Privacy policy
Last updated November 2, 2026
Local Margin helps independent Amazon sellers buy better, together. Doing that takes some of your data, and you deserve to know exactly what we collect, why, who processes it for us, and what we will never do with it. This policy is the full list. If anything is unclear, email sales@localmargin.com and a person will answer.
Who we are
Local Margin is run by Local Margin LLC, a company based in Michigan, USA. When this policy says “we”, it means Local Margin LLC. You can reach us any time at sales@localmargin.com.
What we collect
Your account: the email address you sign up with. Your password is handled by our authentication provider; we never see it or store it ourselves.
Your profile: your full name and your store or company name, if you add them.
Your activity: the ASINs and product URLs you look up, the items you save, and the quote requests you submit. This is the data that lets us do the actual work of sourcing for you.
Server logs: standard technical logs such as IP address, browser type, and request times. Every hosting provider keeps these. We use them for security and to keep the service running.
Why we collect it
We collect data for five reasons: to run your account, to run product and supplier searches on your behalf, to negotiate sourcing quotes for you, to send you transactional email about your account and your quotes, and to keep the service secure.
If a piece of data is not needed for one of those five jobs, we do not ask for it.
Who processes data for us
We use a small set of service providers to run Local Margin. Each one processes data only to provide its service to us: Supabase handles authentication, our database, and file storage. Vercel hosts and delivers the site. Resend sends our transactional email. Inngest runs background jobs, such as processing a supplier search.
Keepa provides Amazon product data, and Serper powers supplier web search. When you look up a product, we send these services product identifiers, like an ASIN or a search term. We do not send them your identity.
The retailer logos on our home page load from Google's favicon service. Loading them means your browser makes a direct request to Google, so Google receives your IP address when you visit the page. We use this service only to display those logos and do not otherwise share your visit with Google.
Your anonymity with suppliers
This is a commitment, not a footnote. When we source quotes for you, we do not disclose your name, your store, or your contact details to suppliers. We negotiate as the buyer of record. Suppliers see the group’s demand, not who is behind it.
What we never do
We do not sell personal information. Not to advertisers, not to data brokers, not to anyone. The one thing that comes close is an advertising cookie telling an ad platform that a visit came from its ad, which some US privacy laws count as sharing; the cookie section below says where that runs and how to switch it off.
We do not share your identity with suppliers. It is the promise the service is built on, and it bears repeating.
Transactional email is part of the service. If you have an account, we will email you about things like sign-in, account changes, and updates to quotes you requested.
Marketing email is optional. Every marketing message we send includes a one-click unsubscribe link, and you can also switch marketing email off in your account settings. Unsubscribing from marketing never affects the transactional email your account needs.
Essential cookies
These keep you signed in and protect your account and your payments. The service cannot work without them, so they are always on.
Payments run on our payment processor's own checkout page, which sets its own cookies there.
| Cookie | What it does | How long |
|---|---|---|
| Sign-in session (sb-…-auth-token) | Keeps you signed in and proves each request comes from you | Until you sign out, or up to 400 days |
| lm_amazon_oauth | Protects the step where you connect your Amazon seller account, so nobody else can complete it for you | 10 minutes |
| lm_try | Carries a free product check from the website into sign-up | 7 days |
| lm_consent | Remembers your cookie choice | 12 months |
| lm_region | Remembers whether you are visiting from a region where we ask before setting optional cookies, so we do not have to work it out on every page. It holds only that yes or no, never your country or your IP address | 24 hours |
Preference cookies
These remember how you like the app laid out. They hold no personal information, and we do not use them for anything else.
| Cookie | What it does | How long |
|---|---|---|
| lm_sidebar | Whether the side menu is open or collapsed | Up to 12 months |
| lm_nav | Which side-menu groups you opened | Up to 12 months |
| lm_feed_layout | Your Deal Feed layout (grid or list) | Up to 12 months |
| lm_feed_pulse | Whether the new-deals panel on the Deal Feed is open or closed | Up to 12 months |
| lm_admin_nav | Which admin-console menu groups you opened (team members only) | Up to 12 months |
Analytics cookies (optional)
These tell us how visitors find and use the site, so that we can improve it and see which campaigns bring members. Outside Europe they run by default until you turn analytics off; visitors from the EU, EEA, UK and Switzerland get them only after accepting.
Google Analytics also uses Google signals: if you are signed in to a Google account whose settings allow it, Google can link your visits across your devices, so that our reports count you once. We see only combined numbers, never who you are. You can turn this off in your Google account's data and privacy settings.
We have turned off Google's automatic collection of email addresses, phone numbers and postal addresses from our pages.
| Tool | Cookies | What it does | How long |
|---|---|---|---|
| Google Tag Manager | None of its own | Loads the analytics and advertising tags, and only while your cookie choice (or, outside Europe, the default you have not turned off) allows them | — |
| Google Analytics 4 | _ga, _ga_… | Counts visits and actions such as joining the waitlist, signing up, saving a deal and subscribing | Up to 2 years |
Marketing contact records
If you join our waitlist or newsletter, our customer-records tool may set hubspotutk, __hstc, __hssc and __hssrc to connect your visits with your sign-up. These are analytics cookies: they follow your analytics choice, and the same regional rule, as the analytics cookies above.
Advertising cookies
Advertising cookies tell an ad platform that someone who saw our ad later visited or joined, so that we pay only for ads that work. They are never used to profile what you do inside the app, and we list them here before we use them.
Outside Europe they run by default until you turn advertising off (Reject non-essential on the banner, or Cookie settings later), and never when your browser sends the Global Privacy Control signal. Visitors from the EU, EEA, UK and Switzerland get them only after accepting.
They run on this website and on the sign-up page, never inside the app.
| Tool | Cookies | What it does | How long |
|---|---|---|---|
| Reddit Pixel | _rdt_uuid | Tells Reddit that a visit came from one of our ads, so that we can see which ads bring members | 90 days |
Our own analytics
Our own analytics: counts page views without cookies; for location, stores only the approximate country, never your IP address. With each page view it also stores the page, the site that sent you there, any campaign tags in the link, whether you are on a phone, tablet or computer, two scrambled codes made from your IP address and browser (one changes every day, the other every 30 minutes), and your account if you are signed in to the app.
It runs wherever you are visiting from and whatever you choose, and it sets no cookie.
Changes to our cookies
When we add or remove a cookie, we update this list and the date at the top. We do not add a non-essential cookie without updating this page first.
How long we keep your data
We keep your account data while your account is open. If you close your account or ask us to, we delete it or anonymize it. Copies in routine backups are removed as those backups expire.
Your choices
Email sales@localmargin.com to request a copy of your data, to correct it, or to delete your account. A person will handle it.
Children
Local Margin is a service for businesses. It is not directed at anyone under 18, and we do not knowingly collect data from anyone under 18.
Changes to this policy
When we change this policy, we update the date at the top. If a change is material, we will also notify account holders by email.