Privacy Policy

Last updated: April 30, 2026

Introduction

Lompoc Locals (operated by [Founder Name / Entity Placeholder]) is a local business directory and promotions platform serving the Lompoc, California area. This Privacy Policy explains how we collect, use, disclose, and protect information about you when you visit our website or use our services. By using Lompoc Locals, you agree to the practices described in this policy. If you do not agree, please discontinue use of the site.

Information We Collect

We collect information you provide directly and information generated by your use of the site.

  • Account information: When you register, we collect your name, email address, and a hashed version of your password (we never store passwords in plain text).
  • Business information: When you claim or list a business, we collect your business name, address, phone number, category, hours, and any photos or promotional content you upload.
  • Browsing data: We automatically collect your IP address, browser type, referring URL, locale preference, and pages visited via server logs and session cookies.
  • Payment information: Payments are processed entirely by Stripe. We do not store your full card number or CVV. Stripe may share a transaction ID and last-four digits with us for billing records.

How We Use Your Information

We use the information we collect to:

  • Operate the directory and display business listings and deals
  • Send the weekly email digest (only if you subscribe)
  • Process payments for premium business subscriptions via Stripe
  • Authenticate your account and maintain session security
  • Moderate content and prevent fraudulent or spam listings
  • Respond to your support requests
  • Comply with applicable laws and legal obligations
  • Improve site performance and user experience through analytics

Third-Party Services

We share limited data with trusted service providers who help us operate the site:

  • Stripe — Handles all payment processing for premium subscriptions. Stripe has its own Privacy Policy.
  • Resend — Sends transactional emails (account confirmations, password resets) and the optional weekly digest.
  • Vercel — Hosts the website and serves all web traffic.
  • Neon — Provides our cloud PostgreSQL database where account and business data is stored.
  • Mapbox — Powers the interactive business map. Mapbox may receive your approximate location when you view the map.
  • Anthropic — Powers the AI chat assistant feature on the site. Chat messages you send may be processed by Anthropic's Claude API.
  • Vercel Blob — Stores business photos and uploaded images.

We do not sell your personal information to any third party.

Cookies and Tracking

We use two first-party cookies: an authentication session cookie (to keep you logged in) and a locale preference cookie (to remember your language setting). We do not use third-party advertising trackers, retargeting pixels, or cross-site tracking cookies. You can disable cookies in your browser settings; doing so may prevent login and some site features from working.

Session Identifier

We set a first-party cookie named lompoc_sid containing a random session identifier so we can measure how features are used. It contains no personal information, expires after one year, and is not shared with third parties.

Your California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

  • Right to Know: You may request a copy of the personal information we hold about you and how we use it.
  • Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
  • Right to Correct: You may request correction of inaccurate personal information.
  • Right to Opt-Out of Sale: We do not sell your personal information. There is nothing to opt out of.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights.

To exercise these rights, email us at hello@lompoclocals.com. We will respond within 45 days as required by law.

Data Retention

We retain your account information for as long as your account is active. If you request account deletion, we will delete or anonymize your personal data within 30 days, except where we are legally required to retain certain records. Business listing data and deal history may be retained in anonymized form for historical and analytical purposes.

Children's Privacy

Lompoc Locals is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will delete it promptly. This site complies with the Children's Online Privacy Protection Act (COPPA).

Security

We take reasonable measures to protect your information. Passwords are hashed using bcrypt before storage — we never store plain-text passwords. All data transmitted between your browser and our servers is encrypted via TLS/HTTPS. Our database is hosted on Neon, which provides encryption at rest. Despite these measures, no internet transmission is 100% secure.

Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects when the policy was last revised. For material changes that affect your rights, we will notify you via email (if you have an account) or by displaying a prominent notice on the site. Your continued use of Lompoc Locals after changes are posted constitutes acceptance of the revised policy.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:

hello@lompoclocals.com