Privacy Policy

Effective Date: November 6, 2026

This Privacy Policy explains how Local AI Hero ("Local AI Hero," "we," "us," or "our"), collects, uses, shares, and protects personal information in connection with localaihero.com, audit.localaihero.com, app.localaihero.com, and our done-for-you AI services (collectively, the "Services").

By using the Services, you acknowledge this Privacy Policy. If you are a business customer, our Terms of Service also apply. If you do not agree, do not use the Services.

1. Who We Are

Local AI Hero provides done-for-you AI receptionist and AI employee services for local businesses. After a short intake, our team builds, trains, and runs AI systems that answer calls and chats, book appointments, and (on higher plans) create marketing content for our business customers.

Controller / business contact for Local AI Hero's own data practices:

Important distinction. When our AI handles calls and chats with a business customer's own callers and website visitors ("End Customers"), we process that information on the business customer's behalf as a service provider and processor. The business customer owns that End Customer data and is responsible for notices and consents to their End Customers. Local AI Hero's own marketing site and account relationships are described separately below.

2. Information We Collect

2.1 Website Visitors (localaihero.com and related public pages)

We may collect:

• Contact and inquiry information you submit (for example, name, email, phone, business name, and message)
• Chat and voice conversations with the on-site Website Ambassador, including audio, transcripts, and related metadata
• Technical data such as IP address, browser type, device type, referring URL, pages viewed, and approximate location derived from IP
• Cookie and similar technology data (see Section 2.7)

2.2 Free Business Audit (audit.localaihero.com)

When you submit an audit request, we collect the information you provide on the form (for example, business name, website, location, contact details, and answers about your operations) and related technical data.

2.3 Business Customers and Accounts (app.localaihero.com)

When you become a customer or create a login, we collect:

• Account credentials and profile information
• Business information needed for intake and service (services, hours, service area, approved answers, escalation rules, brand assets, calendar connection details, phone numbers, and similar)
• Communications with our team
• Billing contact details and subscription plan information

2.4 Payment Information

Payments are processed by Stripe. Local AI Hero does not store full card numbers. We may receive limited payment-related information from Stripe (for example, last four digits, card brand, billing ZIP, payment status, and transaction identifiers).

2.5 End Customer Data Processed on Behalf of Business Customers

When you use our AI Receptionist or AI Employee services, the AI interacts with your End Customers. On your behalf, we may process:

• Names and phone numbers
• Job type, urgency, and other details shared on calls or chats
• Appointment and scheduling details
• Call recordings and transcripts
• Website chat logs and Website Ambassador conversations on your site
• Lead records and conversation logs
• Outbound call or campaign interaction records, where included in your plan and configured by you

You own this End Customer data. We process it only to provide the Services under your instructions, as described in our Terms of Service and this Privacy Policy.

2.6 AI-Generated and Service Operations Data

We process configuration data, approved answer libraries, playbooks, Source of Truth documents, content drafts, publishing logs, and performance or quality logs needed to operate and improve delivery of your plan.

2.7 Cookies and Analytics

We use cookies and similar technologies for site functionality, security, preferences, and analytics. Categories may include strictly necessary cookies, analytics cookies, and [other cookie categories]. You can control cookies through your browser settings. [Cookie banner / preference details]

2.8 Information We Do Not Intentionally Collect

We do not intentionally collect government ID numbers or payment card full PANs through our own forms. Please do not submit sensitive personal information unless we expressly request it for a stated purpose.

3. How We Use Information

We use personal information to:

• Provide, configure, train, and operate the Services you request
• Answer inquiries and deliver free audits
• Create and maintain customer accounts
• Process payments and prevent fraud (via Stripe and related safeguards)
• Capture leads, log conversations, book appointments, and run marketing features included in your plan
• Improve quality, reliability, and safety of the Services (including reviewing transcripts or logs for training accuracy and error correction for your account)
• Communicate about service, billing, updates, and support
• Comply with law, enforce our Terms, and protect rights, safety, and security
• Analyze aggregate or de-identified usage to improve our offerings

We do not sell personal information.

4. Legal Bases and Consent

Depending on applicable law, we rely on one or more of the following:

• Contract: to provide Services you purchase or request
• Legitimate interests: such as securing our sites, improving services, and responding to inquiries, balanced against your rights
• Consent: where required (for example, certain cookies, marketing emails, or where a business customer instructs us that End Customer consent is the basis for recording or outreach)
• Legal obligation: to meet tax, accounting, or other legal requirements

Call recording, AI disclosure, and outbound outreach. Business customers are responsible for providing any required notices and obtaining any required consents from End Customers for call recording, AI disclosure, and outbound calling or texting under applicable law (including the TCPA and state recording-consent laws). We operate the systems under the customer's configuration and instructions. The AI is configured to introduce itself as AI.

5. AI Processing and Call Recording

Our Services use automated systems, including third-party AI, voice, and telephony providers, to:

• Understand and respond to calls and chats
• Transcribe audio
• Generate spoken responses with custom voices
• Qualify leads and book appointments under your rules
• Generate marketing content on higher plans

Audio may be recorded and transcribed so the AI can operate, so conversations can be logged for you, and so we can support quality and troubleshooting for your account. Recording and AI disclosure settings should match the notices and consents you implement for your End Customers.

AI systems can make mistakes. Business customers should review approved answers and material outputs as described in the Terms of Service.

