Privacy Policy
Last Updated: May 5, 2025
1. Introduction
9x Innovations LLC (“9x Innovations,” “we,” “our,” or “us”) is committed to protecting the privacy of individuals who visit our websites, use our GMB (Google Business Profile, formerly Google My Business) management software-as-a-service platform, and associated services (collectively, the “Service”). This Privacy Policy (“Policy”) describes how we collect, use, disclose, and protect your Personal Information and your rights in relation to this information.
By accessing or using our Service, you signify your understanding of and agreement to the terms of this Policy. If you do not agree with this Policy, please do not use our Service.
This Policy should be read in conjunction with our Terms and Conditions of Service (“Terms”).
2. Information We Collect
We collect information to provide and improve our Service. The types of information we collect depend on how you interact with us.
2.1. Information You Provide Directly:
- Account Information: When you register for an account, we collect information such as your name, business/practice name, email address, phone number, physical address (if provided for billing/service), and user account credentials (username and password).
- Payment Information: If you subscribe to paid services, we (or our third-party payment processors) collect payment information (e.g., credit card details, billing address).
- Communication Information: If you contact us directly (e.g., for support, feedback), we may collect your name, email address, phone number, the contents of your message, and any other information you choose to provide.
- GMB Profile Information (via Google API): When you connect your Google Business Profile(s) to our Service using Google OAuth, we access and store information from your GMB account(s) on your behalf and as per your authorization. This may include: Business name, address, phone number, website, categories, attributes, description, operating hours, photos, videos, posts, reviews, Q&A, booking information, product/service listings, GMB Insights, and other user-generated content.
- Communication Preferences: Your preferences for receiving marketing communications from us.
2.2. Information Collected Automatically:
- Usage Data: Information about how you use our Service, such as features accessed, pages viewed, time spent on pages, clicks, and other interaction data.
- Device and Connection Information: IP address, browser type and version, operating system, device identifiers, time zone setting, and information about your internet connection.
- Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies. Please see our “Cookies and Tracking Technologies” section (Section 5) for more details.
- Location Data: We may collect imprecise location data (e.g., derived from your IP address). We will request explicit consent for precise location data if needed.
2.3. Information from Third Parties:
- Google: As described above, we receive information from your GMB account(s) when you authorize access via Google OAuth.
- Social Media Platforms: If you interact with our social media pages, we may collect information you make public or provide to us.
- Business Partners & Marketing Partners: We may receive information from partners with whom we collaborate, provided they have a lawful basis to share such information.
- Public Databases: We may collect information from publicly available sources.
3. How We Use Your Information
We use your Personal Information for the following purposes:
3.1. To Provide and Maintain the Service:
- Create and manage your account.
- Process your subscriptions and payments.
- Enable you to access and use the GMB management features.
- Provide customer support and respond to your inquiries.
- Send you service-related communications.
3.2. To Improve and Personalize the Service:
- Analyze usage patterns to improve functionality and user experience.
- Personalize your experience with the Service.
- Develop new features and services.
3.3. For Marketing and Advertising (Our Own Services):
- Send you promotional communications, newsletters, and offers about our products and services, where permitted by law.
- Measure the effectiveness of our marketing campaigns.
3.4. For Legal, Safety, and Security Purposes:
- Comply with legal obligations, court orders, or other legal processes.
- Protect the rights, property, or safety of 9x Innovations, our users, or others.
- Prevent, detect, and investigate fraud, security breaches, and other illegal activities.
- Enforce our Terms and Conditions.
3.5. Use of Information Obtained from Google APIs:
Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- Information obtained from Google APIs will only be used to provide or improve user-facing features.
- We will not use Google API data for serving advertisements.
- We will not transfer Google API data to others unless necessary to provide the service, comply with law, or as part of a merger/acquisition.
- We will not allow humans to read Google API data unless we have your affirmative agreement, for security purposes, to comply with law, or for aggregated and anonymized internal operations.
