Privacy Policy

We do not ask who you are. Our analytics (Vercel Web Analytics) counts page visits without cookies. We do not use Google Analytics, advertising trackers or tracking pixels.

When you open a listing or tap its phone, WhatsApp, website or directions button, we count it so the owner can see how many people did. The count records the listing, the kind of tap and the time. It does not record who you are, your IP address or your device. If you arrived from one of our campaign links, the campaign name is counted too.

When you scan a listing's QR code, we count one scan for that listing. To count a network once per clock hour rather than every reload, we keep a scrambled (keyed hash) form of your network address, never the address itself, for the hour of the scan, and delete it once that hour has passed, when the next code is scanned.

If a search finds nothing, we keep the words searched and the filters used, with nothing that identifies you, so we know which businesses to add. We keep those for about 13 months.

We also keep a record of searches that succeed: the words typed (with any phone number or email address removed first), the filters, the listing opened next, and the time. Nothing in that record identifies you: no account, no IP address, no device. Business owners see totals only, never a single search, and a phrase shows up for them only once it has been typed three times. We keep the individual records for 90 days, the monthly totals for 12 months, and the yearly totals for as long as the listing exists, so an owner can compare one year with the last.

When a search finds nothing, you can ask us to look for you. We keep your question (up to 500 characters), your email address, the language of the page, and the search that led you there. We never publish your question, and only our team reads it.

Your question reaches our team only after you open the link in the email we send to confirm it. If you do not confirm within 7 days, we delete it.

We use your email only for this question: to send you up to three listings we found, or to tell you we could not find someone. If a week passes without an answer, we send you one note saying we are still looking. A question we have not answered after 30 days is closed.

We erase your email address 30 days after we answer or close your question. The question itself stays, without your address, so we know which businesses people are looking for, and we delete it 12 months after we answer or close it.

If you tell us you are interested in a newsletter, on the site or when you create an account or claim a listing, we keep your email address, the language of the page and where on the site you told us. We send one email to confirm it. If you do not confirm within 7 days, we delete your address. Once you confirm, we keep it until you ask us to drop it, and we send nothing else until the newsletter starts.

The confirmation email has a link to stop. When you use it, we delete your address and keep only a scrambled form of it, never the address itself, so we never add it again or write to it. We keep that scrambled form with no end date, because it is what keeps that promise.

If you tap "Use my location," your browser gives the site your position, which goes into the page address to search nearby. We do not store it, unless you then ask us to tell you when a business is listed near you (see below), in which case we keep that search, place included, to send the alert.

Maps, address search and map images come from Google Maps Platform. When you type an address or view a map, your browser sends what you typed and a map request to Google, under Google's privacy policy.

Listings you save are kept in your own browser, on your device, and nowhere else. When you open your saved list, the site asks our server only for the listings themselves. Clearing your browser's data removes them. The site also keeps a few small settings in your browser, such as whether you dismissed a tip.

If you vote in a family vote, your browser also keeps a random number made for this site, so it can show your vote and count it only once. We store only a scrambled form of that number with your vote, never the number itself. It does not tell us who you are, it is used for nothing else, and it is never shared with another site. Clearing your browser's data removes it.

If someone sends you a listing with "Send to family", the link can carry the first name they typed, so the page can show who sent it. Your browser reads the name from the link, and we do not keep it. The sender's browser remembers the name for their next send. When you open such a link, your browser adds the listing to a short "Sent to you" list: the listing's name and link only, never who sent it, and only the last eight. Clearing your browser's data removes it.

Anyone can start a family vote between two and five listings, without an account. We keep the listings chosen, the occasion if you pick one, the closing time (at most 7 days away) and the language of the page. Only people with the vote's link can open it.

Voting needs no account either. With each vote we keep the listing it went to, the scrambled number described under "Saved on this phone", and a scrambled form of your network address, never the address itself, so one network cannot vote more than about 20 times in one vote. We delete the votes 30 days after the vote closes. Only the total for each listing remains, so the link still shows the result. A vote never changes where a listing appears in search, its reviews, or anything else public about it.

If you ask us to email you the result, we keep your email address with the vote. It is never shown on the vote page. We use it once, to send the result, and erase it when that email is sent, or 30 days after the vote closes at the latest.

