Privacy Notice

Effective June 29, 2026 · Version 1.0.0

This Privacy Notice explains how Local Value, LLC DBA Local.Pet ("we", "us", "our") collects, uses, and shares personal information when you visit local.pet or use the services we provide there.

This notice is issued by Local Value, LLC DBA Local.Pet, a fictitious-business-name of Local Value, LLC, located at 2305 Historic Decatur Road #100, San Diego, CA 92106. Contact: legal@local.pet.

1. Information we collect

We collect personal information in three ways:

1.1 You provide it to us. When you create an account, claim a business listing, request a manager invitation, or contact us, you give us information such as your name, email address, phone number, and (where applicable) password.

1.2 Information we collect automatically. When you visit the site we automatically collect:

• IP address (we store a salted hash, not the raw address — see § 6)
• Browser type and version, operating system, and user-agent string
• Pages you view and links you click on the site
• Approximate location derived from your IP address or device
• Cookies and similar technologies — see our Cookie Policy

1.3 Information processed by third-party providers we use. We use Google Places to populate business listings, Apify to enrich those listings from public web sources, Google Analytics 4 for site usage analysis (when you consent), Google OAuth for optional sign-in, Twilio for SMS and voice verification codes, Resend for transactional email, Supabase for our primary database and storage, and Vercel for hosting. These providers act as subprocessors and may, in the course of providing their service, process identifiable or pseudonymous information about you (for example: your IP address transiting the network, an email address you entered, an analytics client identifier, or a verification phone number). They do so under contractual restrictions limiting use to providing the service to us. Their processing is described in § 3 below.

2. How we use your information

We use the information we collect to:

• Provide, operate, and improve the site and its services
• Authenticate you (sign-in, password reset, multi-factor verification)
• Verify business ownership claims via phone and email one-time codes
• Send transactional email related to your account (sign-in links, claim verification, manager invitations, welcome messages)
• Detect and prevent fraud, abuse, and security incidents
• Comply with our legal obligations and enforce our Terms of Use and Acceptable Use Policy

We do not sell your personal information. We do not use your information for behavioral or cross-context advertising.

3. How we share your information

We share information only with the following categories of recipients, and only as needed to operate the service:

Recipient	Purpose	Type
Supabase	Primary database, file storage	Subprocessor
Vercel	Hosting and edge compute	Subprocessor
Resend	Transactional email	Subprocessor
Twilio	SMS and voice OTP for claim verification	Subprocessor
Google Analytics 4	Aggregate site usage analytics	Subprocessor (consent-gated)
Google Places API	Business directory data source	Data source
Apify	Public web scraping for business listing enrichment	Subprocessor
Google (OAuth)	Optional sign-in method	Identity provider
Anthropic	AI parsing of public business website content (restaurant menu pages, services list) — input is the public web page; we do not send user account data or personal information to Anthropic, and Anthropic's API terms prohibit training on customer inputs	Subprocessor
Law enforcement or courts	Where compelled by valid legal process	As required

We do not share information for third-party marketing.

4. Cookies and similar technologies

See our Cookie Policy for the full inventory and your choices. In short: essential cookies (sign-in session, security, your filter/save preferences) cannot be turned off; analytics cookies are loaded only with your consent.

5. Your choices and rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your account and associated information
• Withdraw consent you previously gave
• Object to certain uses of your information
• Receive a copy of your information in a portable format

To exercise any of these rights, email legal@local.pet. We will respond within the timeframes required by applicable law (45 days for California requests, with a possible 45-day extension on notice; one month for GDPR requests).

Residents of the European Economic Area, United Kingdom, or Switzerland should also see our GDPR Notice. Residents of California should also see our California Privacy Notice.

6. Retention

We retain personal information only as long as needed for the purposes described in § 2, or as required by law. Specifically:

• Account records: while your account exists, plus the period required by backup and disaster-recovery policy after deletion
• Consent records: retained as long as reasonably necessary to prove your consent, enforce these terms, comply with legal obligations, or establish or defend legal claims
• Transactional email logs (Resend): in line with Resend's retention defaults
• OTP verification codes: 15 minutes (then automatically deleted)
• IP addresses: we store only a salted hash of your IP at consent capture. Raw IP addresses may be transiently processed by infrastructure providers (Vercel edge, Supabase, Twilio, Resend) in the course of routing requests; we do not retain the raw IP outside of standard short-term operational logs

7. Security

We use industry-standard safeguards including TLS in transit, encryption at rest for the primary database, hashed passwords (bcrypt), and least-privilege access controls. No system is perfectly secure; if you believe your account has been compromised, email legal@local.pet immediately.

8. Children

The site is not directed to children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us information, email legal@local.pet and we will delete it.

9. International transfers

We are based in the United States. If you use the site from outside the United States, your information will be transferred to and processed in the United States and other countries where our subprocessors operate.

10. Changes to this notice

We may update this notice. When we make a material change, we will (a) update the version number and effective date at the top, (b) notify account holders by email, and (c) show a consent banner asking you to acknowledge the new version on your next sign-in.

11. Contact

Local Value, LLC DBA Local.Pet 2305 Historic Decatur Road #100, San Diego, CA 92106 legal@local.pet