Privacy Policy

Introduction

LocalLayer ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (www.locallayer.ai) and use our services. Please read this policy carefully. If you do not agree with our policies and practices, please do not use our services.

Effective Date: March 5, 2026
Company: LocalLayer, operated by Kevin Monangai

1. Information We Collect

We collect information in several ways:

• Calendly Booking Forms: When you schedule a discovery call, we collect your name, email, phone number, business name, and any additional information you provide in the booking form.
• Stripe Payment Processing: When you make a payment, we collect payment information processed securely through Stripe. We do not store full payment card details on our servers.
• Website Analytics: We use analytics to understand how visitors interact with our website. This includes IP addresses, browser type, pages visited, time spent on pages, and referral sources.
• Email Communications: We collect information from email communications at kevin@locallayer.ai and other contact methods, including your name, email address, and the content of your messages.
• AI Voice Agent Data: When you use our AI Voice Agent service, we collect call recordings, transcripts, and metadata about calls placed to your business. This data is used to improve service delivery and provide you with insights about customer interactions.
• Cookies & Tracking: We use cookies and similar tracking technologies to enhance your browsing experience, remember preferences, and analyze website traffic.

SMS Communications: If you consent to receive SMS messages from LocalLayer (for example, by booking a call through our website or verbally requesting a scheduling link during a phone conversation), we collect your mobile phone number for the sole purpose of delivering the requested message. We do not sell, share, or use your phone number for marketing purposes beyond the specific SMS you consented to receive. You may opt out at any time by replying STOP.

Mobile information will not be shared with third parties/affiliates for marketing/promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, maintain, and improve our Custom PWA and AI Voice Agent services.
• Communication: To respond to your inquiries, send administrative updates, and provide customer support.
• Business Operations: To manage bookings, process payments, and maintain client records.
• Marketing: To send promotional emails and updates about our services (you can opt out at any time).
• Analytics & Improvement: To analyze usage patterns, identify trends, and enhance the user experience.
• Legal Compliance: To comply with applicable laws, regulations, and legal obligations.

3. Information Sharing

We do not sell your personal data. However, we share information with trusted third-party service providers who assist us in operating our website and conducting our business:

• Stripe: For secure payment processing and transaction management.
• Calendly: For managing booking forms and discovery call scheduling.
• Vercel: For hosting and deploying our web infrastructure.
• Google Analytics: For website traffic analysis and user behavior tracking.

These service providers are contractually obligated to use your information only as necessary to provide services to us and are required to maintain the confidentiality of your data.

4. AI Voice Agent Data

For clients who use our AI Voice Agent service, the following applies:

• Data Collection: We collect call recordings, transcripts, and call metadata (date, time, duration, customer phone number) from calls placed to your business.
• Data Use: This data is used to provide the AI agent service, improve transcription and voice recognition accuracy, generate performance reports, and enable you to review customer interactions.
• Data Handling: Call data is encrypted in transit and at rest. Only authorized team members and our client have access to call data related to the client's business.
• Retention: Call recordings and transcripts are retained for up to 12 months unless deleted earlier by the client. You may request data deletion at any time.
• Compliance: We comply with applicable laws regarding call recording consent. Clients are responsible for ensuring all required notices and consents are provided to customers whose calls are recorded.

5. Data Security

We implement reasonable security measures to protect your personal information, including:

• SSL/TLS encryption for data in transit.
• Secure, encrypted storage for sensitive data.
• Regular security assessments and updates.
• Limited access to personal information by authorized personnel only.
• Secure payment processing through Stripe, which is PCI DSS compliant.

While we strive to protect your information, no security system is impenetrable. We cannot guarantee absolute security of your data. If a security breach occurs, we will notify affected parties as required by law.

6. Data Retention

We retain personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy. Retention periods vary by data type:

• Client & Booking Data: Retained for the duration of the client relationship plus 3 years for legal and tax purposes.
• AI Agent Call Data: Retained for up to 12 months unless deleted earlier by the client.
• Email Communications: Retained for the duration of the business relationship and 2 years thereafter for archival purposes.
• Analytics Data: Typically retained for 26 months by Google Analytics; aggregate data may be retained indefinitely.

You may request deletion of your personal data at any time, subject to legal obligations to retain certain information.

7. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: You have the right to request a copy of the personal information we hold about you.
• Correction: You can request that we correct inaccurate or incomplete information.
• Deletion: You have the right to request deletion of your personal data, subject to legal retention requirements.
• Opt-Out of Marketing: You can unsubscribe from promotional emails by clicking the unsubscribe link in any email or contacting us directly.
• Data Portability: In some jurisdictions, you have the right to receive a copy of your data in a portable format.

To exercise any of these rights, please contact us at kevin@locallayer.ai.

8. California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights:

• Right to Know: You have the right to know what personal information is collected, used, shared, or sold.
• Right to Delete: You can request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out: You have the right to opt out of the "sale" of your personal information. LocalLayer does not sell personal information for monetary consideration.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
• Authorized Agent: You may designate an authorized agent to submit requests on your behalf.

To submit a CCPA request, please email kevin@locallayer.ai with "CCPA Request" in the subject line. We will respond within 45 days.

9. Children's Privacy

Our services are not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete such information promptly. If you believe we have collected information from a child under 13, please contact us immediately at kevin@locallayer.ai.

10. Third-Party Links

Our website may contain links to third-party websites and services that are not operated by LocalLayer. This Privacy Policy does not apply to third-party websites, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites before providing your personal information.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on our website with a new effective date. Your continued use of our services following the posting of changes constitutes your acceptance of the updated Privacy Policy.

12. Contact Information

If you have questions about this Privacy Policy, would like to exercise your privacy rights, or need to report a privacy concern, please contact us:

• Email: kevin@locallayer.ai
• Website: www.locallayer.ai
• Company: LocalLayer, operated by Kevin Monangai

We will respond to your inquiry within 10 business days.