Privacy Policy

This Privacy Policy applies to:

• Visitors who browse ProNearby without an account.
• Business owners who claim or list their business on our platform.
• Users who create an account, subscribe to our newsletter, or submit a lead (inquiry) to a business.

Information you provide directly

• Account registration: full name, email address.
• Business listings: business name, address, city, state or province, country, phone number, website, social media links, category, service area, description, photos, products, certifications, and lab results.
• Lead / contact forms: your name, email, phone number, and message when you contact a business through our platform.
• Newsletter subscription: email address.
• Suggest a business: any information you voluntarily submit about a business.

Information collected automatically

• Search events: search queries, geographic filters, category filters, and the number of results returned — used to improve the directory.
• Listing views: which business profiles are viewed, collected in aggregate. Your actual IP address is one-way hashed before storage and is never recoverable.
• Usage analytics: pages visited, session duration, and general device type, collected via Google Analytics 4 (anonymised).
• Cookies: session cookies for authentication, and analytics cookies placed by Google Analytics.

Payment information

Subscription payments are processed by Stripe. We never see or store your full credit card number — Stripe handles all payment data under their own PCI-DSS compliant systems. We retain only a Stripe customer ID and subscription status.

• To operate and improve the ProNearby directory and its search features.
• To display business listings publicly on the platform.
• To forward leads (inquiries) from users to the relevant business owner via email.
• To send transactional emails: email verification, claim confirmations, subscription receipts.
• To send subscribers our newsletter (with your explicit opt-in consent).
• To generate anonymised platform analytics and industry trends.
• To communicate important service updates, security notices, or policy changes.
• To prevent fraud and abuse of the platform.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

We process personal information under the following bases:

• Consent: newsletter subscriptions, analytics cookies.
• Contract: account registration, business listing management, payment processing.
• Legitimate interests: fraud prevention, platform security, anonymised analytics to improve search results.
• Legal obligation: retaining transaction records as required by applicable tax law.

We share personal information only where necessary:

• Supabase: our database and authentication provider.
• Resend: our transactional email provider, used to deliver verification, claim confirmation, lead notification, and newsletter emails.
• Stripe: our payment processor for subscription billing.
• Google Analytics: anonymised usage statistics. IP addresses are anonymised before being sent to Google.
• Anthropic (Claude AI): used to power the ProBot chatbot. No personal identifying information is included in AI prompts.
• Law enforcement: where required by law or valid legal process.

All third-party providers are bound by data processing agreements and are prohibited from using your data for their own purposes.

• Account data: retained while your account is active. Deleted within 30 days of a verified account deletion request.
• Business listings: retained while active on the platform. Business owners may request removal at any time.
• Leads / inquiries: retained for 2 years to support business owner records, then deleted.
• Search event logs: retained for 13 months to support analytics, then deleted.
• Newsletter subscriber records: retained until unsubscribe is requested.
• Payment records: retained for 7 years as required by applicable tax regulations.

We use the following cookies:

• Strictly necessary: session cookies that keep you logged in. These cannot be disabled without breaking core functionality.
• Analytics: Google Analytics cookies (GA4) that collect anonymised usage data. You may opt out via your browser settings.

We do not use advertising or tracking cookies.

You have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your personal information (subject to legal retention requirements).
• Withdraw consent for newsletter communications at any time via the unsubscribe link in any email.
• Request your business listing be updated or removed.

To exercise any of these rights, contact us at hello@pronearby.online. We will respond within 30 days.

• All data is transmitted over HTTPS / TLS encryption.
• Passwords are hashed using industry-standard algorithms — we never store plaintext passwords.
• IP addresses are one-way hashed before storage — the original IP cannot be recovered.
• Database access is restricted via row-level security (RLS) policies — users can only access their own data.
• Administrative access requires multi-factor authentication.

ProNearby is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. For material changes, we will notify registered users by email. Continued use of ProNearby after the effective date constitutes acceptance of the updated policy.

For any privacy-related questions, requests, or concerns, please contact us: