Privacy Policy
Effective Date: May 21, 2026
We built GMB Zoom to track local map pack rankings with absolute precision. We need certain data to make that software work. We do not sell your client lists. We do not share your grid scan coordinates with competitors. This page explains exactly what we collect, why we need it, and how we protect it.
The Data We Collect
When you sign up for GMB Zoom, you hand over specific information. We require your name, email address, billing details. If you run a local SEO agency, you also input client data to track their campaigns. This includes Google Business Profile URLs, target keywords, and geographic coordinates for grid tracking.
We track how you interact with the software. We log your login times. We monitor which rank tracking features you use most often. We record the IP address you use to access the dashboard to prevent account sharing abuse.
Why We Need Your Information
Software requires inputs to generate outputs. We use your target keywords and GBP links to query Google Maps and return your ranking data. Without this exact information, the tool breaks.
Your email serves as our primary communication channel. Password resets. Billing failures. API connection drops. We send critical account alerts directly to your inbox.
Aggregate usage data helps us illuminate blind spots in our own documentation. We use analytics to improve content quality across the site. If we notice forty percent of users struggling to configure the review velocity tracker, we write a specific guide to fix that friction. We look at the noise. We find the signal. We build better resources.
Cookies and Web Analytics
Cookies keep you logged into the dashboard. You close your browser, you come back, you stay logged in. This is simple, necessary functionality.
Google Analytics and Google Search Console run on our public marketing pages. These tools drop their own cookies to track visitor behavior. They tell us which blog posts attract local SEO professionals and which ones fall flat. This data dictates our editorial calendar. If a guide on NAP consistency gets heavy traffic, we write more about citation building.
Browser settings allow you to block these tracking cookies. The marketing site will still work perfectly. The software dashboard requires functional cookies to authenticate your session.
Third-Party Service Providers
Lean operations require specialized partners. We rely on third-party tools to handle specific tasks outside our core competency. We share your data only when necessary to provide our service.
- Stripe: Processes all subscription payments. We never see your full credit card number. Stripe handles the transaction and tells us if the charge cleared.
- Postmark: Delivers our transactional emails. They need your email address to send your weekly map pack ranking reports and system alerts.
- Google Maps API: Processes our grid scans. We send them the geographic coordinates and search terms you specify. We do not send them your account details or client names.
Selling data is a violation of trust. We never sell your personal information to data brokers. We never trade your client lists with other SEO agencies.
Security and Data Retention
Local SEO involves sensitive client data. We treat it with the respect it demands. We encrypt all data in transit using standard TLS protocols. We store your database records on secured AWS servers.
Only two lead developers have direct access to the production database. They log in only to fix critical bugs or handle explicit support requests from you.
No system is flawless. We cannot guarantee absolute immunity from sophisticated attacks. We do guarantee immediate transparency if a breach occurs. We will notify you within 24 hours of confirming any unauthorized access to your account.
Active subscriptions keep your data alive. Cancel your account, and we delete your tracked keywords and grid scan history within 30 days.
Tax authorities require us to retain basic billing records for seven years. We keep support tickets for two years to reference past troubleshooting steps.
Dead data creates unnecessary liability.
Your Privacy Rights
You own your data.
You have the right to request a full export of your account data. You have the right to demand complete deletion of your profile. You have the right to correct inaccurate information.
Email our support desk to trigger any of these actions. We process deletion requests within five business days. No stalling. No dark patterns. Real compliance.
Contact Us
Generic web forms hide accountability. We prefer direct communication.
Direct questions about this policy to [email protected]. A real human reads that inbox. We reply within 48 hours during standard business days.
Trusting us to track your local dominance means trusting us with your data. We take that responsibility seriously.
