Privacy Policy | Lead Oracle AI

1. Introduction

Lead Oracle AI ("we," "us," or "our") provides an AI-powered analytics tool integrating with Google Search Console, Google Business Profile (GBP), Facebook Business Manager (for Instagram and Facebook posts and metrics), and your website to help local businesses and agencies analyze search performance, social media performance, and visibility. This Privacy Policy describes how we collect, use, share, and protect information when you ("you" or "User") use our services, including our OAuth and API integrations with Google, Meta (Facebook/Instagram), and data from your website.

2. Information We Collect

2.1 Google Search Console Data

When you connect Google Search Console, we may access and temporarily store: verified websites and property lists, search performance metrics (queries, clicks, impressions, average position), sitemap information, and crawl/indexing data.

2.2 Google Business Profile (GBP) Data

When you connect your Google Business Profile, we may access and use: business name, address, and contact details; profile and listing information; insights and performance data (views, searches, actions); reviews and Q&A data; and posting or update history, to provide local visibility analytics and recommendations.

2.3 Facebook Business Manager, Instagram & Facebook Data

When you or your agency connects Facebook Business Manager, we may access and use: Page and Instagram account information; content and metadata of posts created or published through the Service or existing on connected Pages; metrics and analytics for those posts and Pages (e.g., reach, engagement, impressions); and Business Manager asset and permission data, to provide social media management, posting, and performance reporting.

2.4 Website Data

We may collect or process data related to your website(s), including domain and URL information, site structure or sitemap data, and performance or indexing data provided through our integrations or that you submit to us for analysis.

2.5 Authentication Data

Your Google account's unique identifier and OAuth tokens to securely retrieve Search Console and Google Business Profile data.

2.6 Automatically Collected Data

Includes IP address, browser and device metadata, and usage logs.

2.7 Voluntary Information

Any additional details you provide (e.g., support tickets or feedback forms).

2.8 SMS/Text Message Data

If you opt in to receive SMS or text messages from us, we collect your mobile phone number and consent preferences. We use this information solely to send you service-related notifications, updates, and promotional messages you have agreed to receive. Your phone number will not be shared with third parties for their marketing purposes. You may opt in to SMS communications by providing your phone number and checking the consent box on our forms. Message frequency varies based on your account activity and preferences.

3. Chrome Extension ("Lead Oracle AI: GMB & GBP Audit for Maps")

This section describes our Chrome browser extension, "Lead Oracle AI: GMB & GBP Audit for Maps." The extension displays a 0–100 Google Business Profile health score over Google Maps and Google Search local results, and lets you generate audit reports and save businesses as sales prospects. The extension uses the same Lead Oracle AI account system as our web application; no separate account is created.

3.1 Business Listing Information Read From Pages

The extension's content script runs only on Google Maps (google.com/maps*) and Google Search (google.com/search*) pages. From business listings already visible on those pages, it reads: business name, address, category, star rating, review count, Google Place ID, website URL, and derived signals such as photo count, whether a phone number, opening hours, or description are present, and whether the business is currently open. This information is sent to the Lead Oracle AI API to compute the health score and generate audits. It is public business information about third parties, not information about you.

3.2 Account Data

The extension's own sign-up and sign-in form collects your email address, first and last name, and a password. You may also sign in with Google instead.

3.3 Authentication Token

When you sign in, we issue an authentication token (a JWT) valid for 30 days. It is stored locally in your browser and refreshed by a weekly background check so that you are not signed out unexpectedly.

3.4 Anonymous Install Identifier

On installation, the extension generates a random identifier (loa_install_id) and sends it to our API as an X-LOA-Install-Id header. It is used solely to apply our free monthly usage limit before an account exists, and is merged into your account's usage history if you later sign up. It is not tied to your identity.

3.5 Product Analytics

The extension records three click events only: running a Local Scan, sharing a report, and clicking an upgrade link. We do not perform page-level or behavioural tracking in the extension.

3.6 Data Stored Locally in Your Browser

The following is stored in chrome.storage.local on your device and is never synced to your Google account: your authentication token, the install identifier, a short-lived score cache, your saved-prospect count, and your Local Scan history (up to 25 past scans). Local Scan history is held on your device only and is not uploaded to us.

3.7 What the Extension Does Not Collect

Your browsing history, or any activity on sites other than the two Google URL patterns described in section 3.1
Page content unrelated to business listings
Your location, GPS coordinates, or device location
Payment or card details. Upgrades open a Stripe checkout session; card data goes directly to Stripe and never passes through the extension

3.8 Sharing of Extension Data

We do not sell or transfer data collected by the extension to third parties. We share it only with the service providers needed to operate the extension: Stripe for payment processing, and our hosting and AI providers, which process business listing and public review text server-side to compute scores and generate suggested review replies.

3.9 Retention and Deletion of Extension Data

Uninstalling the extension removes all locally stored extension data from your browser. Data already associated with your account, such as saved prospects and generated audits, is retained under our standard account retention practices described in section 7 and can be deleted on request. For data requests relating to the extension, contact norman@leadoracle.ai.

4. Use of Your Information

We use your data to provide analytics for Google Search Console, Google Business Profile, and your website; to enable creation and management of Instagram and Facebook posts and to pull and display metrics for connected Pages and posts; to manage OAuth and API tokens; to improve user experience; to maintain operations; and to communicate updates or support.

5. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience, analyze usage patterns, and deliver personalized content.

Types of cookies we use:

Essential cookies: Required for basic site functionality and security
Analytics cookies: Help us understand how visitors interact with our site
Functional cookies: Remember your preferences and settings
Marketing cookies: Used to deliver relevant advertisements

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect site functionality.

When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email. We (or service providers on our behalf) may then send communications and marketing to these email addresses.

You may opt out of this advertising by visiting https://app.retention.com/optout. If applicable, you may also opt out of the collection of your personal data in compliance with GDPR by visiting https://www.rb2b.com/rb2b-gdpr-opt-out.

6. Data Sharing & Disclosure

We do not sell or rent your data. We may share it with service providers, comply with legal obligations, or protect rights and safety.

Mobile Information Sharing: We do not share, sell, or rent your mobile phone number or SMS opt-in data with third parties for their marketing purposes. Mobile information is only used to deliver the SMS communications you have consented to receive and to provide customer support.

7. Data Retention

OAuth tokens are kept while the service is used. Cached data may be retained up to 90 days; logs up to 12 months.

8. Data Security

We use TLS encryption, secure storage, access controls, and routine security assessments.

9. Your Rights and Choices

You may revoke access via your Google Account settings or Facebook Business Manager (Meta) settings, request data deletion, and opt out of non-essential communications.

10. International Data Transfers

Data may be processed in the U.S. with safeguards in place to comply with international data protection laws.

11. Children

Our service is for users 18 and older. We do not knowingly collect data from children under 16.

12. Changes to This Policy

We may update this policy and notify you via email or in-app. Review the "Last updated" date to track changes.

13. Contact Us

If you have questions or requests, contact us:

Lead Oracle AI
Email: norman@leadoracle.ai