Privacy & terms

This is a password-protected business-research tool. It is not a complete business directory, an email-verification service, or an email-sending platform.

What is sent and stored

Search terms and locations are sent server-side to Google Places. Optional email checks request robots.txt and up to three public pages on a business’s listed website. Those sites can see the server’s IP address and request headers. No forms are submitted, no cookies are used for these requests, and no email is sent.

Your light/dark appearance preference is saved in this browser. Google Business finder results stay in page memory and clear on refresh; they are not added to the saved business database. Short-lived signed continuation tokens expire after 30 minutes. Infrastructure and third-party services may retain their normal access logs. A downloaded CSV is a file on your own device and is your responsibility to protect and remove.

Business import and saved records

Business import is a separate, website-URL tool. For websites you have permission to collect from, it requests robots.txt, the homepage and up to two contact/about pages. It stores identified business names, addresses, telephone numbers, published emails, website URLs, import groups, source links and collection dates on this server. Missing details are left blank. Importing and reopening these records makes no Google API calls.

Saved records persist across page refreshes and app updates until deleted. Everyone with access to this shared workspace can view, export and delete them. Deleting a website removes it from all import groups; the app cannot undo this. Copies in downloaded files or separately maintained server backups must be managed separately. A recheck only fills missing fields, so existing details may become outdated.

Do not paste Google Places exports into Business import. Website publication and robots.txt access do not themselves grant storage, reuse or marketing permission. Check the website’s terms and the rights applicable to your intended use.

Search cost estimates

Before each search, the server requests a public USD to GBP reference rate from Frankfurter. This request sends only the currency pair, not your search terms, locations or Google key. The provider can see the server’s IP address and standard request headers. Valid rates are cached for one hour.

A ten-minute signed estimate authorizes only the selected search and a limited number of result-page requests. Temporary request reservations are held in server memory to prevent duplicate attempts and expire with the estimate. Google is not contacted until confirmation. Stopping a search cannot undo requests already sent.

GBP figures are estimates, not invoices or guaranteed spending caps. Monthly billing-account usage and remaining free allowance are unknown, so estimates use the first paid Text Search Enterprise tier before free allowance or discounts. Google’s exchange rate, taxes and any custom contract or subscription can change your actual bill.

Google Maps data

Business listings are supplied by Google Maps. Your use is subject to the Google Maps terms, Google Privacy Policy, and the Places API policies. Google restricts caching, storage and export of its content. This app does not override those restrictions or give you permission to build a marketing database.

Contact details and responsible use

Emails are copied only when visibly published on a checked website. They are not guessed or verified as deliverable, current, or appropriate for outreach. Listings and websites can be incomplete or incorrect. Review each source and your permission to use the data before downloading, sharing or contacting anyone. Public availability does not establish consent to receive marketing.

Sign-in and access

Marketrr uses an app login over HTTPS. The password is stored as a salted hash, not as readable text. Signing in creates a secure, HTTP-only session cookie lasting up to 12 hours, with an associated server-side session record. Signing out deletes that server session and clears its cookie. Password changes invalidate existing sessions. Expired session files are cleaned up at subsequent sign-ins.

This is a single-account, shared workspace without record-level permissions, public registration or automatic password recovery. Access the app through its HTTPS domain; its direct network port must remain on the trusted local network. Failed sign-ins are rate-limited.