Privacy Policy

1. Introduction

LeadZ ("we", "us", or "our") operates the LeadZ platform ("Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

We respect your privacy and are committed to protecting your personal data. This policy will inform you about how we handle your personal data, your privacy rights, and how the law protects you.

2. Information We Collect

A. Information You Provide

• Account Information: Name, email, phone number, company name
• Profile Data: Business details, logo, preferences
• Customer Data: Information about your customers (names, contact info, addresses)
• Job Data: Service records, notes, photos, documents
• Payment Information: Billing details (processed by Stripe - we don't store card numbers)
• Communications: Messages, support tickets, feedback

B. Information We Collect Automatically

• Usage Data: Pages viewed, features used, time spent
• Device Information: Browser type, OS, IP address, device identifiers
• Location Data: GPS coordinates (for technician tracking, if enabled)
• Cookies & Tracking: Session data, preferences, analytics
• Call & SMS Records: For communication features (with consent)

C. Information from Third Parties

• Payment processors (Stripe)
• Communication services (Twilio)
• Integrated services (QuickBooks, Google Calendar, etc.)
• Analytics providers

3. How We Use Your Information

We use your information to:

• Provide and maintain the Service
• Process transactions and send notifications
• Communicate with you (support, updates, marketing)
• Improve and personalize the Service
• Analyze usage and generate insights
• Prevent fraud and ensure security
• Comply with legal obligations
• Resolve disputes and enforce agreements

4. Legal Basis for Processing (GDPR)

We process your personal data based on:

• Contract Performance: To provide the Service you signed up for
• Consent: Where you've given explicit permission (marketing, location tracking)
• Legitimate Interests: To improve our Service and prevent fraud
• Legal Obligations: To comply with tax, accounting, and legal requirements

5. How We Share Your Information

We may share your information with:

Service Providers

• Payment processors (Stripe)
• Communication services (Twilio, SendGrid)
• Cloud hosting (AWS, Supabase)
• Analytics providers (Google Analytics)
• Customer support tools

Business Transfers

If we merge, are acquired, or sell assets, your data may be transferred to the new entity.

Legal Requirements

We may disclose data when required by law, subpoena, court order, or to protect our rights.

With Your Consent

We may share data with third parties when you explicitly authorize it (e.g., integrations).

6. Data Retention

We retain your data for as long as necessary to provide the Service and comply with legal obligations:

• Account Data: While your account is active + 2 years after closure
• Financial Records: 7 years (tax requirements)
• Communications: 2 years
• Analytics Data: Anonymized after 26 months
• Backups: 30 days

7. Your Privacy Rights

All Users Have the Right To:

• Access: Request a copy of your personal data
• Correction: Update inaccurate or incomplete data
• Deletion: Request deletion of your data ("Right to be Forgotten")
• Portability: Receive your data in a structured, machine-readable format
• Object: Object to processing based on legitimate interests
• Restrict: Request restriction of processing
• Withdraw Consent: Withdraw consent at any time (where processing is based on consent)

GDPR Rights (EU/UK)

If you're in the EU/UK, you have additional rights under GDPR. You can exercise these rights through our GDPR Compliance dashboard or by contacting privacy@lead-z.ca.

CCPA Rights (California)

California residents have specific rights under CCPA, including the right to know what personal information we collect and the right to opt-out of the "sale" of personal information (we don't sell your data).

8. Security Measures

We implement industry-standard security measures:

• Encryption: SSL/TLS for data in transit, AES-256 for data at rest
• Access Controls: Role-based access, two-factor authentication
• Infrastructure: Secure cloud hosting with redundancy
• Monitoring: 24/7 security monitoring and logging
• Testing: Regular security audits and penetration testing
• Training: Employee security awareness training

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

9. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure adequate protection through:

• Standard Contractual Clauses (SCCs) approved by the EU Commission
• Adequacy decisions where available
• Binding Corporate Rules for service providers

10. Cookies & Tracking Technologies

We use cookies and similar technologies:

Essential Cookies

Required for the Service to function (login sessions, security).

Analytics Cookies

Help us understand how you use the Service (Google Analytics).

Preference Cookies

Remember your settings and preferences.

You can control cookies through your browser settings. Disabling cookies may limit functionality.

11. Children's Privacy

Our Service is not intended for children under 18. We do not knowingly collect data from children. If you believe we've collected data from a child, please contact us immediately.

12. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for their privacy practices. We encourage you to review their privacy policies.

13. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by:

• Email notification
• In-app notification
• Updating the "Last Updated" date

Your continued use after changes constitutes acceptance of the updated policy.

14. Contact Us

For privacy-related questions or to exercise your rights:

EU Representative: [If applicable under GDPR]

15. Complaints

If you're unhappy with how we handle your data, you have the right to lodge a complaint with your local supervisory authority:

• EU/UK: Information Commissioner's Office (ICO)
• California: California Attorney General
• Other: Contact your local data protection authority