Legal
Privacy Policy
Effective and last updated: July 31, 2026
This Privacy Policy explains how Launch Local Everywhere Trust, doing business as Launch Local Everywhere ("LLE," "we," "us," or "our"), collects, uses, discloses, retains, and protects personal information through the Services.
Controller and processor roles. LLE generally acts as a controller/business for information used to administer LLE accounts, billing, security, support, product operations, and our own websites. When an LLE customer uses the Services to collect or manage information about its own customers, leads, employees, contacts, website visitors, or advertising audiences, that customer generally determines the purposes and means of processing and LLE acts as a processor/service provider/contractor on the customer's documented instructions. The customer remains responsible for its own privacy notices, lawful bases, consent, opt-out mechanisms, data-subject requests, and sector-specific obligations.
1. Information we collect
- Account and organization information. Names, email addresses, authentication and session data, roles, business names, domains, licenses, preferences, support requests, and account activity.
- Billing and transaction information. Subscription, invoice, payment status, transaction identifiers, and related records. Full payment-card numbers are handled by the applicable payment processor and are not stored by LLE unless expressly disclosed.
- Customer content and operational data. Website pages, posts, media, files, forms, leads, CRM records, messages, comments, call records or recordings when enabled, appointments, payment items, directives, analytics, and other material submitted to or generated through the Services.
- Desktop and local-compute information. Device identifiers, application version, operating-system and hardware characteristics, installed local components, permissions, job status, diagnostics, crash data, and content or files the user directs LLE Media Studio to process. Local files remain on the user's device unless the user directs the Services to upload, synchronize, or publish them.
- Usage and technical information. IP address, browser and device characteristics, session identifiers, timestamps, referring URLs, pages or features used, performance logs, security events, approximate location inferred from IP, cookies, local storage, and similar technologies.
- Information from connected services. Data received when a user authorizes an integration, including account identity, account or asset identifiers, permissions, OAuth tokens, content, messages, comments, analytics, advertising-account data, and other information made available by the provider and requested by the user.
- Advertising and conversion-event information. When a site owner configures supported measurement or advertising tools, event metadata may include page URL, referrer, browser/device data, cookie or advertising identifiers, campaign parameters, event names, conversion values, and similar measurement information. LLE's built-in conversion-event layer is designed not to place obvious form fields such as names, email addresses, phone numbers, street addresses, or free-form messages into advertising-event payloads.
2. Google OAuth, Google APIs, Search Console, Analytics, Calendar, and Google Ads
LLE offers optional Google integrations that a user must affirmatively authorize through Google's OAuth consent flow. Depending on the feature the user chooses to connect, LLE may request access to Google identity information, Google Analytics reporting, Google Search Console data, Google Calendar information and event-management permissions, or Google Ads data through the adwords scope.
Google Ads use. LLE currently uses the Google Ads API for user-facing functions such as discovering Google Ads customer accounts that the user can access and obtaining Keyword Planner ideas and historical demand metrics for the connected customer's content-planning workflow. LLE does not use Google Ads API data to operate an unrelated advertising network or sell Google user data.
How Google user data is used. Google user data is used only to provide or improve the user-facing features the user requested and that are visible in LLE. OAuth access and refresh tokens are stored as sensitive secrets and are encrypted at rest by LLE. We request purpose-specific scopes and do not intentionally request access unrelated to an implemented feature.
Limited Use. LLE's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is not sold, transferred to data brokers, used for cross-context behavioral advertising or retargeting, used to determine creditworthiness or lending eligibility, or used to train or improve a generalized machine-learning or AI model. Human access to nonpublic Google user data is limited to circumstances permitted by Google's policies, such as with the user's affirmative consent for support, security/abuse investigation, legal compliance, or appropriately aggregated internal operations.
Sharing and transfers. Google user data is transferred only when necessary to provide or improve the user-facing feature the user authorized, for security, to comply with law, or in other circumstances expressly permitted by Google's Limited Use requirements. Service providers handling such data are bound to process it for the contracted purpose and applicable policy requirements.
Disconnecting Google. A user may disconnect a Google integration inside LLE and may revoke LLE from the user's Google Account permissions. Disconnecting prevents future API access after current credentials are revoked or expire. Deletion requests may also be submitted as described below.
3. Facebook, Instagram, Threads, Meta Ads, and Meta Business Tools
When a user connects a Meta property, LLE may receive and process provider-scoped identifiers, Facebook Page identifiers and names, Page tasks or permissions, Instagram or Threads professional-profile identifiers, usernames, profile images, access tokens, granted permissions, posts, comments, replies, messages, insights, advertising or publishing results, and other information authorized by the user and made available by Meta.
LLE uses Meta API information only to provide the requested connected-account functions, such as discovering eligible assets, publishing or editing content where supported, retrieving analytics, managing comments or replies, displaying authorized conversations, and supporting advertising or measurement workflows that the customer configures. Provider access tokens are stored encrypted and are not exposed back to ordinary browser JavaScript after authorization.
