Skip to content

Privacy

What we store and why

LocalSchema keeps only what it needs to build, host and check structured data for your businesses. Last updated 31 October 2026.

Your account

When you sign up we store your email address and, if you sign in with Google, the name Google shares with us. We use them to sign you in and to show who is signed in. Your sign-in session is kept in your browser's local storage.

Your workspace

The businesses, locations, clients, report settings and health-check results you create are stored so the builder, hosted embeds and reports work. API keys are stored only as a one-way hash; we show the key once when you create it.

You can remove all of it yourself with Delete workspace data in Settings, which also revokes your API keys.

Billing

Payments are handled by Stripe. Card details go straight to Stripe and never reach LocalSchema; we store your plan, its status and renewal dates, and the Stripe customer reference that links them.

Pro waitlist

If you join the Pro waitlist we store your email address, the plan you'd like (monthly or yearly), the page you joined from, the time you joined, your account if you were signed in, and the exact consent you gave: “Email me when LocalSchema Pro opens. I can ask to be removed at any time.”

We use it only to email you when Pro opens. To leave the list, sign in with the same address and choose Leave the waitlist on the Billing page, or reply to the email we send.

Agent and API usage counts

For our MCP server and public API we keep daily totals: how often each tool, endpoint or discovery file was used, whether the call sent an API key, and whether it succeeded. We also count the client name and version that AI tools announce and a shortened user agent, with any email addresses, IP addresses, ids and query strings removed first.

We don't store IP addresses, API keys, tool inputs or results with these counts. They're kept for 400 days and then deleted automatically.

Page checks and limits

When you check a page with the free checker, the API or an AI agent, we fetch that page to read its structured data. To keep the free tools fair, we count requests per visitor and per website in short-lived counters keyed by a one-way hash, never the address in clear, and clear them within a day.

Emails

Alert and weekly summary emails you switch on in Settings aren't being sent yet; the setting is saved for when they start. You'll be able to switch them off at any time.

See also the developer docs for what the API and MCP server do with the data you send them.