Privacy policy

Last updated October 17, 2026 · Version 2026-10-17

Beaver Analytics LLC, a California limited liability company, operates LocalFlips.com. This Policy explains how we handle personal information when you visit our website, create or use an account, pay for our service, choose communications, or contact us. It also explains your choices and how to make a privacy request.

1. Information we collect

Account and sign-in information. Your name, email, account identifiers, sign-in method, preferences, and information needed to authenticate you. Google sign-in supplies the identity details you authorize. For email/password accounts, we store a password hash, not your plaintext password. Verification and account-recovery steps also create temporary codes or verification records.

Service activity. Your search area and radius, schedule, settings, saved or archived finds, interactions needed to operate account features, delivery records, and your choices about communications. You can enter a location manually. If you choose browser location, we receive the location supplied with your permission; you can later revoke that permission in your browser.

Payments. Billing authorizations, the selected limit, fees, invoices, adjustments, payment status, and records needed to resolve refunds or disputes. Stripe receives the payment details and billing address you enter on its payment page. Billing-location information is used for payment, tax records, and determining applicable tax obligations. We receive payment-method identifiers and a summary such as card brand, last four digits, and expiration. We do not store your full card number or security code. To enforce one card per account and unpaid balances, we keep a keyed fingerprint of each saved card, not the card number.

Communications and evidence. Support messages, contact details, report explanations and attachments you submit, correspondence, and the records of your communication permissions. A free-find or paid account must confirm possession of a mobile number with a one-time code. We keep a keyed fingerprint and limited verification records to enforce free-find eligibility, one account per number and unpaid balances, and an encrypted copy of the number so you can turn on text alerts for it later without a new code, never retaining that number in plaintext. If you separately choose recurring text alerts, we retain the enrolled number, the disclosure version, where and when you checked the opt-in, verification status, and delivery or opt-out records. Attachments can include information about other people; submit only what is relevant and avoid unrelated sensitive information.

Technical and security information. IP address, browser/device information, request and error records, timestamps, session identifiers, and limited identifiers used to secure accounts, enforce eligibility, and prevent misuse. Some identifiers are hashed or otherwise pseudonymous, which does not necessarily make them anonymous.

2. How we use information

• Provide the features you request, manage your account and preferences, and authenticate access.
• Maintain your service history, calculate and collect authorized charges, provide receipts, and resolve payment issues.
• Send requested alerts and necessary account, security, and billing communications.
• Respond to support and privacy requests, review reports and appeals, and correct errors.
• Protect users and the service, enforce our agreements, troubleshoot failures, and meet legal obligations.
• Send promotional email only after a separate opt-in, until you unsubscribe.

We limit collection and retention to what is reasonably needed for these purposes. We do not sell your personal information, use it for cross-context behavioral advertising, or share it with advertisers for their independent marketing. We do not use your personal information or customer content to train AI models.

3. When information is disclosed

We use providers to perform necessary functions on our behalf. These include Cloudflare for hosting, delivery, storage and security; Neon for database hosting; Stripe for payment processing; Google when you choose Google sign-in; Geoapify for typed address and location suggestions; and email-delivery providers such as Resend. Twilio texts the one-time code that confirms your mobile number for the free find. If you enroll in texts, Twilio and mobile carriers process the number and message information needed to deliver them. If you connect Discord, Discord receives the identifiers and messages needed for that connection. Sentry receives error reports so we can find and fix problems. OpenAI processes the details and screenshots of a report you submit so the report can be reviewed automatically. When a saved search area needs geocoding, OpenStreetMap's Nominatim service may look up the city or ZIP code; it doesn't receive your account details.

Providers receive information appropriate to their role. They may also process certain information under their own notices and legal obligations, particularly when you use a payment, identity, or connected-account service directly. We use appropriate contractual and security measures for processing on our behalf.

The map on setup and Search settings loads tiles, fonts, and map graphics from OpenFreeMap (tiles.openfreemap.org). That provider receives your IP address and the map area being viewed. Our map requests do not send LocalFlips account details or account cookies. You can use typed location entry rather than granting browser location permission.

When address suggestions are enabled, the location text you type and an approximate location derived from your network location are sent through our authenticated server to Geoapify so it can rank and return matching US addresses and map coordinates. We do not send Geoapify your LocalFlips account identifier, account cookies, or contact information with that request.

Authorized personnel and contractors may access information needed to help you, operate the service, or resolve an issue. We may disclose information when reasonably necessary to comply with law or valid legal process, protect rights and safety, or address a dispute. Information may transfer in a merger, acquisition, or similar business transaction, subject to applicable law and notice where required. We may also disclose information at your direction.

These operational disclosures do not authorize advertising partners to market to you. We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. We do not share mobile numbers or text-message opt-in data and consent with third parties or affiliates for their marketing or promotional purposes, and we never sell them. Apart from the messaging providers that deliver our texts, text-message opt-in data and consent are not shared with any third parties.

4. Cookies and browser storage

Cookies are small values stored by your browser and sent with relevant requests. Local storage and session storage remember information in the browser without sending it automatically with every request. We use these technologies for sign-in, security, account continuity, and requested interface features.

Our hosting and security services may also set security or access-session cookies when those services are used. Such cookies serve their security purpose, not advertising. Browser session restoration can preserve some session storage longer than a single window's lifetime.

