Legal
Privacy policy
Last updated: September 5, 2026. Plain-language summary first, details below.
The short version
- The tools have no accounts. We do not know who you are unless you email us or subscribe.
- What you type into a tool (a business name, keywords, a review text) is sent to our API to produce your report and is not stored afterwards. Daily usage counters keyed to a hashed request address expire after two days.
- To produce reports we send that input to Google's Places API and, for AI features, to Replicate, which runs the language model for us. Neither receives your name or email from us.
- If you subscribe for new-tool updates we store your email address and the page you subscribed from, and nothing else.
- We use Google Analytics 4, Hotjar and PostHog to understand how the site is used — only if you accept analytics cookies in the banner. We do not sell data and we do not run ads.
Who we are
Locan ("we") operates locan.ai, a hub of free local SEO tools and guides. Contact: hello@locan.ai.
What we process, and why
Tool inputs
Each tool takes a small input — a business name or Google place, a keyword, a city, a list of categories or services, a review text and star rating — and returns a report. The input is processed in memory by our API for the duration of the request. We do not store tool inputs or reports, and we do not build profiles of businesses or visitors from them.
Two of the tools (the LocalBusiness Schema Generator and the Google Review Link & QR Code Generator) run entirely in your browser except for the optional business lookup; the JSON-LD, QR codes and posters you generate never leave your device.
Usage limits
To keep the tools free we apply daily limits per visitor. To do that we keep a counter keyed to your request's network address (as forwarded by our CDN) and the current date. Counters are deleted automatically after two days. We do not use this data for anything else.
Subscriptions
If you enter your email to be notified about new tools we store the email address, the page you subscribed from and the time. We send a short email when a new tool or major guide ships. Unsubscribe any time by replying to any email or writing to hello@locan.ai; we delete the record.
Email you send us
We keep correspondence for as long as needed to answer you and for our records.
Third parties that process data for us
- Google Places API (Google LLC) — receives the business name or place you look up, the keyword and the grid coordinates used by the rank checker, in order to return public business data. Governed by Google's terms and privacy policy.
- Replicate (Replicate, Inc.) — hosts the language model (currently an OpenAI GPT-5 model) used for AI features and receives the text needed for them: the public profile snapshot for the optimizer's suggestions, the business name, city and category for the AI Visibility Checker, and the review text, rating and business name for the review response generator. Replicate does not use inputs to official models for training.
- Amazon Web Services — hosts the site, the API, the counters and the subscriber list (US West region), and sends our alert and subscription emails.
- Google Analytics 4, Hotjar and PostHog (PostHog Inc., US cloud) — usage analytics, anonymised interaction recordings and product analytics on the website, so we can see which tools and guides help and where they break. PostHog requests go through a reverse proxy we operate. Hotjar and PostHog mask typed text in form fields; we additionally mark tool inputs to be excluded.
We do not sell personal data and we do not share it with advertisers.
Cookies and similar technologies
The tools themselves set no cookies. Google Analytics, Hotjar and PostHog set cookies to distinguish visitors and sessions, and they load only after you click "Accept" in the cookie banner. Your choice is stored in your browser for 12 months; you can change it any time via Cookie settings in the footer. Declining does not affect any tool.
Retention
- Tool inputs and reports: not stored.
- Usage counters: two days.
- Subscriber emails: until you unsubscribe.
- Server logs (technical errors, no report content): 30 days.
- Analytics: per Google Analytics, Hotjar and PostHog retention settings, currently 14 months or less.
Your rights
Depending on where you live you may have rights to access, correct, delete or export personal data we hold about you, and to object to processing. Because we hold so little, the practical answer is usually a single email: write to hello@locan.ai and we will confirm what we have (typically nothing, or a subscription record) and delete it on request.
Public business data
The reports describe businesses using data Google already publishes (name, address, category, review counts, position in results). If you believe a report about your business shows something that Google should not publish, the fix is in your Google Business Profile, not here — our tools only read what is public. Our Google Business Profile guide explains how to correct each field.
Changes
We will update this page when our processing changes and adjust the date at the top. Material changes to subscriber handling will be announced in the next subscriber email.