Privacy Policy: the plain‑English version.

What we collect, and why

Plain summary: only what we need to reply, build your site, and bill you, nothing extra. We don’t track you around the internet, and this site sets no advertising cookies.

• When you contact us or start a redesign: what you type into the form, your name, business name, current website address, and email, plus a phone number if you choose to add one, and a “referred by” name when you arrive through a partner’s link. The redesign form also records your confirmation that you own or can access your domain (or that you have asked us to register one for you), and your acceptance of our Terms of Service. After you pay, a short intake form collects the build details you choose to share, such as your services, your city or service area, social profile links, goals, and any notes. You don’t create an account to start a redesign.
• Photos and files you upload. The redesign form lets you attach images for your site, and you can send us more later. We collect the files themselves and nothing else about them. They are written to a private folder on our server that sits outside the public website folder and cannot be reached from the web, under filenames we generate rather than the ones on your computer. They are never published anywhere except on your own site, on a page you approved, and we never use them for anything but building and running that site. We hold them while we build and maintain your site; ask us to delete any of them and we will.
• Automatically, whenever you submit a form: your IP address and your browser’s user-agent string, saved alongside your message. We use them to stop spam and abuse, including a limit on how many times one connection can submit in an hour. We don’t use them to profile you. We run no analytics, no advertising pixels, and no tracking cookies on this site.
• When you become a client: the business details we need to build, launch, host, and maintain your site, such as your services, hours, address or service area, the logo and photos you upload, your domain status, and the email or customer tool where you want website leads delivered.
• Billing: our payment processor (Stripe) handles your card. We never see or store full card numbers. When you submit the redesign form we pass your email address to Stripe so your checkout is prefilled. We keep the billing records Stripe shares with us (name, billing email, plan, amount, last four digits, payment status, and your consent to the recurring monthly charge and the 12-month term, with the time it was given).
• When you review your site in the editing panel: the wording changes and notes you send us, the files you attach there, and which pages you marked as approved. Each submission is saved with the time (UTC), your IP address, your browser’s user-agent string, and a small set of display details your browser reports: your screen and window size, your time zone, your operating system, and your browser’s language. Those are recorded for one reason, and it is the reason we ask you to review at all: when you tell us something looks wrong, they are how we reproduce what you were looking at. When you sign the go-ahead to launch, the same set is recorded again alongside your typed name, your email, the exact wording you agreed to, and a digital fingerprint of every page as it stood at that moment, so what was approved is provable later. We don’t combine any of it with anything else, and we don’t use it to identify you across other websites.
• When we hand over your site files: the short delivery receipt you sign electronically, which records who received the files, what they were, the date, and which of the three ownership paths the transfer happened under, together with the time (UTC), your IP address, your browser’s user-agent string, and the language your browser asks for. We also keep a log of the delivery itself: what was sent, when, and to which account.
• If you cancel: what you type into the cancellation form, including any reason you give, plus the time (UTC), your IP address, and your browser’s user-agent string, and a copy of the written acknowledgment we send you.
• If you join our referral program: the details we need to pay you, and, once your payouts reach the IRS reporting threshold for the year, a completed Form W-9, which carries your Social Security number or EIN so we can issue a Form 1099-NEC. We treat that tax information as the most sensitive data we hold: we store it apart from everything else, share it only with the IRS and our accountant, and keep it only for the period tax law requires.

We don’t sell your information

Plain summary: we never sell or trade your personal information. We share it only with the handful of companies we need to run the business, and every one of them is named right here.

• We don’t sell or “share” your personal information for cross-context behavioral advertising, we don’t hand it to data brokers, and we run no advertising pixels on this site.
• Hostinger, our web host, whose servers hold this website and the messages you send us.
• Stripe, our payment processor, which handles every card payment and holds the card details we never see.
• Telegram, the messaging service that alerts us the moment a form comes in. When you submit a form, the details you entered are sent to Telegram’s servers so that alert can reach us. Telegram operates outside the United States.
• Porkbun, which hosts our email mailbox and also sends the mail that goes out of it, so it handles both the copy of your message that lands in our inbox and every automatic email we send you, your cancellation confirmation and your delivery receipt among them.
• Google, because keeping your Google Business Profile and your local listings current is part of what you pay for. We work inside your profile with the access you grant us, and the business details we publish there, your services, hours, address or service area, description, and your opening photos, go to Google, where they are meant to be seen by the public. The same business name, address, and phone also go on the public directories Google cross-references, because that consistency is the local work. The profile, the account behind it, and the reviews on it are yours, not ours, and you can withdraw our access whenever you like.
• Our accountant and the IRS, for referral-partner tax paperwork only.
• That is the complete list. If we ever add a provider, website analytics for example, we will name it here before it starts handling anything of yours, and we will never add one that sells your information.

