Support Local Marketing LLC, doing business as SupportLocal.

This addendum is part of our Terms of Service. It governs personal information we process on a client's behalf to deliver the Services. It does not replace our Privacy Policy for information we use to operate our own business.

1. Definitions

Client Data means personal information you supply or direct us to process for your customers, prospects, and authorized users. Processing includes collecting, storing, organizing, using, sending, and deleting that information. A sub-processor is a provider engaged to help process Client Data. Other defined terms have the meanings in our Terms of Service and applicable privacy law.

2. Roles

The client is the controller or business and decides the purposes and means of processing Client Data. SupportLocal is the processor or service provider and acts on the client's behalf. You are responsible for notices, lawful instructions, and permissions for the data you provide.

Processing covers contact and business details, customer lists, communications, review activity, and recordings or transcripts when enabled. It lasts for the service term and the retention period described below.

3. Instructions and restrictions

We process Client Data only on your documented instructions to provide the ordered Services, including account settings and approved workflows, or as required by law. We notify you if we believe an instruction violates applicable privacy law.

We do not sell or share Client Data, retain or use it outside the direct business relationship, or use it for a purpose outside the agreed Services except as permitted by law. We do not combine it with data from other clients or our own consumer interactions except where applicable law permits. We will notify you if we can no longer meet these restrictions and cooperate to stop and remediate unauthorized use.

4. Confidentiality

Only people who need Client Data to provide the Services may access it. They are subject to confidentiality duties. We require comparable duties from providers that process Client Data for us.

5. Sub-processors and changes

You authorize the providers below for the relevant Services. We use written terms appropriate to their roles and remain responsible for our processing obligations under this addendum.

HighLevel LLC (GoHighLevel): CRM, SMS, and automation.
Stripe, Inc.: Payments.
Vercel Inc.: Hosting and analytics. Website analytics runs only with consent.
Resend, Inc.: Transactional email.
Google LLC: Google Ads and Business Profile API for the relevant Services.
Meta Platforms, Inc.: Advertising, when advertising services are active.
n8n: Self-hosted automation on our infrastructure. US hosted; operated by us.

Changes to sub-processors

We give at least 30 days email notice before adding or replacing a sub-processor. Contact hello@supportlocalmarketing.com during that period with a reasonable data protection objection. We will discuss an alternative or ending the affected Services if we cannot resolve the concern.

6. Security

We maintain reasonable technical and organizational safeguards, including encryption in transit, access controls, authentication, and secure infrastructure. Safeguards reflect the information processed and the risks involved.

We notify you without undue delay after becoming aware of a security incident involving Client Data. We provide available details and cooperate with your response and required notices. Notification does not itself admit fault.

7. Consumer request assistance

We help you respond to access, correction, deletion, portability, and opt-out requests relating to Client Data. If we receive a request about data you control, we route it to you and act on your instructions unless the law requires us to respond directly.

Privacy Request

8. Retention and deletion

We process Client Data during the service term and retain it for 30 days after suspension or termination under the Terms of Service. During that period, you can request return or deletion. After that, we may delete it unless the law requires retention. Data retained for legal duties remains protected and is used only for those duties. Backup copies are removed through normal backup cycles.

9. Audits

On reasonable written request, we provide information needed to show compliance with this addendum and cooperate with an appropriate assessment. Audits must protect other clients' information, preserve security, and avoid unreasonable disruption. We coordinate scope, timing, and confidentiality in advance.

10. International transfers

The Services are US only, and Client Data is processed in the United States. This addendum does not authorize international transfers or offer an international transfer mechanism. Contact us before supplying information that requires a different arrangement.

11. Liability

Liability under this addendum is governed by the limitations, remedies, and dispute provisions in our Terms of Service. This addendum controls if those terms conflict with its specific data processing requirements.

Limitation of liability

12. Contact