UPDATED OCTOBER 2, 2026
Privacy policy.
What you share
The initial file check runs in your browser. When you create checkout, the CSV and business context are sent to our server. We retain only the parsed fields needed for the audit: search terms, campaign and ad group labels, spend, clicks, conversions, currency, report dates, services and review settings. Do not upload names, email addresses, phone numbers, account IDs or sensitive information. Only submit data you are authorized to share.
How it is used
We use the supplied information to validate the file, generate the report, deliver private access and resolve processing problems. Query text, campaign/ad group labels and business context are sent to OpenAI for intent classification. Numeric performance calculations run in our service; the AI does not calculate your spend. Requests use the provider's non-stored response setting; this does not override any provider security, abuse-monitoring or legal retention requirements.
Payments and access
Stripe handles checkout and card information. We store payment references and status, not card details. The result link contains a secret access token; anyone with the complete link can view the report. The token is carried in the link fragment and presented to our server for authorization. Keep the link private. It also appears in checkout return URLs supplied to Stripe.
Storage and retention
Audit records are encrypted at rest. Unpaid uploads expire after 24 hours. Paid reports expire 30 days after payment. The background worker removes expired records. Selected input rows are removed from our record when the completed report replaces them; the report still contains the terms and performance figures needed to explain findings. Failed-payment/refund records may be retained while the issue is being resolved. Payment providers retain their own records under their policies and applicable obligations.
Analytics and service logs
Public pages may use privacy-oriented Plausible analytics. Private result pages do not initialize our analytics script. We do not intentionally send uploaded terms, business context or private access tokens as analytics events. Hosting and payment providers may process technical information needed to operate the service. Processing may occur outside your country.
Your requests
Contact hello@localauditexpress.com to request access, correction or deletion, or to raise a privacy concern. Include the audit ID, not your secret token; we may need to verify your authority. Download the report before its expiry. Historical manual-audit inquiries and payment records are handled separately from this upload service.
Provider information: OpenAI privacy policy and Stripe privacy policy.