Privacy Policy

We try to collect as little as we need to do one job well: showing a business where its leads come from. Our website tracking is designed to be privacy-first by default. It sets no cookies on your visitors and does not track people across other websites.

Local Wrangler is operated by Service Scalers. Throughout this policy, "we", "us", and "Local Wrangler" refer to the service and the company that runs it.

There are two relationships to keep separate:

• For our customers' account data (the people who sign up and log in), we decide how that data is handled, so we act as the controller.
• For the visitor and lead data that a customer collects through Local Wrangler on their own website, the customer decides why and how it is used. We handle it on their behalf, so for that data we act as a processor and the customer is the controller.

If you are a visitor to a business that uses Local Wrangler and you want your data accessed or deleted, contact that business first, since they control it.

When you create and use a Local Wrangler account, we collect:

• Your name, email address, and password credentials.
• Your organization details, team members you invite, and the roles you assign them.
• The websites and phone numbers you connect for tracking, and the integrations you connect.
• Billing information when you subscribe to a paid plan. Card details are handled by our payment provider; we do not store full card numbers.
• Basic usage and diagnostic information so the product works and stays secure, such as log records and error reports.

When you add the Local Wrangler tracking snippet to your site, it records the following about your visitors so you can attribute leads:

• Pages viewed, page titles, referrer, and time spent on a page.
• Scroll depth, clicks on contact links (phone, email, chat), and similar engagement signals.
• Traffic source and campaign details taken from the URL, such as UTM parameters and advertising click identifiers like gclid, fbclid, and msclkid.
• Approximate location (country, region, city). To work this out the IP address is shortened first (the last part is removed), so the lookup sees only a broad network range, not a full address. The full IP address is not stored with the visit.
• Browser, operating system, and device type.
• The details a visitor types into your forms, or shares on a tracked call or chat, such as name, email, phone, and message. This is the lead information you asked for.

Call recordings and chat transcripts are captured only for the channels you turn on, and they belong to your organization.

On visitors' sites: the tracking snippet sets no cookies. It does not use third-party cookies and does not read or write a cookie to identify a person. Instead, visits are grouped using a random first-party identifier kept in the visitor's own browser storage for up to 30 days, with a tab-only fallback when storage is blocked. That identifier is not shared across different websites and exists only to connect the pages of a visit and tell new visitors from returning ones. Because of this, most sites do not need a cookie banner specifically for Local Wrangler, though local rules vary and remain your responsibility to check.

On the Local Wrangler app: when you log in to your dashboard, we use strictly necessary cookies and similar browser storage to keep you signed in and remember your preferences. These are essential to running the app you chose to use.

Global Privacy Control: when a visitor's browser sends a Global Privacy Control (GPC) signal, the tracker treats it as an opt out of sharing for advertising. It stops capturing advertising click identifiers and does not forward lead data to a site's advertising tools, while still recording the basic, cookieless measurement the business needs.

• To provide the tracking, attribution, and reporting features you use.
• To create and secure your account, and to support your team.
• To process payments and manage subscriptions.
• To keep the service reliable and safe, including preventing abuse, spam, and fraud.
• To communicate with you about your account, important changes, and support requests.
• To improve the product, using aggregated or non-identifying information where possible.

We do not sell personal data, and we do not use one customer's visitor or lead data to serve another customer.

We share data only as needed to run the service and only with providers bound to protect it. These fall into a few categories:

• Cloud hosting and database providers that store and serve the platform.
• A payment provider that processes subscriptions and billing.
• Communication providers used to send transactional email, power tracked calls, and power tracked chat for the channels you enable.
• Providers that help us measure performance and diagnose errors so the product stays reliable.

We may also share data to comply with the law, enforce our terms, or protect the rights and safety of our users and the public. If the business changes hands, data may transfer as part of that transaction, and this policy will continue to apply to it.

We keep account data for as long as your account is active and as needed to provide the service. Visitor and lead data is kept for your organization so your historical reporting stays intact. If a Service Scalers connection is removed, your lead and tracking history is preserved, not deleted.

When you ask us to delete data, or when we no longer need it, we delete or de-identify it within a reasonable period, except where we must keep records to meet legal, accounting, or security obligations.

We protect data with measures appropriate to its sensitivity, including encryption in transit, access controls scoped to each organization, hashed credentials and secrets, and signature checks on the endpoints that receive tracking and webhook data. No system is perfectly secure, but we work to reduce risk and respond quickly to issues.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights over your Local Wrangler account data, contact us using the details below.

If you are a visitor to a business that uses Local Wrangler, that business controls your data; please contact them directly. Visitors can also clear the first-party identifier at any time by clearing their browser storage for that site. Visitors who turn on Global Privacy Control in their browser are automatically opted out of data sharing for advertising, as described above.

We may process and store data in countries other than where you live. When we do, we take steps to ensure it remains protected to a standard consistent with this policy and applicable law.

Local Wrangler is a business tool and is not directed to children. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will remove it.

We may update this policy as the product and the law evolve. When we make material changes, we will update the date at the top and, where appropriate, notify you. Continuing to use Local Wrangler after a change means you accept the updated policy.

Questions about this policy or your data can be raised through your Local Wrangler dashboard or your account team. For contractual terms on how we process data on your behalf, ask us about a data processing agreement.