You can sign in with Google, with an email and password, or with a link or code we email you. We keep your email address and your sign-in method with our sign-in provider (Supabase), and a profile with the name you show on the site and, if you signed in with Google, the name and photo Google shares with us. You can change your display name on your account page.

Signing in sets cookies that keep you signed in. They are needed for the site to work and are not used for tracking. If you arrive through a business owner's referral link, we also set a cookie for 30 days that remembers which business sent you, used only to credit that referral.

We keep your rating, your review, your confirmation that you are not connected to the business, and the account that wrote it. Published reviews are public, with your display name and, if you signed in with Google, your Google photo. The owner of the business sees the same review and name, including in an email telling them a new review arrived, if they turned that email on. Your email address is never shown. You can delete your own review at any time.

Before a review appears, an automated check reads it for profanity, abusive language and personal data. The check runs on a third-party AI service, under terms that forbid keeping your words or training on them; it receives the review's text only, never your name or account. A review the check flags waits for a person on our team, who publishes it or removes it whole. We also translate the words of your review by AI, on the same AI service, and show the translation with your review, marked as translated by AI.

You can leave a voice note with your review instead of typing. Before you record, the page tells you how the note is kept. We note when you agreed.

A third-party speech service writes the note down for us. It may not keep the recording or train on it. We then translate the words by AI. The written words and the translation are shown with your review, marked as translated by AI. The automated check reads those words, not the recording.

We store the recording privately, never with the public photos. It is never published as audio: only our team can hear it, to check the review. While you record, you can play your own recording back before you send it. Nobody else can listen to it. We never use a recording to identify who is speaking.

We keep the recording as long as the review. Deleting your review deletes it. If we remove a review, we keep its recording 30 days, in case you ask us to look again. Then we delete it. A recording never added to a review is deleted within two days. What you allow us to do with your note is in our Terms, section 4.

We keep what you wrote and, if you were signed in, your account. When suggesting an edit you may also give a name and email so we can reply. Only our team sees reports and suggestions.

When you suggest a business, we ask for its name. You can add its city, and its phone, website or Instagram. Your own name and email are optional. We never publish them, and only our team sees your email.

If you give your email, we use it once, to tell you when the business is listed. We erase it when we send that note, or when we close the suggestion.

Before we list a suggested business, we contact it once. We use only contacts it published itself, such as on its website, its Google listing or its Instagram. The message goes by email or WhatsApp. It says the business was suggested, and how to claim the listing or say no. After that one message, we delete the contact details we used. If the business does not say no within 7 days, a person on our team checks the listing and may publish it. A business that says no is never listed, and we do not contact it again. Any business can ask us at any time to remove its listing and delete its details.

If you tick the box to let the business know, our message names you by your first name only. Without the tick, it does not name you. We never share your surname or your email.

If the details you gave belong to a private person, not a business, we contact no one and delete them.

If we reach out to a business about a listing, we keep a record of it: the business, who we reached, when and how, and what they answered, so we do not contact anyone twice and so a no is respected. Only our team can see it, and it never appears on the site.

If a business asks us not to contact it again, we keep that request, with the email address or phone number it covers, for as long as we need to honor it. Each time we contact a business we note when and how we did and what it answered, never the messages themselves; we remove each of those dated contact entries within 90 days.

A claim is made from your account. We keep your role at the business, how we can verify you (a link where you are named, or a short note), the heritage you state, and when you accepted the terms. To check the claim, our team also sees your account's email address, how you signed in, and when the account was made.

If you choose to verify with a business document, you upload a photo of it in the claim form. It can be your DBA, business license or a utility bill that shows the business name. You can black out anything else on it. We store it privately and never publish it. An automated check compares it with the listing's name and address. The check runs on a third-party AI service, which may not keep the document or train on it. A person on our team may look at it too. We delete it 7 days after we decide the claim, so you have time to ask us to look again.

When a claim is approved, we email you, and we also email the contact address the business publishes, so the business knows and can tell us if it was not them. We never send that alert to whoever suggested the listing.

If you manage a listing, the photos you upload are public, like the rest of the listing. We remove location and camera details from every photo before it is stored.

Daleel Arabi sells Pro and Featured, and Stripe processes the payment for us. Stripe takes the payment and holds your card details. We never see a card number.

