Privacy Policy

Altitude is a software platform owned and operated by Haute Locals, LLC, a California limited liability company doing business as The Purpose Pilot ("Altitude," "we," "us," "our"). We are a marketing agency that sells SEO and paid-media services to behavioral healthcare providers , treatment centers, mental health clinics, and licensed mental health professionals (therapists, psychologists, psychiatrists in private practice). Altitude is the platform our agency staff uses to deliver those services and where each client logs in to a portal showing their account, performance, and reports. The platform is available at altitude.thepurposepilot.com.

This Privacy Policy describes what information we collect, how we use it, who we share it with, and your rights. If anything is unclear, contact us at hello@hautelocals.com.

We collect three categories of information:

1. Account information

• Name, email address, and role (agency admin, agency staff, client portal user)
• Authentication is handled by Supabase Auth; we do not store plaintext passwords
• Profile picture or company logo, if uploaded
• Billing information collected via Stripe (we do not store full payment card numbers)

2. Client business information

• Business name, website URL, location, program type, and other onboarding metadata
• SEO audit findings, pillar scores, keyword rankings, content drafts, approval history
• Connections you authorize to Google Search Console, Google Analytics, Google Business Profile, Google Ads, and Meta (Facebook/Instagram) Marketing API
• Performance data retrieved from those connected services (impressions, clicks, conversions, ad spend, ranking positions, traffic, etc.)

3. Usage information

• Technical metadata: IP address, browser, device type, pages visited, timestamps
• Server logs and error reports used to diagnose issues

• Operate the platform, authenticate users, and authorize role-based access
• Run SEO audits, generate content, and produce AI-powered recommendations using Anthropic Claude (your business data is processed by Anthropic under their commercial terms; see "Third parties" below)
• Pull and analyze paid media performance from Google Ads and Meta Marketing APIs you connect, in order to generate optimization recommendations
• Send transactional emails (account, audit, approval, billing) via Resend
• Bill, collect payments, and prevent fraud via Stripe
• Investigate security incidents and improve the service

We do not use your data to train or fine-tune machine-learning models. We do not sell your data, and we do not share it for advertising or marketing purposes outside the services you have asked us to perform.

When you connect your Google account via OAuth, we may request access to: Google Search Console (read-only site performance), Google Analytics (read and edit), Google Business Profile (manage), and Google Ads (read campaign data, and only with your further opt-in, write campaign changes).

Altitude's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements:

• We use Google user data only to provide and improve user-facing features visible and prominent in our UI (audits, performance dashboards, optimizations)
• We do not use Google user data for advertising or to train or improve generalized AI models
• We do not sell or transfer Google user data to third parties except as needed to provide or improve the service, comply with applicable law, or as part of a merger, acquisition, or asset sale (with notice to you)
• We do not allow humans to read Google user data except (a) with your explicit consent, (b) for security purposes, (c) to comply with applicable law, or (d) where the data is anonymized and aggregated for internal operations

You can revoke our access at any time through your Google Account permissions.

When you connect your Meta Business or Ad Account, we request access to: read campaign performance, manage ad accounts, and read business assets, only as needed to fetch the performance data you've asked us to analyze. We do not post on your behalf without explicit per-action approval, and we do not access personal Facebook/Instagram profile content.

You can revoke our access at any time through your Meta Business Settings under "Connected Apps."

We share data with the following service providers, whose service agreements include data-protection commitments:

• Supabase (PostgreSQL database, authentication, file storage) , hosts your account and business data, encrypted at rest
• Vercel, application hosting and edge delivery
• Anthropic, Claude AI processes your audit, content, and ad performance data to generate recommendations; Anthropic does not train on your data under their commercial terms
• Google, APIs you connect (Search Console, Analytics, Business Profile, Ads); we receive only the data the OAuth scope you grant authorizes
• Meta, Marketing API for connected ad accounts
• Stripe, billing and payment processing; subject to Stripe's privacy policy and PCI-DSS compliance
• Resend, transactional email delivery

We retain account and business data for as long as your subscription is active. After cancellation, we keep your data for at least 30 days to allow re-activation. After that, you may request deletion of your account and associated data by emailing us; we honor verified deletion requests within 30 days, except where retention is required for legal, accounting, or fraud-prevention purposes (typically up to 7 years for billing records).

Audit and performance history is retained for the life of the account. Server logs are retained according to our hosting providers' default retention policies.

You can request access, correction, export, or deletion of your personal information at any time by emailing hello@hautelocals.com. If you are a resident of California, the EU, the UK, or another jurisdiction with data-protection laws, you have additional rights including the right to object to or restrict processing and to lodge a complaint with your data-protection authority. We honor verified requests within 30 days.

To revoke OAuth access without deleting your account, use the third-party permission pages linked above. To delete your entire account and all associated data, email us at hello@hautelocals.com from the email address on your account.

We use industry-standard safeguards including TLS encryption in transit, encryption at rest for the primary database, role-based access controls, and least-privilege service credentials. No system is perfectly secure; if we become aware of a breach affecting your data, we will notify you and any required authorities within the timeframes required by applicable law.

Altitude is a B2B service intended for use by adult professionals at marketing agencies and the businesses they serve. We do not knowingly collect information from children under 13 (or 16 in jurisdictions where that is the threshold). If you believe we have received such information, contact us and we will delete it.

We are based in the United States and our infrastructure is hosted in the United States. By using Altitude, you consent to the transfer and processing of your information in the United States, which may have different data-protection laws than your country of residence.

We may update this Privacy Policy from time to time. Material changes will be announced via email and/or an in-app notice at least 14 days before they take effect. Continued use of the service after the effective date constitutes acceptance of the revised policy.

Haute Locals, LLC
d/b/a The Purpose Pilot, operator of the Altitude platform
hello@hautelocals.com