Privacy at a glance
Six commitments that summarise this policy. Each one is expanded in full detail below, and each one is something you can hold us to.
Information We Collect
Two very different things live on this platform: information about you as a customer, and public property records. This section covers the first.
1.1 Information you give us
- Account details — name, business name, email address and phone number
- Billing information — billing address and the last four digits and expiry of your card. Full card numbers are handled by our PCI-DSS compliant payment processor and never reach our servers
- Content you upload — lead lists, skip trace files, CRM contacts, notes, tags and campaign material
- Support communications — emails, tickets, webinar registrations and call notes
1.2 Information collected automatically
- Usage data — pages viewed, searches run, exports performed and features used
- Device and log data — IP address, browser type, operating system, referring page and timestamps
- Cookies and similar technologies — used for sign-in sessions, security, preference storage and aggregate analytics
1.3 Information from other sources
We receive public property, probate, successor and court records from county and third-party data sources, and we receive transaction confirmations from our payment processor. If you sign up through a partner or referral link, we receive the referral identifier so credit is applied correctly.
1.4 What we deliberately do not collect
- We do not collect Social Security numbers, driver's licence numbers or government ID numbers from customers
- We do not collect biometric or precise geolocation data
- We do not knowingly collect information about anyone under 18
- We do not read the contents of your CRM to build advertising profiles
How We Use Your Information
Each purpose below is tied to running, securing or improving the service you pay for.
2.1 Purposes of use
- Provide the platform, deliver records and run the tools you subscribed to
- Process payments, apply credits and issue invoices and receipts
- Provide customer support and respond to your requests
- Send service notices such as billing alerts, renewals, outages and policy updates
- Detect and prevent fraud, credential sharing, scraping and abuse
- Measure aggregate product usage so we can improve features and performance
- Meet legal, tax, accounting and record-keeping obligations
2.2 Marketing emails
We may send product updates, webinar invitations and offers to customers and to people who asked to hear from us. Every marketing email carries a one-click unsubscribe link, and unsubscribing is honored within 10 business days. Transactional messages — receipts, renewal notices, security alerts — are part of the service and continue while your account is open.
2.3 Cookies and tracking
We use a small number of cookie categories:
| Category | What it does | Can you disable it? |
|---|---|---|
| Strictly necessary | Keeps you signed in, protects forms and secures your session | No — the platform will not function |
| Preference | Remembers filters, saved views and display settings | Yes, in your browser settings |
| Analytics | Aggregate page and feature usage so we know what to improve | Yes, in your browser settings |
We honor Global Privacy Control (GPC) signals where your browser sends them. Because we do not sell or share personal information, browser-level Do Not Track signals do not change our behavior.
2.4 No automated decisions about you
We do not use automated profiling to make decisions that produce legal or similarly significant effects about you. Fraud and abuse signals may flag an account for review, but a person makes the final decision.
Security & Data Retention
How we protect your information, how long we keep it, and what happens if something goes wrong.
4.1 Security measures
- Encryption in transit — all traffic is served over HTTPS with TLS
- Encryption at rest — databases and file storage are encrypted on AWS
- Access control — least-privilege internal access, reviewed on a recurring basis
- Payment isolation — card data is tokenized by a PCI-DSS compliant processor
- Monitoring — logging and alerting on authentication and bulk-export anomalies
- Backups — encrypted, regularly tested backups of production data
No system is perfectly secure. We continue to invest in our controls, and we ask that you use a strong unique password and do not share your login.
4.2 How long we keep information
| Data | Retention period |
|---|---|
| Account profile | While the account is active, then deleted or anonymized within 90 days of closure |
| Uploaded lists and CRM content | While the account is active; permanently deleted 30 days after closure or on request |
| Invoices and transaction records | 7 years, as required by US tax and accounting rules |
| Support correspondence | 3 years from the last message |
| Security and access logs | 12 months |
Where we are required to retain a record for legal, tax or dispute-resolution reasons, we retain only that record and delete or anonymize everything else.
4.3 Breach notification
If a security incident affects your personal information, we will notify you without undue delay and within the timeframe required by applicable state law, describe what happened and what data was involved, and tell you the steps we are taking and the steps you should take.
4.4 Children's privacy
The platform is for business use by adults. We do not knowingly collect information from anyone under 18. If we learn we have, we delete it. Contact support@leadcruncher.com if you believe a minor has provided us information.
Your Privacy Rights
We extend the same core rights to every customer, in every state, regardless of whether your state has a privacy statute.
5.1 Rights we honor for everyone
- Know what personal information we hold about you and why
- Access a copy of it
- Correct anything inaccurate
- Delete your account data, subject to legal retention requirements
- Port your data in a portable, machine-readable format
- Opt out of marketing communications at any time
- Non-discrimination — exercising a right never changes your price or service
5.2 How to make a request
Email support@leadcruncher.com from the address on your account with the subject line "Privacy Request" and tell us which right you are exercising.
- We acknowledge every request within 10 business days
- We complete verified requests within 45 days, and will tell you if we need a permitted extension
- We verify identity by matching the request to the account email, and may ask one additional question if the request is sensitive
- Authorized agents may submit on your behalf with written permission
- Requests are free unless they are repetitive or manifestly excessive
5.3 California residents (CCPA / CPRA)
California residents have the rights to know, delete, correct, and to opt out of the sale or sharing of personal information, plus the right to limit the use of sensitive personal information.
LeadCruncher does not sell personal information and does not share it for cross-context behavioral advertising, and has not done so in the preceding 12 months. We do not collect or use sensitive personal information for purposes that require a limitation right. In the last 12 months we collected the categories described in Section 1 for the business purposes described in Section 2, and disclosed them only to the service provider categories listed in Section 3.
5.4 Other state privacy laws
Residents of states with comprehensive privacy laws — including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana and others as they take effect — have equivalent rights of access, correction, deletion, portability and opt-out, plus a right to appeal a refused request.
To appeal a decision, reply to our response with the word "Appeal". A different reviewer will respond within 45 days. If your appeal is denied you may contact your state Attorney General.
Nevada residents may submit a verified request not to sell covered information; as noted above, we do not sell it in any case.
5.5 Shine the Light
California Civil Code § 1798.83 permits California residents to request details of personal information shared with third parties for their direct marketing purposes. We do not share personal information for third-party direct marketing.
Property & Public Records Data
This section is about the property records we make searchable for our customers, which is separate from the account information covered above.
6.1 Where this data comes from
Our property, foreclosure, probate and successor records are compiled from publicly available sources such as county assessor offices, county recorders and court filings, covering more than 160 million properties across all 50 states. We do not create this information — we organize records that are already public and make them searchable. Mailing addresses are checked against USPS address verification to confirm deliverability.
6.2 Permitted use under the FCRA
LeadCruncher is not a consumer reporting agency as defined by the Fair Credit Reporting Act, and our property, probate and successor data is not a consumer report. It may not be used to determine eligibility for credit, insurance, employment, tenant screening, or any other purpose covered by the FCRA.
Enforced, not decorative. Using this data for an FCRA-regulated decision breaches our Terms of Service and results in account termination.
6.3 Marketing responsibilities of our customers
Customers who use our data to contact property owners are responsible for complying with the Telephone Consumer Protection Act (TCPA), CAN-SPAM, the National and state Do Not Call registries, state call-recording laws, and all other applicable rules. Our dialer includes DNC scrubbing and calling-hour restrictions as a compliance aid, but the legal obligation stays with the sender.
6.4 Record removal requests
If you are a property owner and would like your record suppressed from our platform, email support@leadcruncher.com with the subject line "Record Removal" and include:
- The full property address, including city, state and ZIP code
- The name shown on the record
- A way for us to verify that you are the owner or an authorized representative
We acknowledge removal requests within 10 business days and complete verified suppressions within 30 days. Once suppressed, the record is excluded from future searches and exports.
Important: Suppressing a record with LeadCruncher does not remove it from the county or court records it was sourced from, and does not affect other companies that source the same public records. To change the underlying record you must contact the county or court directly.
6.5 Deceased-person records
Our Death Verification service is offered to organizations such as banks, lenders, insurers and government agencies for the purpose of confirming that a person is deceased and preventing deceased identity fraud. Access is granted on a verified-business basis, and the service is subject to its own use restrictions in addition to these policies.
Contact Information
For any privacy question, request or record removal, reach us directly.
Privacy Requests
Talk to us
Leadcruncher LLC
8023 Jennet Street
Alta Loma, CA 91701
Changes to this policy
We may update this Privacy Policy as our product, our vendors or the law changes. When a change is material, we will email the address on your account and update the "Last updated" date at the top of this page at least 30 days before it takes effect. Previous versions are available on request.