6. How We Share Information

We share personal information only as needed to run the Services or as required by law:

6.1 Service Providers

• Stripe, for payment processing
• AI model providers, to power understanding and generation features
• Voice synthesis providers, for spoken AI responses
• Telephony and messaging providers, for inbound and outbound calling and related communications
• Hosting, storage, and infrastructure providers
• Analytics providers
• Customer support and operations tools
• Professional advisors (such as lawyers or accountants) under confidentiality obligations when needed

These providers are authorized to use personal information only to perform services for us (or for you, when we process End Customer data on your behalf), subject to contractual and security obligations appropriate to their role.

6.2 Business Customers (for End Customer Data)

End Customer data collected through a customer's AI Receptionist or AI Employee is made available to that business customer as part of the Service. That customer determines how they use it in their business.

6.3 Legal and Safety

We may disclose information if we believe in good faith that disclosure is required by law, legal process, or government request, or to protect the rights, safety, or property of Local AI Hero, our customers, End Customers, or the public.

6.4 Business Transfers

If we are involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction, subject to appropriate confidentiality and notice practices.

6.5 No Sale

We do not sell personal information, and we do not share it for cross-context behavioral advertising as those terms are commonly defined under US state privacy laws. If that practice changes, we will update this Policy and provide required opt-out mechanisms.

7. Data Ownership and Our Role

• Business customers own their Customer Data, including End Customer names, numbers, recordings, transcripts, chat logs, and lead records.
• Local AI Hero acts as a service provider and processor for that data and processes it to provide the Services under the customer's instructions.
• Business customers own AI Outputs produced for them once applicable fees are paid, as described in the Terms of Service (for example, website content, playbook, Source of Truth, blog and social content, and related materials on their plan).
• Local AI Hero retains its Platform, models, prompts, templates, and know-how.

On request, we will support export or return of Customer Data as described in the Terms of Service. After termination, we delete or return Customer Data within [retention period], except where retention is required for legal, security, dispute, or backup purposes.

8. Data Retention

We retain information only as long as needed for the purposes described in this Policy, unless a longer period is required or permitted by law.

Current retention periods by category:

• Contact and inquiry records: one to two years after your last interaction with us
• Audit form submissions: two to three years
• Customer account, billing, and payment records: seven years, for tax and accounting purposes. Card details are held by Stripe under Stripe's own retention practices.
• Call recordings, transcripts, and chat logs (Customer Data): for the life of the account and then [retention period] after termination, unless the customer requests earlier deletion where feasible
• Marketing content drafts and publishing logs: [retention period]
• Security and server logs: [retention period]
• Marketing consent records: for as long as you remain subscribed, plus a short grace period after you unsubscribe

These periods reflect standard industry ranges and are subject to legal review. We may update them as that review is completed.

We may retain de-identified or aggregated information that can no longer reasonably identify a person.

9. Security

We use administrative, technical, and organizational measures designed to protect personal information, including access controls, encryption in transit where appropriate, and vendor due diligence. No method of transmission or storage is completely secure. You are responsible for protecting your account credentials.

10. Your Privacy Rights

Depending on where you live, you may have rights to:

• Access the personal information we hold about you
• Correct inaccurate personal information
• Delete personal information, subject to legal exceptions
• Portability of certain information
• Opt out of certain processing, including marketing emails (unsubscribe links included) and, where applicable, targeted advertising or profiling
• Appeal a denied request, where state law provides an appeal right
• Limit use of sensitive personal information, where applicable

How to make a request. Email support@localaihero.com with the subject line "Privacy Request," or contact us at the address in Section 1. We will verify your request as required by law. You may use an authorized agent where permitted; we may require proof of authorization.

End Customers of our business customers. If your information was collected because you called or chatted with a Local AI Hero customer's AI, please contact that business first. We process that data on their behalf. We can help route your request to the right customer when you identify the business you contacted.

11. US State Privacy Rights (Including California)

Residents of certain US states (including California and other states with comprehensive privacy laws) may have additional rights, such as the right to know categories of personal information collected, sources, purposes, and disclosures; the right to delete; the right to correct; the right to opt out of sale or sharing; and the right to non-discrimination for exercising privacy rights.

Categories we may collect (depending on your interaction with us): identifiers (name, email, phone, IP); commercial information (plan and purchase history); internet or electronic activity (site usage); audio and electronic information (call recordings, chats); professional or employment-related information if you provide it as a business contact; and inferences used to operate lead qualification under a customer's rules.

Sources: directly from you; from your devices; from our service providers; and, for End Customer data, from interactions with a business customer's AI channels.

Business / commercial purposes: as described in Section 3.

Sale / sharing: we do not sell personal information. We do not share personal information for cross-context behavioral advertising as commonly defined. To submit a state privacy request, use support@localaihero.com or [privacy request method].

California residents may also contact us to make a request under the California Consumer Privacy Act, as amended (CCPA/CPRA). We will respond within the timeframes required by law.

12. Children

The Services are directed to businesses and adults. We do not knowingly collect personal information from children under 13 (or under 16 where that is the relevant standard). If you believe a child has provided personal information, contact support@localaihero.com and we will take appropriate steps to delete it.

13. International Transfers

We are based in the United States and process information in the United States. If you access the Services from another country, your information may be transferred to the United States or other locations where our providers operate. Where required, we use appropriate transfer safeguards. [Transfer mechanism details]

14. Third-Party Links and Connected Platforms

Our sites may link to third-party sites, and our Services may connect to platforms you authorize (for example, calendars, social networks, or Google Business Profile). Their privacy practices are governed by their own policies. We are not responsible for third-party practices.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated Policy with a new [Effective Date] and, for material changes, provide additional notice when reasonably appropriate. Continued use after the effective date means you acknowledge the updated Policy, except where law requires a different process.

16. Contact Us

For privacy questions or requests: