Privacy Policy

This Privacy Policy explains how King Marketing Partners (“Canopy,” “we,” “us,” or “our”) collects, uses, discloses, and protects information in connection with the Canopy local-visibility platform available at canopylocal.com and its related applications (the “Service”). By using the Service you agree to the practices described here.

Information We Collect

We collect the following categories of information:

• Account information. When you create an account we collect your name, email address, and authentication identifiers through our authentication provider (Clerk). We never see or store your password.
• Organization & billing information. Your organization name, plan, and billing status. Payments are processed by Stripe; we do not collect or store full payment-card numbers.
• Business and scan data you provide. The business locations, keywords, service areas, and geographic grids you enter so we can run local-ranking scans and generate insights.
• Data from connected third-party accounts. When you choose to connect an account (for example, Google Business Profile), we access data from that account to provide the features you request. See “Google User Data” below.
• Automatically collected data. Usage activity, device and browser information, and error/diagnostic logs (via Sentry) used to operate, secure, and improve the Service.

Google User Data

If you connect your Google account, Canopy requests the Google Business Profile management scope (https://www.googleapis.com/auth/business.manage) so we can, at your direction, read the business locations associated with your Google Business Profile and import their details (such as business name, address, coordinates, and place identifiers) into your Canopy workspace.

We store an encrypted Google refresh token so the connection persists; the token is encrypted at rest using AES-256-GCM. We never receive your Google password. You can disconnect at any time from Settings → Integrations, which revokes Canopy’s access at Google and deletes the stored token from our systems.

Limited Use disclosure. Canopy’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically, we use Google Business Profile data only to provide and improve the user-facing features you request; we do not use it for advertising; we do not sell it; we do not transfer it to others except as necessary to provide these features, to comply with applicable law, or as part of a merger or acquisition; and we do not allow humans to read this data unless we have your consent, it is necessary for security or to comply with applicable law, or the data has been aggregated and anonymized.

How We Use Information

• Provide, maintain, and secure the Service and your account.
• Run local-ranking scans and generate plain-English insights and reports.
• Import and manage business locations from connected accounts at your direction.
• Process billing and send service-related communications.
• Provide customer support and respond to your requests.
• Detect, prevent, and address fraud, abuse, and technical issues.

How We Share Information

We do not sell your personal information. We share information only with:

• Service providers (subprocessors) that help us operate the Service, under contractual confidentiality and data-protection obligations — including Google (Business Profile data), Stripe (payments), Clerk (authentication), our search-data providers, Anthropic (AI-generated insights), Sentry (error monitoring), and our hosting and database infrastructure providers.
• Integrations you configure. If you connect a CRM or webhook (for example, GoHighLevel), we send the data you direct us to send to that destination.
• Legal and safety. When required to comply with law, enforce our terms, or protect the rights, property, or safety of users or the public.
• Business transfers. In connection with a merger, acquisition, or sale of assets, subject to this Policy.

Data Retention

We retain your information for as long as your account is active or as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When you disconnect a third-party account, the associated access token is deleted promptly. You may request deletion of your account data as described below.

Data Security

We use technical and organizational measures appropriate to the sensitivity of the data, including encryption in transit, encryption at rest for sensitive credentials (such as connected-account tokens and API keys), and access controls scoped to your organization. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your Rights and Choices

Depending on your location, you may have the right to access, correct, export, or delete your personal information, and to withdraw consent for optional processing. You can disconnect connected accounts at any time from Settings → Integrations. To make a privacy request, contact us at the address below; we will respond within a reasonable period and as required by applicable law.

Cookies

We use strictly necessary cookies and similar technologies to keep you signed in and to operate the Service. We do not use third-party advertising cookies.

Children’s Privacy

The Service is intended for businesses and is not directed to children under 16. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes we will update the “Effective” date above and, where appropriate, provide additional notice. Your continued use of the Service after an update constitutes acceptance of the revised Policy.

Contact Us

Questions or requests regarding this Privacy Policy can be sent to King Marketing Partners at manager@kingmarketingpartners.com. See also our Terms of Service.