4. Legal Basis for Processing (for EEA/UK Users)
If you are in the European Economic Area (EEA) or the UK, we process your Personal Information based on the following legal grounds: Contract Performance, Legal Obligations, Legitimate Interests, and Consent.
6. Information Sharing and Disclosure
We do not sell your Personal Information. We may share your Personal Information with: Service Providers, Google, Advertising and Analytics Partners (for our own marketing), Legal Authorities, and in the case of Business Transfers. We may also share information with your explicit consent.
7. Data Retention
We retain your Personal Information for as long as necessary to fulfill the purposes for which it was collected, including to provide the Service, comply with legal obligations, and for our legitimate business purposes. When your account is terminated, your data will be deleted or anonymized in accordance with our Terms, typically within 30 days for active data and up to 90 days for backups.
8. Your Privacy Rights and Choices
Depending on your location, you may have the right to Access, Correct, Delete, or Port your data, as well as Restrict or Object to processing and Withdraw Consent. You can opt-out of marketing communications by following the unsubscribe link in emails. To exercise these rights, please contact us at hello@9xlocal.com.
9. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the Right to Know, Delete, and Correct your Personal Information. We do not “sell” or “share” your Personal Information for cross-context behavioral advertising. You also have the Right to Limit Use of Sensitive Personal Information and the Right to Non-Discrimination. To exercise these rights, contact us at hello@9xlocal.com.
10. Data Security
We implement reasonable and appropriate security measures, including encryption, access controls, and regular security assessments, to protect your Personal Information. However, no method is 100% secure, and we cannot guarantee absolute security.
11. International Data Transfers
Your Personal Information may be transferred to, stored, and processed in countries other than your own, including the United States. We will implement appropriate safeguards, such as Standard Contractual Clauses (SCCs), for transfers from the EEA, UK, or Switzerland.
12. Children’s Privacy
Our Service is not directed to children under the age of 13. We do not knowingly collect Personal Information from children. If you believe your child has provided us with Personal Information, please contact us immediately.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Policy on our website or through other communication channels. Your continued use of the Service after any changes constitutes your acceptance of the new Policy.
14. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us at:
9x Innovations LLC
Email: hello@9xlocal.com
Data Processing Addendum (DPA)
This Data Processing Addendum (“DPA”) forms part of the Agreement between 9x Innovations LLC (“Processor”) and the Customer (“Controller”).
1. Definitions
Terms like “Applicable Data Protection Law,” “Controller,” “Processor,” “Personal Data,” etc., shall have the meanings ascribed to them in laws like GDPR. “Customer Data” refers to Personal Data Processed on behalf of the Controller.
2. Roles and Responsibilities
The Controller is the controller of Customer Data, and 9x Innovations is the Processor. We will process data only on the Controller's lawful instructions.
3. Details of Processing
- Subject Matter: Providing GMB management Services.
- Duration: For the term of the Agreement.
- Nature and Purpose: To enable Controller to manage its GMB profile(s).
- Types of Personal Data: GMB Profile Information and Controller's user contact details.
- Categories of Data Subjects: Controller’s customers, employees, and users.
4. Processor’s Obligations
We commit to confidentiality, maintaining security measures, providing general authorization for sub-processors (listed in Annex 1), assisting with Data Subject Rights requests, notifying of Personal Data Breaches, assisting with DPIAs, deleting/returning data upon termination, and facilitating audits.
5. Controller’s Obligations
Controller shall comply with all its obligations under Applicable Data Protection Law and provide lawful instructions.
6. International Data Transfers
Data transfers will be governed by appropriate safeguards like the SCCs.
Annex 1: List of Sub-processors
This list is current as of the “Last Updated” date of this policy.
- Payment Processors: Stripe, Inc.; PayPal Holdings, Inc.
- Analytics Providers: Clicky (Roxr Software, Ltd.); Google LLC (Google Analytics).
- Email Delivery Provider: Mailgun Technologies, Inc.
- Cloud Infrastructure Hosting: Amazon Web Services, Inc. (AWS), Google Cloud Platform (GCP), Microsoft Corporation (Azure), DigitalOcean, LLC. (Location: US)