Client lead data: whose it is

Plain summary: when visitors fill out a form on a site we built for a client, that’s the client’s data. We just route it straight to them, never to us.

• For the leads that visitors submit on a website we build and host for a client, the client is the business of record for that data. It is theirs, not ours, and we handle it only on their instructions.
• We route every lead to the client’s own inbox or CRM, never to ours, and never use it for our own purposes. Each client site carries its own separate privacy policy for its visitors.

Your rights, and how to use them

Plain summary: ask, and we will show you, correct, or delete what we hold about you. No hoops, and we won’t treat you differently for asking.

• You can ask us to access, correct, or delete the personal information we hold about you, and to stop sending you marketing email. We won’t charge you for it, and we won’t treat you any differently for asking.
• To make a request, use the contact form on our FAQ & Support page and put “Privacy” in your message, or call (208) 352-2899. We may need to confirm you are who you say you are before we act, and we aim to answer within 45 days.
• We give you these rights by choice, not because a law forces us to. The comprehensive state privacy laws, California’s included, only reach companies far larger than we are, or companies handling personal information at volumes we don’t come close to. None of them currently applies to us. We would rather simply give you the rights than argue about whether we have to.
• Do Not Track and Global Privacy Control. There is nothing here for those signals to switch off. We run no tracking, no advertising cookies, and no selling or sharing of personal information, so a Do Not Track or Global Privacy Control signal from your browser changes nothing about how this site behaves. If we ever add tracking, we will honor those signals, and we will say so here first.
• If your request is about a lead or a visitor on a client’s website, send it to that business, whose site it is. We will help them handle it, but that information is theirs, not ours.

How long we keep it, and how we protect it

Plain summary: we keep things while we have a reason to, and we protect what we hold with real safeguards. No system online is ever perfectly secure, and we won’t pretend otherwise.

• How long we keep each thing.
  • Redesign inquiries and support messages. Kept while we follow up and for a reasonable period afterward. We clear out inquiries that didn’t become clients once they’re no longer useful to either of us.
  • Client and billing records. Kept while you are a client, and then for as long as tax and business law requires.
  • Your auto-renewal consent record. Kept at least three years.
  • Your delivery and access records (the signed delivery receipt, and the log of what was delivered, when, and to whom). Kept three years.
  • Your cancellation records. Kept three years.
  • Referral tax records. Kept for the period the IRS requires.
  The consent, delivery, access and cancellation records are kept for the same reason: they are the proof that we did what we said we would, and a payment can be questioned long after it was made. If you want what we hold about you deleted sooner, ask and we’ll do it. Those four record types are the exception, and we will tell you plainly which of them we still hold.
• How we protect it. Everything you send travels over an encrypted connection, the padlock in your browser. Your messages, your uploaded files, and your delivery and cancellation records are written to private stores that sit outside the public website folder and cannot be reached from the web, with file permissions that keep them to us. The form is rate-limited and screened for automated abuse. Card numbers never touch our systems at all, because Stripe handles them.
• No promise of perfect security. Anything connected to the internet carries risk, so we can’t promise absolute security. If a breach ever affected information the law requires us to tell you about, we would tell you, and we would tell you promptly.

Children, and where we work

Plain summary: we sell to American businesses. Not to children, and not to Europe.

• Not for children. RedoLocal is a service sold to businesses. This site isn’t directed to children, and we don’t knowingly collect personal information from anyone under 13. If you believe a child has sent us something, tell us and we will delete it.
• United States only. We serve local businesses in the United States and our systems are here. We don’t market or sell to people in the European Union or the United Kingdom, so we don’t operate under the GDPR. If you do contact us from outside the United States, your message will be stored and handled here.

Questions, changes, and how to reach us

This page is our Privacy Policy in full. There is no longer version behind it and nothing here is a summary of some other document. RedoLocal is operated by Sable Pacific LLC, a Wyoming limited liability company operating from Idaho, mailing address Northwest Registered Agent, 30 N Gould St Ste N, Sheridan, WY 82801. If we change this policy we will change the date below, and if a change is significant we will tell our clients directly. See our Terms of Service and Acceptable Use Policy too. Questions, or a privacy request? Use the contact form on our FAQ & Support page or call (208) 352-2899.

Last updated 16 August 2026. Written in plain English on purpose. It is our actual policy, not legal advice to you.