We keep a record of each subscription for the listing, and of each message Stripe sends us about it, such as a payment, a renewal or a cancellation. We keep these records seven years after the listing's last payment, then delete them.

If your listing has Featured, we send you one email when the plan ends, and no other reminder.

On forms like the Connect 961 form we ask for your name and phone number, and optionally your email, business name and what you do. Only our team sees them. We use them to follow up with you about a listing, by text message, WhatsApp or email, as the form says.

Messages you asked for or that your account needs: sign-in links and codes, claim and listing decisions, and replies to what you sent us.

If you manage a listing: a monthly email with your listing's numbers, an email when new reviews arrive if you turn it on (it is off until you tick the box on your dashboard, and comes at most once a day), a note when a referral earns your listing a month of Pro, and, near the end of a founding Pro period, a note asking whether you want to keep it. The monthly email has an unsubscribe link that opens a page where one button unsubscribes you, and your mail app's own unsubscribe button, where it shows one, unsubscribes you at once; we keep a scrambled form of your address so we do not email it again. The review email has its own stop link, which opens a page where one button turns it off; your mail app's own unsubscribe button, where it shows one, turns it off at once.

If you asked to be told when a business is listed: one confirmation email, then one alert. Your address is erased if you do not confirm within 7 days. The alert has an unsubscribe link too.

If you asked us to ask around: one email to confirm your question, at most one note saying we are still looking, then our answer. If you asked for a family vote's result: one email with the result. If you said you want a newsletter: one email to confirm it, with a link to stop.

We do not send newsletters or advertising, and we never sell or rent email addresses.

The companies that run the site for us, each limited to that job: Supabase (database, sign-in, and storage for photos, voice notes and claim documents), Vercel (hosting and analytics), Resend (delivering email), Google (Google sign-in if you choose it, maps, and the Google Workspace mailbox behind hello@daleelarabi.com), Stripe (payments for Pro and Featured), a third-party AI service that runs the automated checks and makes translations, and a third-party speech service that writes voice notes down. When we message a suggested business on WhatsApp, WhatsApp carries that message. Our servers are in the United States.

Reviews, owner replies and listing details are public by their nature. We do not sell personal information, we do not share it for advertising, and we disclose it only if the law requires it or to protect the site and its users.

Accounts, reviews, claims and listings: for as long as they exist, until you ask us to delete them. Voice notes: as long as their review, 30 days after we remove a review, and at most two days if never added to one. Claim documents: 7 days after we decide the claim. The scrambled network records we use against spam: usually about an hour, and never longer than two days. Unconfirmed alert addresses: 7 days. Event form details: until they are no longer needed to follow up, or sooner if you ask. A suggested business's contact details: until our one message to it is sent. Your email on a suggestion: until we tell you the business is listed, or close the suggestion. Search records: 90 days for the individual records, 12 months for monthly totals, and yearly totals for as long as the listing exists. Billing records: seven years after the listing's last payment. Family votes: each vote until 30 days after the vote closes, then only the totals; an address for the result until the result is sent, and never more than 30 days after the vote closes. Ask-around questions: 7 days if never confirmed; your email until 30 days after we answer or close the question; the question, without your email, until 12 months after we answer or close it. Newsletter interest: 7 days if never confirmed, and otherwise until you ask us to drop it; the scrambled form of an address that asked us to stop, with no end date. Outreach records: each dated contact entry, at most 90 days; a request not to be contacted again, for as long as we need to honor it.

Write to hello@daleelarabi.com to see what we hold about you, correct it, or have your account and its data deleted. There is no delete button yet, so we do it by hand and confirm when it is done, within 30 days. Deleting an account also deletes its reviews. Owners can edit their listing from the dashboard and can have it removed on request, free and without discussion.

We are not currently a "business" under the California Consumer Privacy Act (we are below its thresholds), but we honor these requests for everyone. We do not respond to "Do Not Track" signals because we do not track visitors across other sites.

The site is for adults. We do not knowingly collect information from anyone under 16; if you think we have, tell us and we will delete it.

Access is limited to the people who run the site, every administrative account uses two-factor sign-in, and connections are encrypted.

If we change this policy we post the new version here with a new effective date, and email account holders if the change matters to them.

Questions: hello@daleelarabi.com.