Privacy Policy

1. Introduction

LeadChuck ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

By using LeadChuck, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Platform.

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly to us, including:

• Account Information: Name, email address, phone number, and password when you create an account
• Profile Information: Business name, trade categories, service areas, bio, and profile photo
• Payment Information: Bank account details and tax information for receiving payouts (collected and stored by Stripe)
• Lead Information: Client names, contact information, project descriptions, and notes you share through leads
• Communications: Any messages or correspondence you send to us

2.2 Information Collected Automatically

When you use our Platform, we automatically collect certain information:

• Device Information: Device type, operating system, and browser type
• Usage Information: Pages viewed, features used, and actions taken on the Platform
• Log Information: IP address, access times, and referring URLs
• Cookies: We use cookies and similar technologies to enhance your experience

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Platform
• Process transactions and send related information
• Create and manage your account
• Facilitate lead sharing between contractors
• Send you technical notices, updates, and support messages
• Respond to your comments, questions, and customer service requests
• Communicate with you about products, services, and events
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent fraudulent transactions and abuse
• Personalize and improve your experience
• Comply with legal obligations

4. Third-Party Services

We share information with the following third-party service providers who assist us in operating the Platform:

4.1 Clerk (Authentication)

We use Clerk for user authentication and account management. Clerk processes your email address, name, and authentication credentials. For more information, see Clerk's Privacy Policy.

4.2 Stripe (Payments)

We use Stripe to process payments and manage payouts. Stripe collects and processes your payment information, including bank account details and identity verification documents. This information is stored securely by Stripe and is not accessible to LeadChuck staff. For more information, see Stripe's Privacy Policy.

4.3 Resend (Email)

We use Resend to send transactional emails such as lead notifications and account updates. Resend processes your email address to deliver these communications. For more information, see Resend's Privacy Policy.

5. Information Sharing

We may share your information in the following circumstances:

• With Other Users: When you send a lead, the recipient sees your business name, profile information, and the lead details you provide
• With Service Providers: As described above, with third-party services that help us operate the Platform
• For Legal Reasons: When required by law or to protect rights, safety, or property
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you direct us to share your information

We do not sell your personal information to third parties.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide you services. We also retain information as necessary to:

• Comply with legal obligations (e.g., tax records for 7 years)
• Resolve disputes
• Enforce our agreements
• Maintain business records

Lead data is retained for 3 years after the lead is created to support potential disputes and provide historical records. After this period, lead data may be anonymized or deleted.

You may request deletion of your account and associated data at any time by contacting us. Some information may be retained as required by law.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS/HTTPS
• Encryption at rest: Our database is hosted on Render with encryption at rest enabled at the infrastructure level
• Authentication: User authentication is handled by Clerk, a dedicated identity provider with enterprise-grade security
• Payment data: All financial and payment data is handled by Stripe (PCI DSS compliant) and never touches our servers
• Access controls limiting who can view your data
• Regular security assessments

Note: We do not perform application-level encryption of personal data fields stored in our database. Personal information such as names, email addresses, and business details are stored in our database protected by infrastructure-level encryption at rest and strict access controls, but are not individually encrypted at the application layer.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Request your data in a portable format
• Opt-out: Opt out of marketing communications at any time

To exercise these rights, please contact us using the information below.

9. Cookies and Tracking

We use cookies and similar tracking technologies to collect and track information and to improve and analyze our Platform. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, some features of the Platform may not function properly.

10. Children's Privacy

LeadChuck is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete such information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

13. California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) regarding your personal information. These include:

• The right to know what personal information is collected
• The right to know whether personal information is sold or disclosed
• The right to say no to the sale of personal information
• The right to access your personal information
• The right to equal service and price

To exercise your CCPA rights, please contact us at privacy@leadchuck.com.