Privacy Policy

The Boost Local, a sole proprietorship operated by Christian Guzman, operates theboostlocal.com. The best way to reach us about anything in this policy is hello@theboostlocal.com, and a real person answers.

When you contact us: your name, email, phone number, business name, and whatever you write in the message.

When you buy a package: your payment is handled entirely by Stripe. We receive confirmation that you paid, the amount, and your email — we never see or store your card number.

During onboarding: details about your business needed to build the campaign — address and service area, website and social links, hours, offers, target customers, budget, and any brand materials you upload.

If you use the client portal: your email, a hashed password, and a sign-in session cookie. We store passwords using scrypt hashing — we cannot read your password, and neither can anyone who obtains our database.

Automatically: basic traffic analytics (page views, approximate region, device type) and security logs including IP address and browser, which we use to detect abuse and failed sign-in attempts.

To build and run your ad campaigns, to report results back to you, to process payments, to answer your questions, and to keep the site and your account secure. That's the entire list.

We do not sell your personal information, and we do not share it for advertising purposes. We use a small number of service providers, each of which only receives what it needs to do its job:

• Stripe — payment processing.
• Supabase — our database, where your account and campaign details are stored.
• Vercel — website hosting and traffic analytics.
• Resend — sending you email such as confirmations and reports.
• Google, Meta, and TikTok — the ad platforms where your campaigns actually run.
• Cloudflare — bot protection on our sign-in form.

We may also disclose information if the law requires it, or to protect our rights or someone's safety.

Campaign and account data is kept while you're a client and for up to two years afterward, so we can answer questions about past work and meet tax and accounting obligations. Security logs are kept for a shorter period. You can ask us to delete your data sooner.

Everything travels over HTTPS. Passwords are hashed with scrypt. Sensitive stored values are encrypted with AES-256. Access to our database is restricted to server-side code, sign-in attempts are rate limited, and administrative actions are logged. No system is perfect, but we take this seriously and keep improving it.

You can ask us to show you what we hold about you, correct it, or delete it. Email hello@theboostlocal.com and we'll take care of it within 30 days. If you're a California resident, the CCPA gives you these rights explicitly, plus the right not to be discriminated against for exercising them. We don't sell personal information, so there is nothing to opt out of.

You can unsubscribe from marketing email at any time using the link in the email. We'll still send messages about campaigns you've paid for.

We use a sign-in cookie to keep you logged into the client portal, and privacy-friendly analytics that don't follow you across other websites. We don't run third-party advertising trackers on this site.

This is a service for businesses. It isn't directed at anyone under 18, and we don't knowingly collect information from children.

If we change this policy we'll update the date at the top. If a change is significant, we'll email active clients rather than quietly editing the page.