Effective date: October 6, 2026
Privacy Policy
NearLumo (“NearLumo”, “we”) runs a Google visibility check for local shops. Operated by NearLumo. We will add the registered legal entity and mailing address here before we submit Google or payment reviews.
Questions: [email protected]. This page is the same Privacy Policy linked from our homepage and from the Google sign-in screen.
What we collect
| Source | Data | Why | Now |
|---|---|---|---|
| Your account | Email; optional password hash; optional Google sign-in id and email | Save reports, claim a shop, sign in | Yes |
| What you send | A Google place id only. We do not treat a rating or map pin from your browser as fact | Start a check | Yes |
| Google Places | Public shop name, address, category, rating, review count, website, photo refs | Find the shop and build the report | Yes |
| Google Maps results | Which shops appear near a spot, and a rank when it exists | Color the nearby map, name shops ahead of you, score visibility | Yes |
| Public listing and reviews | Public profile text, services, and how many new reviews in 90 days | Fill in the free report after the map | Yes |
| Your public website | Title, main heading, and whether it names the same services | After you save, show if the site names those searches | Yes |
| Payment | Stripe customer and subscription ids. Card numbers stay at Stripe | Watch for a shop | Yes |
| Technical | IP for daily limits and repeat-check matching; market and session cookies; coarse browser, operating system, and device type; product events | Safety, limits, improving the check, and showing our staff evidence of repeat interest or suspected automation | Yes |
| Google sign-in | Basic OpenID email and subject id | Sign in | Yes |
| Google Business Profile or Search Console | Private inbox, official photos you only see when signed in as the owner, listing-field write-back, Search Console | Not used | No. We do not connect a Google listing today. We do not read Search Console. We do not edit name, category, hours, attributes, or website. |
| NearLumo Reach (optional, later) | If you pay Reach and grant access: the Google location you pick, Facebook Page, Instagram professional account; post text and images we create; star reviews or public comments we reply to | Publish Local Posts and social posts; reply to simple reviews or comments. Never required to run a check | No. Connect is not on this site today. If we turn it on, we will keep this page current and ask you to authorize then. |
| A check invite we already have a reason to send | An email you already gave us (account, save, claim, or a form). Not an address taken from Google or Maps | Invite you to check if nearby customers can find your shop | Staff only. Commercial check invites use a sending domain different from sign-in mail |
Google user data
When you use Continue with Google, we receive the email and account id needed to sign you in. When you check a shop, we read public Places and Maps data for that shop and nearby results. We use that data only to show your report, remember the shop you claimed, and (if you pay) check that shop again.
- We do not sell Google user data to data brokers.
- We do not use Maps or Places results to build ads about you that are unrelated to NearLumo.
- We do not read or change a shop’s own Google listing unless you later grant that access and this page says so.
- If you later connect Reach, we still will not edit listing fields (name, category, hours, attributes, website). We may create Local Posts and review replies you authorized.
- Use of Google user data follows the Google API Services User Data Policy, including Limited Use.
NearLumo Reach
Reach is a paid add-on we are preparing. It is not sold on this site today, and we do not show a Connect button. A visibility check never needs it. If you later buy Reach and connect, we will use only the Google Business Profile, Facebook Page, and Instagram professional account you pick.
- We may create Google Local Posts and posts on that Page or Instagram account, including images we generate or compose from photos you already published.
- We may reply to star reviews (Google) and top-level public comments (Facebook or Instagram) that look like simple thanks. Complaints, prices, medical claims, and harmful comments are not sent unless you later choose to send a draft.
- We do not send private DMs, run ads, or copy city-page news articles onto your listing.
- You can disconnect in the product (once Connect exists) or email us. We then stop new posts and replies, revoke tokens when the network allows it, and delete or anonymize cached review text and tokens.
Business check invites
If you already wrote to us or created an account, our staff may send a short commercial check invite. That email asks you to see if nearby customers can find your shop on Google. It is not a Watch sales letter. Sign-in and password mail use a different sending domain.
- The footer includes our mailing address and a one-click unsubscribe link.
- A tiny open image may load so we can tell if the invite was displayed. Mail apps often prefetch it, so we do not treat opens as a conversion.
- If you open the invite, we may set an nl_outreach cookie for about 30 days so a later check on that shop can be tied to the invite. It is not an advertising cookie.
- Unsubscribe always works, even if the link is old. We will not email that inbox again.
For shops that have not written to us, staff may use a public contact inbox printed on that shop’s own website. We only read the same-site public pages the listing already points to (home, contact, about, or book). We do not take an inbox from Google Maps, Facebook, or Instagram, and we do not invent an address such as hello@domain.
- If that site’s robots file disallows the page, we stop.
- The shop report never says we found the inbox.
Cookies
We use a session cookie to keep you signed in, a market cookie so the country badge stays put, an nl_outreach cookie after a check invite, and cookies needed to keep the site safe. We use low-detail browser information already sent with a check; we do not use canvas, font, or screen fingerprinting. We do not run advertising pixels. If visitor counting is on, we load Google Analytics, Plausible, or another visitor-count snippet saved in our Console. That snippet can set its own cookies. It is not an advertising pixel we run ourselves.
How long we keep data
You can sign out on your account page. To delete the account, email us from the same inbox. After deletion, the session ends. If you had connected Reach, we stop new posts and treat tokens and cached review text as described under NearLumo Reach. A check's original IP is encrypted and removed after 30 days. Its masked IP, protected visitor match, coarse browser details, and result are removed after 180 days. We do not store the raw User-Agent, full referrer, or precise location. We may keep other limited records for security, billing disputes, or the law. Cost logs do not store API keys or raw vendor payloads.
Children
NearLumo is for shop owners and staff, not for children under 13.
Changes
If we change how we use Google user data, we will update the date at the top of this page. The homepage and Google sign-in screen will keep linking to this same URL.