Privacy Policy — LocalDigital.ai
Last updated: 29 September 2026
1. Data controller
LocalDigital Intelligence SL
Tax ID (NIF): B27681014
Address: Passeig de l'Ametlla, 29, 08480 L'Ametlla del Vallès (Barcelona, Spain)
Privacy contact: privacy@localdigital.ai
Legal contact: legal@localdigital.ai
2. What LocalDigital.ai does
LocalDigital.ai is a platform for town councils, chambers of commerce and local development agencies. It does three things:
- Measure: it assesses the town's business census and its digital maturity: search demand, and how businesses rank on Google Search and in AI assistants.
- Activate: it automatically identifies what each business is missing to be more visible, and lets the organisation run projects to help them.
- Build the territory: interviews, stories, website creation and routes through the town. Businesses take part through a personal link.
Measurements are made on businesses and economic activities, not on people. The questions we ask search engines and AI are generic and contain no one's personal data.
3. What data we process, why, and on what legal basis
| Data | Source | Purpose | Legal basis |
|---|---|---|---|
| Console users: name, email, Google identifier | Sign in with Google ("profile" and "email" scopes only) | Grant access and manage each user's permissions | Performance of the contract with the client organisation (Art. 6(1)(b) GDPR) |
| Businesses: name, address, phone, website, opening hours, category, ratings and public profiles | Public sources: Google Maps, business websites, social media and press | Build the town's digital census and measure whether each business can be found | Legitimate interest of the client organisation and ours in developing local commerce (Art. 6(1)(f) GDPR) |
| Measurements per business: visibility score, search ranking, whether AI mentions it, criteria met or not | Calculated by LocalDigital from the public data in the previous row | Show them to the client organisation, detect opportunities and track projects | Legitimate interest (Art. 6(1)(f) GDPR). They assess the business's online presence, not its owner, and involve no automated decision with legal effects |
| Participating business owners: name, email, phone and whatever they tell us in interviews or the website assistant | Provided by them, through a personal link | Complete the business profile, run interviews and help them create their website | Consent (Art. 6(1)(a) GDPR) |
| Console usage: which screens each user opens and what they do there, and when; page load speed, browser and IP address, stored hashed (pseudonymised) | LocalDigital's own log, without cookies | Know which tools are used, detect errors and improve the service | Legitimate interest (Art. 6(1)(f) GDPR). Kept for 12 months |
| Search demand: keywords, volumes and cost per click, always aggregated and anonymous | Our own Google Ads account, through the Google Ads API | Measure what people search for in each town | Not personal data |
We do not access any user's Google, Google Ads or Search Console account. Our Google Ads connection uses only LocalDigital's own account.
When we use a business's public reviews, for example to prepare its website, we do not use the reviewer's name.
We do not sell data or use it for advertising.
4. Cookies
- Strictly necessary:
- Session: keeps you signed in. Lasts up to 30 days.
- Security (CSRF): protects forms.
We do not use analytics or advertising cookies. The cookies we use are strictly necessary for the service to work, so no consent is required.
5. Who else is involved (data processors)
To provide the service we work with these types of providers:
| Category | Where data is processed |
|---|---|
| Servers and database | European Union |
| Google services: sign-in, Maps and Ads | European Union and United States |
| Artificial intelligence to analyse businesses' public texts and prepare interviews and websites | United States |
| Public search results | United States |
| United States | |
| Interview and website-creation services | European Union |
Transfers to the United States rely on the safeguards provided by the GDPR: the EU-US Data Privacy Framework or standard contractual clauses. On request to privacy@localdigital.ai we will provide the list of providers by name.
6. How long we keep data
- Console users: for the duration of the contract with the organisation, plus 1 year.
- Business data and its measurements: while the town is a client. Reviewed every 6 months.
- Data provided by business owners: until they withdraw consent.
- Technical logs: 12 months.
7. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw consent at any time. Write to privacy@localdigital.ai stating which right you wish to exercise. We will reply within one month.
If you own a business and do not want it included in the analysis, write to us and we will remove it.
If you disagree with our response, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. Security
- Connections are encrypted (HTTPS).
- Role-based access: each user sees only their own town.
- Servers are located in the European Union.
- Administrative access to the servers is key-only.
9. Changes
If we change this policy, we will update the date at the top. If the change is significant, we will notify console users.