Privacy Policy

Last updated: 1 November 2026 · Who is responsible: ValleyFill · Contact: hello@valleyfill.com

This policy covers ValleyFill Local (local.valleyfill.com): the $49 audit and the free tools.

1. What we collect

• When you buy an audit: from Stripe, your email address, the payment reference, and your answers to the checkout fields (such as website, business name, and city or service area). Payments are processed by Stripe; ValleyFill never sees your card number.
• When you reply to our intake email: your website, business name, service area, trade, and optionally competitor names, your public Google Business Profile link and the details on it, and pages to check, plus anything else you choose to write to us.
• What we create while doing the audit: the questions, the answers from the OpenAI model we use (through the OpenAI API) and the sources it cites, API usage and cost records, and the results of checking your public web pages. These are about your business, not about you personally.
• Emails you send us: if you email us, we get what's in the email.
• Free tools: the website address you enter, and a daily usage counter based on a salted, one-way hash of your IP address (we don't store the IP address itself) so we can apply the daily limit. Our web host may also keep standard server logs (IP address, browser type, pages requested).
• Visit counts: ValleyFill counts visits anonymously, with no cookies and no personal data: only aggregate page-view counts, the referring website's domain and campaign tags (utm_source, utm_campaign), kept for about 13 months. If your browser sends Do Not Track or Global Privacy Control, nothing is counted. To limit abuse, a one-way hash of your IP address made with a random key that changes daily is kept briefly (normally a few hours) and is never stored with the counts.
• What we never collect: passwords, logins, account access, card numbers, or government IDs.
• Cookies: this site sets no advertising or analytics cookies. If we ever add advertising, we'll update this policy first.

2. How we use it

To deliver the audit you paid for and email you about it; to answer your questions; to handle refunds; to keep the records the law requires; and to run the free tools and prevent abuse. We don't sell your information and don't use it for advertising. We email you about other products only if you asked us to.

3. What we send to OpenAI

To run the audit we send the questions to an OpenAI model through the paid OpenAI API, with web search turned on. The questions contain your business name, trade, city or service area and, if a question includes it, your public website address only — never your name, email, phone, or other personal contact details. We don't send OpenAI any personal information, so please send us business details only. OpenAI processes the questions and answers for us as our service provider (processor) under its API terms. Under OpenAI's API data policy (checked 27 October 2026), data sent to the API is not used to train OpenAI's models unless the customer opts in, and we don't. OpenAI may keep it in abuse-monitoring logs for up to 30 days, or longer if the law requires it or it is reasonably necessary to protect OpenAI's services or others from harm.

4. Who processes data for us

• Stripe: checkout, payments and refunds (your payment details, email, checkout fields).
• Hostinger: website and free-tool hosting, and the hello@valleyfill.com mailbox (server logs, the free-tool counter, emails with us).
• OpenAI (paid API, as our service provider): answering the audit questions with web search (business name, trade, area and any public website address in a question; no personal information).
• ValleyFill's private cloud workspace used by its automation: storing order files and preparing reports (everything in your order folder).

No form service is used.

5. How long we keep it

• Order files (your details, the questions, the API answers and cited sources, website-check results, and your report) are kept on ValleyFill's private cloud workspace used by its automation for as long as we need them for delivery, support, and tax and accounting records.
• The free-tool usage counter is deleted automatically about a day later. Our host's server logs are kept for a limited period under its own policy.
• Copies OpenAI keeps of the questions and answers follow OpenAI's API data policy: abuse-monitoring logs for up to 30 days, or longer where the law requires it or to protect OpenAI's services or others from harm.
• You can ask us to delete your information at any time; we'll delete it where the law allows.

6. Your choices and rights

Email hello@valleyfill.com to see, correct, or delete your information, or to object to how we use it. Depending on where you live (for example under the GDPR/UK GDPR or US state privacy laws), you may have additional rights, including the right to complain to your data-protection authority.

7. Security

We use the providers above, keep order files in a private workspace, never ask for passwords, and limit what we keep. No system is perfectly secure; tell us at once if you think something went wrong.

8. Children

The service is for businesses and isn't directed to children under 16.

9. Changes

We'll post updates here and change the date above.