loprela

Privacy Policy

Last updated 17 September 2026

This policy is written to be exactly true rather than reassuring. Where something isn't built yet, we say so.

1 · Who we are

Sinclairo Group Pty Ltd, ABN 18 695 115 970, an Australian company. LoPreLa is our product.

Privacy questions, requests and complaints: privacy@loprela.com
Postal: 28 Thomas Mitchell Crescent Sunshine Bay NSW 2536

Sinclairo Group Pty Ltd also builds software. Separately, our founder operates a local marketing agency, Local + Online, under his own ABN. Work that agency does by hand in Google's own dashboard is not covered by this policy and is not part of LoPreLa.

The short version

We only see your Google Business Profile because you gave us permission through Google's own sign-in screen, and you can withdraw it at any time.
We never change anything on your profile unless you approved that specific change. Not a blanket permission — that change.
We never touch your business name, your primary category or your address. There is no code path that writes them.
We keep Google's information about your business for no more than 30 days. What we keep permanently is our own record of what we did — not a copy of Google's data.
We don't sell your information, share it for advertising, or build prospect lists. Google's terms forbid it and so do we.

2 · What we collect

Information you give us

Your email address — to sign you in. Sign-in is by a code sent to your email; we hold no password.
Your business details — what you tell us about your business so we can check it against your profile.
Photos and content you supply — for posts, offers and profile images.

Information Google gives us, because you allowed it

When you connect your Business Profile, Google gives us a credential that lets us read your profile and — after your approval — send changes to it. We use it for nothing else.

A disclosure we'd rather make before you buy than after While our application is awaiting Google's verification, Google expires that credential every seven days, and you will need to reconnect. This is Google's rule, not ours, and it stops once verification completes.

What we never collect

No passwords. We never see your Google password.
No payment card details. When billing exists, a payment provider will handle cards and we will not store them.
No analytics, tracking pixels, advertising identifiers or third-party cookies.
No Google Maps data — no ratings, reviews or listings pulled from Places.

3 · The approval rule

This is the most important section in this policy.

We do not make any change to your Google Business Profile unless you have approved that specific change. This is also Google's rule, not only ours — Google prohibits automating listing edits without the user's prior specific and express consent.

Where that rule is enforced today, stated precisely

Written into our design documents — yes
Enforced in the application code, which refuses to send a change without a matching approval — yes
Covered by automated tests that prove it refuses — yes
Enforced by the database itself, as a constraint that cannot be bypassed — not yet built

We will not claim the database enforces this until it does. Today the guarantee rests on application code and the tests that prove it.

Three fields we never write

Your business name, your primary category and your address are locked in the code. There is no path that writes them at any approval level. If one is wrong, we tell you and you change it yourself in Google.

4 · How long we keep things

Google's information about your business: no more than 30 days, then removed.
Our own record of what we checked, proposed and changed: kept permanently, and deliberately unalterable. It is what lets you — or a regulator — verify what we did to your profile.

That permanent record is about our actions, not about you personally.

5 · Who else sees your information

We don't sell it, rent it, or share it for advertising. It is handled by the service providers that run our software — hosting, database and email delivery — under contract, and by nobody else.

Some of those providers operate outside Australia. Where that is the case, we choose providers bound to protect your information to a standard comparable to Australian privacy law.

6 · Your rights

Under the Privacy Act 1988 you can ask us for a copy of the personal information we hold about you, and ask us to correct it if it's wrong.

How to ask: email privacy@loprela.com from the address on your account.
How we check it's you: we reply to the email address on the account and ask you to confirm one detail only you would know — your business name and the location you connected. We won't ask you for identity documents; collecting them to answer a privacy request would create the exposure we're trying to avoid.
How long we take: within 30 days.

Deletion

We can delete your account, your business details, and your stored Google credential. We keep our permanent record of the changes we made to your profile — it exists so that what we did can be verified afterwards.

We haven't finished working this out How a deletion request is answered against a deliberately unalterable record is a genuine tension, and we are taking advice on it. We would rather say that than pretend it's settled.

7 · Complaints

Email privacy@loprela.com. We'll acknowledge it and respond within 30 days.

If you're not satisfied with how we've handled it, you can complain to the Office of the Australian Information Commissioner — oaic.gov.au, or 1300 363 992.

8 · Changes to this policy

If we change it, we'll update the date at the top. If a change materially affects how we handle your information, we'll email you before it takes effect.