your information to:
- Provide and improve our services
- Display your business in our directory
- Verify and approve business listings and user accounts through admin review
- Process and review reports of inappropriate listings to maintain community standards
- Communicate with you about the platform
- Ensure platform security and prevent abuse
- Authenticate your account (via email/password or Google OAuth)
3. Information Sharing
We do not sell your data. Business information is shared publicly in the directory as you intended. Personal contact information is kept private unless you choose to share it.
Google Sign-in: When you use Google Sign-in, we receive your Google profile information (email, name) with your permission. We do not access your Google password or other Google account data.
4. Data Security
We implement security measures to protect your information, but no online service is 100% secure. Passwords are encrypted, and Google authentication is handled securely through Firebase.
5. LocalStorage Usage
We use browser localStorage for:
- Rate limiting: Tracking report submission cooldowns (24-hour limit per business) to prevent spam
- Theme preferences: Storing your light/dark mode selection
- Temporary OAuth data: During Google Sign-in flow (automatically cleared)
This data stays on your device and is not transmitted to our servers unless needed for functionality. You can clear localStorage through your browser settings.
6. Data Retention
We retain data as follows:
- User accounts: Until you delete your account
- Business listings: Until removed by owner or platform admins
- Business reports: Retained indefinitely for moderation history and pattern analysis
- Admin approvals: Status history maintained for accountability
7. Your Rights
You can:
- Access and update your information
- Delete your account (and associated business if sole owner)
- Opt-out of communications
- Report inappropriate listings (rate-limited to once per business per 24 hours)
- Request verified badge through admin review process
- Revoke Google OAuth access through your Google account settings
8. Third-Party Services
We use:
- Firebase Authentication (Google) for user authentication
- Firebase Firestore for data storage (user accounts, businesses, reports)
- Firebase Storage for image hosting (logos, gallery images)
- Resend for email notifications
- Google OAuth for Google Sign-in functionality
9. Changes to This Policy
We may update this policy. Continued use after changes constitutes acceptance.
10. Contact
Privacy concerns? Contact us through the help page.