Privacy Policy – Local SEO Software by GMBapi.com B.V.

By using our website, you acknowledge that you have read and understood this Privacy Policy. Where we rely on consent as a legal basis for processing, we will obtain your consent separately through clear, affirmative action (such as ticking a box or accepting our cookie banner). Continued use of the website does not by itself constitute consent to data processing under the GDPR.

The personal information that you are asked to provide, and the reasons why you are asked to provide it, will be made clear to you at the point we ask you to provide your personal information.

If you contact us directly, we may receive additional information about you such as your name, email address, phone number, the contents of the message and/or attachments you may send us, and any other information you may choose to provide.

When you register for an Account, we may ask for your contact information, including items such as name, company name, address, email address, and telephone number.

We use the information we collect in various ways, including to:

• Provide, operate, and maintain our website
• Improve, personalize, and expand our website
• Understand and analyze how you use our website
• Develop new products, services, features, and functionality
• Communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the website, and for marketing and promotional purposes
• Send you emails
• Find and prevent fraud
• Comply with legal obligations

We process your personal data on the following legal bases under Article 6 GDPR:

• Performance of a contract (Art. 6(1)(b)): where processing is necessary to provide you with the Service you have subscribed to.
• Legitimate interests (Art. 6(1)(f)): for fraud prevention, security, website analytics, and service improvement, where these interests are not overridden by your rights.
• Consent (Art. 6(1)(a)): for marketing communications and non-essential cookies, which you may withdraw at any time.
• Legal obligation (Art. 6(1)(c)): where processing is required by law.

We retain your personal data only for as long as necessary for the purposes set out in this policy:

• Account data: retained for the duration of your subscription and for 3 years after termination, to comply with tax and contractual obligations.
• Contact/enquiry data: retained for 2 years from the date of the enquiry.
• Website analytics data: retained for up to 14 months, in accordance with Google Analytics defaults.
• Cookie consent records: retained for 1 year from the date of consent.

After the applicable retention period, data is securely deleted or anonymised.

GMBapi.com follows a standard procedure of using log files. These files log visitors when they visit websites. All hosting companies do this and a part of hosting services' analytics. The information collected by log files include internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages, and possibly the number of clicks. These are not linked to any information that is personally identifiable. The purpose of the information is for analyzing trends, administering the site, tracking users' movement on the website, and gathering demographic information.

Like any other website, GMBapi.com uses cookies. These cookies are used to store information including visitors' preferences, and the pages on the website that the visitor accessed or visited. The information is used to optimize the users' experience by customizing our web page content based on visitors' browser type and/or other information.

For more information, please see our Cookie Policy.

You may consult this list to find the Privacy Policy for each of the advertising partners of GMBapi.com. Third-party ad servers or ad networks use technologies like cookies, JavaScript, or Web Beacons that are used in their respective advertisements and links that appear on GMBapi.com, which are sent directly to users' browser. They automatically receive your IP address when this occurs. These technologies are used to measure the effectiveness of their advertising campaigns and/or to personalize the advertising content that you see on websites that you visit. Note that GMBapi.com has no access to or control over these cookies that are used by third-party advertisers.

GMBapi.com's Privacy Policy does not apply to other advertisers or websites. We advise you to consult the respective Privacy Policies of these third-party ad servers for more detailed information. You can choose to disable cookies through your individual browser options.

See our Cookie Policy for a full list of third-party cookies and instructions for disabling them.

We use the following key third-party processors to deliver our service. Where these processors are based outside the European Economic Area (EEA), we ensure transfers are protected under one of the following mechanisms: the EU–US Data Privacy Framework (DPF) adequacy decision (July 2023), or the EU Standard Contractual Clauses (SCCs, 2021).

• Google Cloud Platform (Google LLC, The Netherlands) – cloud hosting and infrastructure for the GMBapi.com application. Transfer basis: EU–US DPF and/or SCCs 2021. Privacy policy: https://cloud.google.com/terms/data-processing-terms
• Google Analytics 4 (Google LLC, USA) – website analytics. Transfer basis: EU–US DPF. Privacy policy: https://business.safety.google/privacy/

A full list of sub-processors is available on request by emailing [email protected] or at our privacy policy page.

In addition to sub-processors used to deliver the GMBapi.com platform, we use the following tools internally within our own organisation (e.g. by our sales and marketing team). These tools are not used to process our customers' personal data as part of the platform service:

• Anthropic (Claude AI) (Anthropic, PBC, USA) – AI language model used internally by our sales and marketing team for tasks such as drafting communications and internal analysis. Customer data is not shared with this tool. Transfer basis: SCCs 2021.

Certain features of the GMBapi.com platform use artificial intelligence tools, including services provided by Google Cloud AI. These tools may process content you provide (such as review text, business descriptions, or queries) in order to generate responses, suggestions, or analysis.

We do not use AI to make fully automated decisions that produce legal or similarly significant effects on individuals (as defined in Article 22 GDPR). If this changes, we will update this policy and provide you with the right to request human review.

In accordance with the EU AI Act (Regulation 2024/1689, applicable from 2 August 2026), we are committed to transparency about AI systems used in our service. You may request further information about how AI is used in our platform by contacting us at [email protected].

We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

• The right to access – You have the right to request copies of your personal data. This is free of charge in most cases.
• The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete information you believe is incomplete.
• The right to erasure – You have the right to request that we erase your personal data, under certain conditions.
• The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.
• The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.
• The right to data portability – You have the right to request that we transfer the data that we have collected to another organisation, or directly to you, under certain conditions.
• The right to withdraw consent – Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

If you make a request, we will respond without undue delay, and in any event within one calendar month of receipt of your request. In complex cases we may extend this by a further two months, and will notify you accordingly. To exercise any of these rights, please contact us at [email protected].

If you believe we are handling your personal data unlawfully, you have the right to lodge a complaint with the competent supervisory authority. In the Netherlands, this is the Autoriteit Persoonsgegevens (AP):

Website: https://www.autoriteitpersoonsgegevens.nl

Telephone: +31 (0)70 888 85 00

Address: Hoge Nieuwstraat 8, 2514 EL Den Haag

Another part of our priority is adding protection for children while using the internet. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity. GMBapi.com does not knowingly collect any Personally Identifiable Information from children under the age of 13. If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will do our best efforts to promptly remove such information from our records.

For questions, data subject requests, or complaints regarding this Privacy Policy, please contact our privacy contact:

Local SEO Software by GMBapi.com B.V.

Walpoort 10

5212 DK 's-Hertogenbosch

The Netherlands

E-mail: [email protected]

Phone: +31 (0) 639101609

KvK: 98224131

VAT: NL868406600B01