This Privacy Notice explains how ConversionOS iQ, LLC ("we", "us", "our") collects, uses, and shares personal data when you use the ZIP by LocalSignal service and related websites (the "Service"). ConversionOS iQ, LLC is the data controller for personal data described in this Notice.

1. Personal data we collect

Account data: name, email address, business name, login credentials.
Content you submit: business names, ZIP codes / service areas, product categories, notes, uploaded reports, and other inputs to the Service.
Support communications: messages, screenshots, and metadata you send us.
Usage and device data: pages viewed, actions taken, timestamps, IP address, device type, browser, operating system, and referring URLs.
Cookies and similar technologies: essential cookies for login/session, and (if enabled) analytics cookies as described in Section 9.

Payment card and billing data is collected and processed directly by Paddle (our reseller and Merchant of Record). We do not store full card numbers.

2. How we use personal data

Create and administer your account and provide the Service (contract performance).
Generate ZIP-level reports and analytics that you request (contract performance).
Provide customer support and respond to inquiries (contract performance / legitimate interests).
Detect, prevent, and investigate fraud, abuse, and security incidents (legitimate interests / legal obligation).
Improve and develop the Service, including debugging and product analytics (legitimate interests).
Send transactional messages about your account, receipts, and important changes (contract performance).
Send marketing communications where permitted by law and with your consent where required (consent / legitimate interests); you can opt out at any time.
Comply with legal obligations and enforce our terms (legal obligation / legitimate interests).

3. Who we share personal data with

Merchant of Record — Paddle: for order processing, subscription management, payments, tax compliance, invoicing, and refunds. See Paddle's privacy policy.
Service providers / subprocessors: cloud hosting, database, email delivery, error monitoring, and product analytics vendors, all under contractual confidentiality and data-protection obligations.
Professional advisers: lawyers, accountants, and auditors where necessary.
Authorities: where required by law, regulation, legal process, or to protect our rights, users, or the public.
Corporate transactions: in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate safeguards.

We do not sell personal data.

4. International transfers

We are based in the United States and our service providers may process personal data in the U.S. and other countries. Where personal data is transferred from the UK, EEA, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and, where applicable, the UK Addendum or equivalent mechanisms.

5. Data retention

We retain personal data only as long as necessary for the purposes described in this Notice, to comply with legal obligations, resolve disputes, and enforce agreements. Account data is typically retained for the life of your account and for a reasonable period after closure; transaction records are retained by Paddle and by us for tax and accounting purposes as required by law. After that, we delete or anonymize personal data.

6. Security

We use appropriate technical and organizational measures designed to protect personal data, including encryption in transit, access controls, least-privilege permissions, logging, and regular review of our infrastructure. No system is 100% secure; if we become aware of a breach affecting your personal data, we will notify you as required by law.

7. Your rights

Depending on your location, you may have rights to:

access personal data we hold about you;
request correction of inaccurate data;
request deletion (subject to legal retention obligations);
request restriction of, or object to, certain processing;
request portability of data you provided;
withdraw consent where processing is based on consent;
opt out of marketing communications; and
lodge a complaint with your local data-protection authority.

To exercise these rights, contact us through the support channels on our website. We will respond within the timeframe required by applicable law (generally within one month for UK/EEA requests).

8. Children

The Service is intended for use by businesses and adults. It is not directed to children under 16, and we do not knowingly collect personal data from them.

9. Cookies

We use essential cookies to keep you signed in and to remember preferences. We may also use analytics cookies to understand how the Service is used and improve it. You can manage cookies through your browser settings. Where required by law, we will request your consent before setting non-essential cookies.

10. Changes to this Notice

We may update this Notice from time to time. Material changes will be posted on this page with an updated "Last updated" date. Please review it periodically.

11. Contact

ConversionOS iQ, LLC. Questions about this Notice or your personal data can be sent through the contact channels on our website. Also see our Terms of Service and Refund Policy.