Privacy Policy

This Privacy Policy describes how Echobooom Management & Entrepreneurial Solutions Private Limited ("Echobooom," "we," "our," or "us"), operating the RankLocal platform (https://ranklocal.echobooom.ai), collects, uses, processes, stores, protects, and discloses information when you use our software-as-a-service platform, websites, and associated tools (collectively, the "Service").

We are deeply committed to protecting your privacy and ensuring the security of your personal and business data. If you have any questions or concerns about this policy or our data practices, please contact us at ranklocal@echobooom.ai.

1. Information We Collect

We collect information in three categories: information you provide directly, information accessed via authorized third-party integrations (such as Google APIs), and information automatically collected through your use of the Service.

A. Information You Provide Directly

• Account Registration Details: Full name, business email address, phone/WhatsApp number, company/business name, country, and billing/tax information.
• Authentication Credentials: Passwords, password reset requests, and one-time passcodes (OTPs).
• User-Generated Content: Post drafts, custom replies, uploaded media (images and videos), prompts, and instructions submitted to our AI tools.
• Customer Support Communications: Feedback, inquiries, bug reports, and correspondence with our support team.

B. Google User Data Accessed via Google APIs

When you connect your Google Account or Google Business Profile to RankLocal via OAuth 2.0 authorization, we access only the specific data scopes you explicitly authorize:

• Google Account Profile & Email (.../auth/userinfo.email, .../auth/userinfo.profile): Basic profile data including your primary email address, full name, profile picture URL, and unique Google account identifier.
• Google Business Profile Data (.../auth/business.manage):
  • Business account details, location IDs, store codes, business names, addresses, phone numbers, website URLs, and geographic coordinates.
  • Business categories (primary and secondary), business descriptions, opening hours, special hours, and business attributes (e.g., amenities, payment options, accessibility).
  • Customer reviews, star ratings, reviewer display names/profile photos, review comments, creation timestamps, and owner reply comments.
  • Google local posts, announcements, special offers, event details, and media assets (photos and videos) published or associated with the business listing.
  • Performance metrics and search insight totals (e.g., search impressions, map views, website clicks, call clicks, direction requests).
• YouTube Channel & Video Data (.../auth/youtube.upload, .../auth/youtube.readonly, .../auth/yt-analytics.readonly) (When optional YouTube integration is enabled):
  • Connected YouTube channel name, channel ID, and avatar.
  • Video metadata (titles, descriptions, tags, category IDs, privacy status) for videos/Shorts uploaded or scheduled through the platform.
  • Channel and video performance analytics (views, likes, comments, watch time metrics) for published videos.

C. Automatically Collected Technical Data

• Device & Connection Data: IP address, browser type and version, operating system, device identifiers, and network information.
• Log & Usage Information: Access timestamps, pages viewed, actions taken, API response times, error logs, and session durations.
• Cookies & Local Storage: Essential session cookies and security tokens required for authentication and CSRF protection.

2. How We Use Google User Data

RankLocal accesses, processes, and uses Google user data strictly to provide, maintain, and improve user-facing features within the RankLocal platform. We explicitly use Google user data for the following specific purposes:

• User Authentication & Account Setup: We use your Google email and profile information to verify your identity, enable secure OAuth login, create your RankLocal profile, and link your authorized business accounts.
• Business Profile Dashboard & Synchronization: We retrieve your Google Business Profile listing details (names, addresses, categories, operating hours, attributes) to populate your management dashboard, display real-time profile statuses, and monitor listing health.
• Customer Review Monitoring & Management: We sync reviews and ratings from your Google Business Profile to provide a centralized review dashboard. This enables you to track customer sentiment, receive notifications of new reviews, and draft or post manual or AI-assisted responses back to Google with your explicit approval.
• Automated Profile Audits & Optimization: We analyze listing completeness, category relevance, attribute coverage, and search visibility signals to generate actionable SEO audit scores and guided profile optimization suggestions.
• Publishing Updates, Posts & Media: We use authorized API endpoints to push user-approved local posts, offers, business announcements, operating hour changes, category updates, and photo/video media directly to your Google Business Profile.
• YouTube Shorts Publishing & Performance Tracking: For users who connect YouTube, we use authorized YouTube APIs to upload, schedule, and publish video files and Shorts created or selected by the user, and to retrieve video analytics for display in their performance reports.

3. Google API Services User Data Policy Compliance (Limited Use Disclosure)

RankLocal's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Data Protection Mechanisms for Sensitive Data

We treat all Google user data, authentication tokens, and business records as sensitive information and employ comprehensive, industry-standard technical, administrative, and physical data protection mechanisms:

5. Data Retention & Deletion Policies

We believe in data minimization and retain your information only as long as necessary to provide the Service or comply with legal obligations:

• Active Accounts: Google user data and business metrics are retained as long as your RankLocal account remains active and connected.
• Google Account Disconnection: You can disconnect your Google Business Profile or YouTube account at any time via the "Settings / Social Accounts / Business Profile" screen. Disconnecting immediately revokes our API connection and permanently removes/invalidates stored OAuth tokens.
• Account Deletion Request: You can request complete deletion of your account and all associated data at any time directly through your dashboard (under Profile > Danger Zone > Request Account Deletion) or by emailing privacy@echobooom.ai.
• Deletion Timeline: Upon receiving an account deletion request or upon account termination, all stored Google user data, profile metrics, review data, uploaded media, and OAuth tokens are permanently and irreversibly purged from our active databases within 30 days.
• Revoking Access via Google: You can independently revoke RankLocal's access to your Google Account at any time through Google's Security Settings at:
  https://myaccount.google.com/permissions.

6. How We Share Information

We do not sell, rent, trade, or share your personal data or Google user data with third parties, except in the following limited circumstances:

• Essential Infrastructure Providers: With trusted cloud hosting, database, and email/SMS/WhatsApp delivery providers that assist in delivering our services, subject to strict confidentiality and security agreements.
• Legal & Regulatory Compliance: When required by applicable law, regulation, legal process, or governmental subpoena, or to protect the vital interests, safety, or legal rights of Echobooom, our users, or the public.
• Business Transfers: In connection with or during negotiations of any merger, sale of company assets, financing, or acquisition of all or a portion of our business, subject to the acquiring entity adhering to this Privacy Policy.

7. Your Privacy Rights & Choices

Depending on your location and applicable privacy laws (such as GDPR, CCPA, and the Digital Personal Data Protection Act), you have the right to:

• Access & Portability: Request a copy of the personal information and business records we hold about you.
• Correction & Rectification: Request correction of inaccurate, outdated, or incomplete data.
• Deletion & Erasure: Request permanent deletion of your personal information and Google user data.
• Withdrawal of Consent: Disconnect connected third-party accounts (e.g., Google or Instagram) at any time, halting further data synchronization.
• Opt-Out of Marketing: Unsubscribe from marketing emails, SMS, or WhatsApp promotional notifications using the unsubscribe links or account notification toggles.

8. Children's Privacy

Our Service is designed exclusively for businesses and individuals aged 18 and older. We do not knowingly collect or solicit personal information from children under the age of 18. If we discover that a child has provided us with personal data, we will take immediate steps to delete such data from our systems.

9. Updates to this Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our legal obligations, platform features, or third-party API policies (such as Google API Services policies). When updates are made, we will revise the "Last Reviewed & Updated" date at the top of this document. For significant material changes, we will provide prominent notice via the platform dashboard or by email.

10. Contact Us & Data Protection Inquiries

If you have any questions, concerns, feedback, or data subject requests regarding this Privacy Policy or our security practices, please contact us at: