ADE Marketing Solutions Sdn Bhd ("LocusPilot," "we," "us," or "our") operates the LocusPilot platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

1. Information We Collect

1.1 Information You Provide

We collect information you provide directly to us, including:

Account Information: Name, email address, and password when you create an account
Business Information: Business name, website URL, business description, services offered, and contact details you provide in your factsheet
Payment Information: Billing address and payment details (processed securely by Stripe)
Design References: URLs or HTML files you provide for design extraction
Reference Images: Images you upload for AI image generation
Communications: Information in messages you send to us

1.2 Information Collected Automatically

When you access our service, we automatically collect:

Usage Data: Pages visited, features used, time spent on the platform
Device Information: Browser type, operating system, device type
Log Data: IP address, access times, referring URLs
Cookies: Session cookies and analytics cookies (see Section 6)

1.3 Information from Third Parties

We may receive information from:

Google Business Profile: Business reviews and ratings (with your permission)
Authentication Providers: Email and profile information if you sign in with Google
Payment Processors: Transaction status from Stripe

2. How We Use Your Information

We use the information we collect to:

Generate and deliver AI-powered websites based on your business information
Process your payments and manage your account
Create AI-generated images for your website
Communicate with you about your projects and our services
Provide customer support
Send you updates, marketing communications, and promotional materials (with your consent)
Improve and optimize our platform and services
Detect, prevent, and address technical issues and security threats
Comply with legal obligations

3. How We Share Your Information

We may share your information in the following circumstances:

3.1 Service Providers

We share information with third-party vendors who perform services on our behalf:

Supabase: Database and authentication services
Stripe: Payment processing
Cloudflare: Website hosting and CDN services
GitHub: Code repository and automation
Resend: Email delivery
AI Service Providers: Image generation and content optimization

3.2 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

3.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

3.4 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

3.5 Managed Sites, Lead Capture, and the Data Flywheel

When you subscribe to an Operator/Growth/Agency/Authority plan, sites you build with LocusPilot become "managed sites". Managing a site means:

Lead capture: Form submissions on your managed sites are routed through our Cloudflare Worker (leads.locuspilot.com), stored in our lead inbox, and forwarded to the email / SMS / WhatsApp destinations you configure per site. We retain raw lead submissions for 12 months. Daily aggregate counts (no PII) are retained indefinitely for product analytics.
CTA events: Click events on your phone/email/WhatsApp/outbound CTAs are recorded with the page slug and CTA type. No PII is captured. Same 12-month retention with daily aggregation afterwards.
Uptime monitoring: We ping the primary domain of each active managed site periodically and store availability samples. Samples older than 30 days are pruned; daily summaries are retained.
Content metadata: When pages are generated or polished, we capture non-PII page-level features (URL, page type, word count, heading structure, internal link count, schema types) to improve future generations. You can opt out at any time from Manage Sites → Data sharing; opting out applies to future generations and stops further capture.
AI Site Agent transcripts: Operator-tier subscribers' chat transcripts are retained for 30 days for fair-use enforcement and abuse review.

If you cancel your subscription, you can export your lead history as CSV before the period ends from Settings → Cancel subscription → Export leads. After cancellation, managed-site rows revert to pass-through mode (lead emails still forward, but new submissions are no longer stored).

4. Data Retention

We retain your personal information for as long as necessary to:

Provide our services to you
Comply with legal obligations
Resolve disputes and enforce our agreements

Generated websites remain on Cloudflare Pages until you request deletion. Account data is retained for the duration of your account and for a reasonable period afterward for legal and business purposes.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

Encryption of data in transit (HTTPS/TLS)
Secure password hashing
Access controls and authentication
Regular security assessments

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Cookies and Tracking

We use cookies and similar technologies to:

Maintain your session and authentication status
Remember your preferences
Analyze usage patterns and improve our services

You can control cookies through your browser settings. Disabling cookies may affect the functionality of our service.

7. Your Rights

Depending on your location, you may have the following rights:

Access: Request a copy of your personal information
Correction: Request correction of inaccurate information
Deletion: Request deletion of your personal information
Portability: Request transfer of your data to another service
Objection: Object to certain processing of your information
Withdrawal: Withdraw consent for marketing communications

To exercise these rights, contact us at the email address provided below.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We take appropriate safeguards to ensure your information remains protected.

9. Children's Privacy

Our service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

ADE Marketing Solutions Sdn Bhd
Email: privacy@locuspilot.com