Meta Pixel and other Meta Business Tools are distinct from Meta OAuth data. If a customer enables a Meta Pixel or other Meta advertising measurement technology on a website, Meta may receive browser, device, page, cookie/ad identifier, campaign, and conversion-event information directly from that visitor's browser or through another customer-authorized integration. The customer is responsible for providing any required notice, consent, opt-out, and lawful basis before those technologies operate.
LLE does not sell information obtained from Meta APIs, transfer it to data brokers, or use connected-account API information to build advertising profiles unrelated to the Services. Use of information received from Meta is subject to Meta's applicable Platform Terms, Business Tools terms, developer policies, and data-processing terms.
5. How we use information
- Provide, operate, authenticate, maintain, support, secure, and improve the Services.
- Carry out user-directed publishing, communications, CRM, automation, analytics, advertising, media, AI, local-compute, and integration workflows.
- Administer licenses, billing, invoices, payments, trials, and account access.
- Generate reports, troubleshoot failures, detect abuse and fraud, and protect LLE, customers, users, and third parties.
- Send service, security, billing, support, and product communications and, where lawful, marketing communications.
- Comply with law, valid legal process, provider rules, contracts, and binding obligations.
6. Legal bases for EEA, UK, and similar jurisdictions
Where the GDPR, UK GDPR, or similar laws apply, LLE relies on one or more lawful bases depending on the context: performance of a contract; compliance with legal obligations; legitimate interests such as security, fraud prevention, service administration, support, and proportionate product improvement; and consent for processing that requires consent, including certain nonessential cookies, advertising technologies, or optional integrations. Where LLE acts as a processor, the applicable customer determines the lawful basis and LLE processes on that customer's documented instructions.
7. How information is disclosed
We may disclose information to infrastructure, hosting, security, email, communications, analytics, payment, support, storage, AI/media-processing, and other service providers needed to operate the Services; to connected platforms when a user directs an action; to professional advisers; to regulators, law enforcement, or others when legally required or necessary to protect rights and safety; or to a successor in a merger, financing, reorganization, sale, or similar transaction subject to applicable safeguards.
We do not sell personal information for money. Depending on configuration and applicable law, disclosure of identifiers or internet/electronic activity to advertising partners through advertising cookies or pixels may constitute a "sale," "sharing," or use for targeted advertising even when no money is exchanged. Where LLE is the business/controller for that processing, applicable opt-out rights are honored as described below. Google API data and Meta connected-account API data are not used for such advertising disclosures.
8. Retention
We retain personal information only for as long as reasonably necessary for the disclosed purposes, including providing the Services, maintaining security and audit evidence, resolving disputes, enforcing agreements, and meeting legal, tax, accounting, contractual, and provider requirements. Retention varies by data type and relationship. OAuth state records are short-lived. Active connected-provider tokens and account bindings are generally retained while the integration remains connected and are deleted, revoked, or rendered unusable when the connection is removed or no longer needed. Security logs, transaction records, and backups may persist for limited periods according to operational and legal retention schedules.
9. Access, correction, portability, deletion, and connected-account removal
Users may update available account details inside the Services and disconnect supported integrations from the applicable connection panel. Disconnecting removes the active LLE connection and prevents future API access after credentials are revoked or expire. Users may also revoke LLE directly through the connected provider's account-security, apps-and-websites, or business-integration settings.
To request access, correction, export, restriction, objection, deletion, or another applicable privacy right, email [email protected]
2050 N Andrews Ave 102, Pompano Beach FL 33069 with the subject Privacy Request. For Facebook, Instagram, or Threads information, use Meta Data Deletion Request. For Google-connected information, use Google Data Deletion Request. Include the LLE account email, affected domain/workspace, and connected asset name or customer ID when known. Never send a password, private key, OAuth access token, or refresh token.
We verify requests as reasonably necessary, locate applicable records, delete or de-identify information that LLE is not required or permitted to retain, revoke or remove stored provider credentials where applicable, and respond within the period required by applicable law. Requests involving information controlled by an LLE customer may be referred to that customer.
Meta App Dashboard deletion-instructions URL: https://app.launchlocaleverywhere.com/data-deletion
10. Your privacy choices, advertising opt-outs, GPC, and Do Not Track
Where applicable, you may opt out of the sale or sharing of personal information, targeted advertising, or certain profiling. On LLE-supported sites using the built-in consent layer, use the Your Privacy Choices control to reject nonessential analytics and advertising tags. We also honor a recognized Global Privacy Control signal for supported advertising tracking where required by law.
Traditional browser "Do Not Track" signals are not a uniform legal standard and are not treated as an opt-out unless applicable law requires it. GPC is handled separately as described above. You may also use provider-level controls offered by Google, Meta, Microsoft, LinkedIn, TikTok, and other advertising services.
If you cannot access an on-site privacy-choice control or want to exercise a statutory opt-out directly with LLE, email [email protected]
2050 N Andrews Ave 102, Pompano Beach FL 33069 with the subject Do Not Sell or Share / Targeted Advertising Opt-Out. We will not discriminate against you for exercising an applicable privacy right.
11. California notice at collection and CCPA/CPRA rights
For California residents and where the CCPA/CPRA applies, the categories of personal information LLE may collect in the preceding 12 months include: identifiers; customer-record information; commercial information; internet or other electronic-network activity; approximate geolocation; audio, visual, or similar information when a user enables those features; professional or employment-related information supplied in business records; inferences derived for service operation; and sensitive personal information such as account authentication credentials or connected-account tokens used solely to provide, secure, and administer the Services.
Sources include you, your organization, customer-site visitors or leads, devices and browsers, connected providers, service providers, and information the customer directs LLE to process. Business purposes include providing and securing the Services, account administration, analytics, support, payments, communications, fraud prevention, customer-directed advertising/measurement, and legal compliance. Categories of recipients may include service providers/contractors, connected platforms, payment and communications providers, analytics/advertising providers where enabled, professional advisers, authorities, and transaction successors.
California residents may have rights to know/access, correct, delete, obtain information about categories of sources and disclosures, opt out of sale or sharing, limit certain uses/disclosures of sensitive personal information, and receive equal service and pricing without unlawful discrimination. Authorized agents may submit requests subject to legally permitted verification. LLE does not knowingly sell or share personal information of consumers under 16 without the affirmative authorization required by law.
LLE does not use sensitive personal information for purposes that require a separate California right-to-limit mechanism unless expressly disclosed. If that practice changes, we will update this policy and provide the required control before using the information for the new purpose. We do not offer a financial incentive in exchange for personal information unless separately disclosed with the terms required by law.
12. Other U.S. state privacy rights
Residents of U.S. states with comprehensive consumer privacy laws may have additional rights, subject to the law that applies to LLE or the applicable customer. These may include rights to access or confirm processing, correct, delete, obtain a portable copy of personal data, opt out of targeted advertising, opt out of sale, opt out of certain profiling that produces legal or similarly significant effects, and appeal a denial of a privacy request. LLE honors recognized universal opt-out mechanisms where required by applicable law and does not discriminate against individuals for exercising applicable rights.
Where LLE processes personal data solely on behalf of a customer, the customer may be the controller responsible for responding to a consumer request. LLE will provide reasonable assistance as required by law and contract. Rights and exceptions vary by state, and some laws apply only when statutory thresholds are met. If applicable law gives you a right to appeal LLE's decision on a privacy request, email the privacy contact above with the subject Privacy Request Appeal and identify the request you are appealing.
13. EEA, UK, Swiss, and other regional rights
Subject to applicable law and exceptions, individuals may have rights to access personal data, correct inaccurate data, request erasure, restrict processing, obtain data portability, object to processing based on legitimate interests or direct marketing, and withdraw consent at any time. Individuals may also lodge a complaint with the competent supervisory authority. If processing relies on consent, withdrawal does not affect processing that was lawful before withdrawal.
LLE does not intend to make solely automated decisions that produce legal or similarly significant effects about an individual using LLE account data. Customers are responsible for evaluating any automated workflow they configure and for providing legally required safeguards.
14. International transfers
Information may be processed in the United States and other countries where LLE, customers, or service providers operate. Where required, LLE uses recognized safeguards such as adequacy decisions, standard contractual clauses, contractual commitments, or other lawful transfer mechanisms, together with supplementary security measures where appropriate.
15. Security
We use administrative, technical, and organizational safeguards designed for the nature of the information, including encrypted transport, access controls, secret separation, encrypted storage for sensitive integration credentials, logging, and least-privilege practices. No method of transmission or storage is completely secure. Users are responsible for protecting their account credentials, devices, API access, and connected accounts.
16. Children
The Services are intended for businesses and adults and are not directed to children under 13. We do not knowingly collect personal information directly from children under 13. Advertising features should not be configured to sell or share the personal information of a person known to be under 16 without the affirmative authorization required by applicable law. Contact us if you believe a child's information was submitted without proper authorization.
17. Changes to this policy
We may update this Privacy Policy to reflect changes in the Services, provider requirements, or law. The revised policy will be posted at this URL with a new effective date. If we materially change how Google user data or other personal information is used, we will provide notice and obtain additional consent where required before using the information for the new purpose.
18. Contact
Launch Local Everywhere Trust
[email protected]
2050 N Andrews Ave 102, Pompano Beach FL 33069
Privacy questions, rights requests, provider-data deletion requests, and complaints may be sent to the privacy contact above. If you are interacting with a website operated by an LLE customer, you may also need to contact that customer because it may be the controller/business responsible for the information.