Privacy Policy

Beacon ("Beacon," "we," "us") provides automated Google Business Profile audits for contractors. This policy explains what information we collect, how we use it, and the choices you have. Beacon is intended for businesses located in the United States, and your data is stored and processed in the United States.

Information we collect

• Account information — your email address and login details when you create a Beacon account.
• Google Business Profile data — after you connect your profile via Google OAuth, we access data such as your business hours, categories, photos, reviews, posts, and performance metrics (call clicks, website clicks, direction requests, profile views) in order to generate your audits.
• Billing information — subscription and payment details, processed by our payment provider, Stripe. Beacon does not store your card number.
• Usage data — basic information about how you use the dashboard, for the purpose of improving the product.

How we use your information

We use the information above solely to operate Beacon for you: running your weekly audit, scoring your profile, generating ranked recommendations, sending your weekly report email, and showing your historical trends on your dashboard. On Pro and Premium plans, it is also used to draft review responses and Google Post copy for your review and approval before anything is posted.

We do not sell your data, and we do not share your Google Business Profile data with any other Beacon customer. Where Beacon shows competitor benchmarking, it is based on publicly available data (Google Places, and aggregated third-party search data) and is presented only as anonymized, aggregate comparisons — never as another business's raw profile data.

Google user data & Limited Use

Beacon's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Your Google OAuth token is stored encrypted at rest and is never exposed to your browser. You can revoke Beacon's access to your Google account at any time from your Google Account permissions page, or by choosing "Disconnect Google" in Beacon's Settings. Either one ends Beacon's access straight away.

Extra people on your weekly report

You can add email addresses, such as a partner or an office manager, to receive a location's weekly report. Beacon stores those addresses so the report reaches them.

We send each person a confirmation email first, and no report is sent until they confirm. They get only that location's weekly report, with an unsubscribe link in every one of those emails. Once someone unsubscribes, we stop sending to them and keep that choice, so they aren't added back by accident.

These recipients cannot sign in or see anything else in your Beacon account.

Third parties we work with

We use a small number of vetted service providers to run Beacon:

• Google — source of your Business Profile data, via your explicit OAuth consent.
• Supabase — our database, with row-level security so your data is only ever readable by your own account.
• Stripe — subscription billing and payment processing.
• Resend — delivery of your weekly report and account emails.
• Anthropic (Claude) — generates suggested copy (keyword ideas, draft review replies, post copy) on Pro/Premium plans. It also groups the public reviews of nearby competitors into recurring themes shown on your Overview; that uses public competitor review text, not your customers' data. Your profile score and audit checks are never AI-generated — only based on your real profile data.
• DataForSEO — runs our search-ranking and competitor lookups. We send it search phrases (like "plumber near me"), the map location of your business or service area, and public Google listing identifiers, so it can show where businesses rank. It never receives your Google account access, your customers' details or your payment information.

None of these providers are permitted to use your data for their own purposes beyond providing their service to Beacon.

Data retention

We retain your audit history for as long as your account is active, so you can see your progress over time. If you close your account or request deletion, we delete your stored profile data and audit history, and disconnect your Google account access. Billing records are kept for as long as required for tax and accounting purposes, even after account closure.

If you cancel your subscription, we delete your audit history, Google performance numbers and other data we received from Google, and we disconnect your Google access, 29 days after your subscription ends. Subscribing again before then keeps your history.

If you take your free report and don't subscribe, we delete the Google Business Profile data and the audit we ran for you, and we disconnect your Google access, 30 days after your report. The report in your email and any PDF you downloaded stay with you.

Introductory emails to contractors

To let contractors know Beacon exists, we may collect public business contact details: the business name, the public email shown on the business's own website, and public Google listing facts such as review and photo counts. We use them to send a small number of introductory emails. We keep this information for 90 days unless the person responds or opts out. Anyone can reply "stop" to any of these emails, or write to contact@beaconpro.io, and we won't email them again. To honor that, their address is kept only on a do-not-contact list.

We only use an email address that a business publishes for contact, and we never guess addresses. We keep a note of the page where we found each address and when, so we can show where it came from if you ask. Each of these emails says it is an advertisement, names who sent it, and includes our mailing address.

If you run the free audit on beaconpro.io and give us your email, we may email you your results and follow up once or twice about them and about Beacon. The same "stop" rule applies.

Tips and offers by email

When you connect your business, you can tick a box to get tips and offers by email. It's optional and unticked to start. If you tick the box we keep your email address and the time you agreed so we can send you tips and offers about your profile. We keep these even after your free report ends, so we can let you know about updates or a way back to Beacon.

We never keep anything from your Google profile for this.

Every email has a one-click unsubscribe. Unsubscribing stops all further tips and offers. We keep a record that you unsubscribed so we never email you again by mistake.

Your rights & choices

• Access: request a copy of the data we hold about you.
• Correction: ask us to fix inaccurate account information.
• Deletion: request deletion of your account and stored data at any time.
• Marketing emails: unsubscribe from re-engagement/marketing emails via the link in those emails — you'll still receive your weekly audit report and essential account emails.

Reach us via the contact page below to exercise any of these.

Cookies

Beacon uses only essential cookies needed to keep you signed in and to remember your session — no third-party advertising or tracking cookies.

We also count visits to our public pages with Vercel Web Analytics, which records anonymous, aggregated page views. It does not use cookies and does not track you across other websites.

We also measure how fast our pages load with Vercel Speed Insights, which records anonymous page-speed numbers such as load time. It does not use cookies, does not record what is on your screen, and does not track you across other websites.

Legal disclosure

We may disclose information if required to do so by law, or in response to a valid legal request, but we don't otherwise share your data with third parties beyond the service providers listed above.

Security

All traffic to and from Beacon is encrypted over HTTPS. Google OAuth tokens are stored encrypted, never in browser storage. Database access is enforced with row-level security, so one customer's account can never read another customer's data. If we become aware of a security incident affecting your data, we'll notify affected users as required by law.

Children's privacy

Beacon is a business tool intended for contractors and business owners. It is not directed at, and we do not knowingly collect information from, children under 13.

Changes to this policy

We may update this policy as Beacon evolves. Material changes will be reflected by updating the "Last updated" date above. If we change how we use your Google user data in a way that goes beyond what's described here, we'll notify you and ask you to consent to the updated policy before that change applies to your account.

Contact us

Questions about this policy or your data? Reach us via the contact page.