Cloudflare Web Analytics measures page speed and visits without cookies. We also record how quickly our pages load and respond, without cookies and without information that identifies you. We currently do not use advertising pixels, optional visitor-analytics cookies, or session recordings. If we introduce optional analytics, we will update this notice and provide the choices and consent required before enabling them. We do not treat continued browsing or a Terms acceptance as consent to optional tracking.

You can delete or block cookies and browser storage using your browser settings. Blocking essential storage may prevent sign-in or other requested functions. Browser "Do Not Track" signals do not change our necessary storage. Global Privacy Control is a different signal: we respect applicable opt-out requirements, and currently have no sale or advertising-related sharing for it to turn off. You can contact us about any privacy preference.

5. Your communication choices

The one-time mobile code required for a free find verifies possession and helps enforce free-find eligibility; it does not enroll you in recurring alerts. Recurring text alerts are a separate, optional choice made with an unchecked consent box. Message frequency varies with your finds. Message and data rates may apply. We use your number and consent records to verify enrollment, send an enrollment confirmation and new-find alerts, process STOP/HELP requests, and document your instructions. We do not send marketing SMS. Reply STOP or use Account to turn texts off. The text-message terms describe frequency, carrier charges, and help.

Discord connections and optional alert settings can be managed in Account. Promotional email requires a separate opt-in; use its unsubscribe link or contact us to stop it. Account, security, billing, and responses to your requests may still be sent where necessary. We retain limited suppression information when needed to respect an opt-out.

6. Retention and account deletion

You can request account deletion by emailing chris@beaveranalyticshq.com. Where available, use Account → Delete account for the same request. We may verify ownership before acting. Deactivation stops account use; ordinary account personal data is removed or deidentified within 30 days after a verified deletion request, subject to the limited exceptions below.

While an account is active, we retain information needed to provide its requested features and maintain its history. After deletion, we normally retain billing, invoice, payment-authorization, and limited audit and eligibility records for up to seven years for accounting, dispute resolution, security, and enforcement of eligibility. This is a retention policy, not a claim that every record must legally be kept seven years. We limit the data retained to its purpose and apply any shorter period required by law.

Unsettled payments, refunds, legal claims, or preservation obligations can require specified records to be held longer; we retain them only as necessary and review the need. Deleting an account does not erase a valid debt or extinguish a refund entitlement.

Guest-support correspondence is normally removed within 90 days after resolution or last contact, unless needed for an ongoing dispute or legal obligation. Technical intake records may be removed sooner. Communications copied into a support mailbox are handled under this policy as well.

Backup copies expire under the applicable backup schedule or remain isolated from ordinary use until removed; a restored backup must not reinstate ordinary use of previously deleted account data. Payment and other providers may retain records under their own legal obligations. Contact us if you need information about a particular record or retention period.

7. Access, correction, deletion, and other requests

Email chris@beaveranalyticshq.com to request access to or an export of your personal information, correct it, request deletion, or ask about our practices. Available account controls may help you do this directly. An in-product export can have technical limits; contact us if it is incomplete or you need information not included there.

Depending on the law that applies, you may have rights to know the categories and specific information we hold, receive a portable copy, correct inaccuracies, delete information, opt out of sale, targeted advertising or certain profiling, limit specified sensitive-data uses, withdraw consent, or appeal a refused request. We do not require you to waive those rights or discriminate against you for exercising them.

We may request information reasonably needed to verify you or an authorized agent, while avoiding unnecessary sensitive information. We explain a denial or applicable exception and respond within the deadlines required by law. To appeal, reply to our response asking for review. You may also complain to your state's attorney general or other competent privacy regulator; California residents may contact the California Privacy Protection Agency. Our privacy contact is available without signing in.

We do not sell personal information or share it for cross-context behavioral advertising. We use sensitive information, such as a location you request us to use or account credentials, for the requested service and other legally permitted purposes. We do not use those details to infer sensitive personal characteristics for advertising.

8. Users aged 13–17

LocalFlips is available to users aged 13 and older in the United States. We do not knowingly collect personal information from children under 13. If you believe an under-13 child has provided information, contact us so we can investigate, stop further collection as appropriate, and delete information as required.

For teens, we limit processing to what is necessary for the requested service, security, and other legally permitted purposes, or obtain the appropriate separate consent when required. We do not sell teen personal information, target behavioral advertising to teens, or record their browsing sessions. Location access remains optional; only provide what you need for the requested feature.

The Terms explain parent/guardian involvement and adult authorization of paid use. A parent's payment authorization is not blanket permission for unrelated use of a teen's information. Teens and parents/guardians can contact us about applicable privacy rights; we verify authority and consider the teen's own rights before disclosing information.

9. Security and processing locations

We use reasonable administrative, technical, and organizational measures appropriate to the information and the service, including access controls and protected communications. No system can promise absolute security. Tell us promptly if you believe your account or information has been compromised.

We operate in California. Providers may process information in the United States and other locations where they operate, subject to applicable safeguards and law. Our launch service is intended for US users.

10. Policy updates

We will update the date above when this Policy changes. We provide additional notice of material changes and obtain consent where required before applying a new use of information. A new version does not override rights that apply to information already collected.

11. Privacy contact

Beaver Analytics LLC
312 Bachman Ave
Los Gatos, California 95030, United States
chris@beaveranalyticshq.com