Legal
We sell lists of business locations. The only personal data we handle is what it takes to deliver a file you bought and to know how you found us. This page says exactly what that is.
We collect your email and billing details only to deliver your purchase, we never sell your information, and our datasets describe businesses, not people.
Every dataset is a list of business locations — dealer, store or restaurant name, street address, city, state, ZIP, phone, and whatever business-level fields the source publishes (dealer tier, product lines, license number and status, service certifications). Coordinates and websites are carried where the source publishes them and left out where it does not; each dataset page lists that file's real columns. They are compiled from the brand's official public locator, an association directory, or a state or federal register.
The datasets are business records, not consumer records. We do not collect, sell or include personal data about individuals; where a locator publishes a contact email for a business, that business email is carried as published.
When you browse: standard server logs (IP address, user agent, pages requested) and first-party analytics via Google Analytics. We record the page you arrived on and the referring site, in your own browser storage, so that a purchase can be attributed to how you found us.
When you request a sample: your email address and the dataset requested, so we can send the sample and follow up once about that dataset.
When you buy: your name, email, and billing postal code are collected by Stripe, our payment processor, on Stripe's own checkout page. Card details never touch our servers. Stripe's privacy policy applies to the payment itself.
When an AI assistant uses our MCP server on your behalf (ChatGPT, Claude, or any other MCP client): the tool calls it makes (searches, sample requests, quotes, checkout requests) and the assistant's user-agent string. We do not receive your conversation, your account, or your identity from the assistant. If the assistant passes an email address to prefill checkout, we send it to Stripe for that purpose only.
Deliver what you bought: the download link is emailed to the address given at checkout and re-verified against Stripe on every click.
Notify the owner of each sale (who bought what, and how they found us) so support and fulfilment can be handled personally.
Understand which channels bring buyers, in aggregate. Search terms typed on the site may be attached to a purchase for that reason.
We do not sell or rent your information. We do not send marketing email beyond the one follow-up on a sample request; you can reply 'stop' to end it.
Stripe (payments), Resend (transactional email), Amazon Web Services (file storage), Netlify (hosting), and Google Analytics (site analytics). Each acts as a processor under its own terms. No other third party receives your data.
If a court or regulator requires disclosure, we will comply and, where lawful, tell you.
Purchase records are kept for as long as tax and accounting rules require. Sample-request emails and analytics are kept for up to 24 months. Server logs are rotated within 30 days.
You can ask what we hold about you, ask for it to be corrected or deleted, or object to its use, by emailing the address below. We respond within 30 days. Residents of the EU, UK, and California have the additional rights those laws grant, and we honour them regardless of where you live.
If you operate a business that appears in a dataset and want your location removed or corrected, email us with the brand and address. We update the dataset at its next refresh and note the exclusion so it does not return.
This policy is effective September 3, 2026. Material changes will be posted here with a new effective date.
Questions, requests, or complaints: hello@locationlists.com.
Effective September 3, 2026. See also the data license.