Privacy Policy — Locationy

Effective date: 1 January 2026
App name: Locationy
Company / Data Controller: ART & PRINTS LTD
Registered address: 128 City Road, London, United Kingdom, EC1V 2NX
Contact email: support@locationy.co
Website: https://locationy.co

1. Scope

This Privacy Policy explains how Locationy (“we”, “us”, “our”) collects, uses, and protects personal data when you use the Locationy application and website, including integrations with Google APIs and advertising technologies.

Locationy provides grid-based Google Maps visibility and competitor analytics. This policy applies to all users, workspaces, and visitors.

2. Legal Basis for Processing (UK GDPR)

We process personal data under the following lawful bases:

Contract – to provide the Locationy service
Legitimate interests – service security, reliability, and improvement
Consent – for optional integrations (e.g. Google account connection) and non-essential cookies or advertising technologies

3. Information We Collect

A. Account Information

Name and email address
Authentication identifiers
Workspace and organisation identifiers

B. Business & Location Data

Google place_id
Business name
Primary category
Latitude and longitude
Keywords submitted for scans
Grid configuration and scan schedules

C. Scan & Analytics Data

Rank results per grid point
Competitor listings ranking above the target business
Aggregated metrics (average rank, visibility coverage)
Public attributes such as ratings, review counts, and categories

D. Technical & Log Data

Request logs, timestamps, and error traces
IP address (security, abuse prevention, and rate limiting)

4. Google API Usage

A. Google Maps Platform

Locationy uses Google Maps Platform APIs to:

Resolve place identifiers
Process geographic coordinates
Support map-based ranking and visibility analytics

B. Google APIs via OAuth (If Enabled)

If you connect a Google account, Locationy may access limited Google data strictly within the permissions you authorise (for example, Google Business Profile data).

Google API Services User Data Policy (Limited Use)

Locationy complies with the Google API Services User Data Policy, including the Limited Use requirements:

Google user data is used only to provide requested features
Google user data is not sold
Google user data is not used for advertising
Google user data is never shared with advertising platforms
Access can be revoked at any time

5. How We Use Information

We use personal data solely to:

Execute grid-based Google Maps scans
Calculate ranking and visibility metrics
Identify competitors and visibility gaps
Display reports and historical results
Monitor system health and prevent misuse
Provide customer support and service communications

6. Advertising & Marketing (UK Specific)

Advertising Platforms Used

Locationy uses Meta advertising services (including Facebook and Instagram ads).

This includes:

Meta Pixel
Conversion tracking and campaign performance tools

Advertising Data Collected

Meta advertising technologies may collect:

Page views and interaction events
Conversion events (such as sign-ups)
IP address
Browser, device, and cookie identifiers

Purpose of Advertising Data

Advertising data is used to:

Measure ad effectiveness
Optimise campaigns
Build aggregated and anonymised audiences

Legal Basis

Under UK GDPR and the Privacy and Electronic Communications Regulations (PECR):

Advertising cookies and pixels are used only after user consent
Users can withdraw consent at any time via cookie settings or browser controls

Separation from Google Data

Google API data is never used for advertising
Google API data is never shared with Meta
Advertising data and Google-obtained data are kept strictly separate

7. Data Sharing

We do not sell personal data.

Data may be shared only with:

Infrastructure and hosting providers required to operate the service
Automation and scan execution providers
Payment processors (if applicable)
Regulatory or law-enforcement authorities when legally required

All processors operate under UK GDPR–compliant agreements.

8. Data Retention

Workspace and scan data is retained until deleted by the user or account closure
Failed or stale scan jobs are automatically terminated and cleaned
Logs are retained for a limited period for security and debugging
Google OAuth tokens (if used) are deleted after disconnection

9. Security

We implement appropriate technical and organisational measures, including:

TLS encryption in transit
Access controls and least-privilege permissions
Enforced scan timeouts and integrity checks

No system can guarantee absolute security.

10. Your Rights (UK GDPR)

You have the right to:

Access your personal data
Rectify inaccurate data
Request erasure of data
Restrict or object to processing
Withdraw consent at any time
Lodge a complaint with the UK Information Commissioner’s Office (ICO)

Requests can be made via support@locationy.co.

11. Cookies & Tracking Technologies

Locationy uses the following categories of cookies and similar technologies:

Strictly Necessary

Used for:

Authentication
Session management
Core application functionality

These do not require consent.

Analytics & Advertising (Consent Required)

Used for:

Website analytics
Advertising performance measurement (Meta Pixel)

These technologies are activated only after consent.

Users can:

Accept or reject non-essential cookies
Change preferences at any time
Block cookies via browser settings

12. Children’s Privacy

Locationy is not intended for use by individuals under the age of 13.

13. International Data Transfers

Where data is processed outside the United Kingdom, appropriate safeguards (such as standard contractual clauses) are applied in accordance with UK GDPR.

14. Changes to This Policy

We may update this Privacy Policy to reflect legal or operational changes. Updates will be published with a revised effective date.

15. Contact

Company: ART & PRINTS LTD
Address: 128 City Road, London, United Kingdom, EC1V 2NX
Email: support@locationy.co
Website: https://locationy.co