Privacy Policy

Effective Date: July 1, 2026

1. Scope

This Privacy Policy explains how LEAD ON HOLD (“we,” “us,” or “our”) collects, uses, discloses, and protects your personal information when you use our website, platform, and services. By using our Platform, you consent to the practices described in this policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you register, we collect your phone number, username, and display name.
• Profile Information: Contractors may provide business name, trade, license details, service area, website, and business hours.
• Lead Information: Clients (homeowners) submitting a lead provide their name, phone number, email (optional), address, and project description.
• Payment Information: Payments are processed by our third-party payment processors (Whop, PayPal). We do not store full credit card numbers or banking details.
• Communications: Information you provide when contacting our support team.

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent, and interaction patterns.
• Device Information: Browser type, operating system, IP address, and device identifiers.
• Cookies: Session and preference cookies (see Section 9).

2.3 Information from Third Parties

We may receive verification data from our payment processors and email delivery providers solely for transaction confirmation and platform functionality.

3. How We Use Your Information

We use your information for the following purposes:

• Platform Operation: To create and manage accounts, verify identity via SMS/OTP, deliver leads, process payments, and provide customer support.
• Lead Matching: To match Client requests with appropriate Contractors based on location, trade, and service area.
• Notifications: To send platform notifications, lead alerts, and account-related communications via SMS, email, or in-app alerts.
• Improvement: To analyze usage patterns and improve Platform functionality and user experience.
• Compliance: To comply with legal obligations, resolve disputes, and enforce our Terms of Use.

We do not sell your personal information to third parties.

4. Information Sharing

We share your information only in the following circumstances:

• With Contractors: When a Contractor purchases a lead, they receive the Client’s name, phone number, email (if provided), and project details. Contractors’ business names and trade are visible to Clients.
• With Service Providers: We engage trusted third-party service providers for payment processing (Whop, PayPal), email delivery (Resend/Mailgun/SendGrid), and cloud hosting. These providers are contractually bound to protect your data.
• Legal Requirements: We may disclose information if required by law, court order, or governmental regulation, or to protect our rights, property, or safety.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. SMS/OTP Compliance

• Purpose: SMS/OTP is used exclusively to verify that you are the legitimate owner of the phone number provided. This prevents bots, fake submissions, and unauthorized account access.
• Frequency: You will receive SMS messages only when you request an OTP during login/registration or when you opt into SMS notifications for lead alerts.
• Opt-Out: You may opt out of SMS notifications (but not OTP verification messages) at any time by updating your notification preferences in your account settings.
• Data Handling: Phone numbers are stored securely and are never shared with third parties for marketing purposes. OTP codes expire after 10 minutes and are stored only for verification audit purposes.
• Carrier Liability: We are not liable for any delays, failures, or charges related to SMS delivery by mobile carriers.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide Platform services. After account deletion or termination, we retain data only as required by law (e.g., financial records for tax purposes, typically 7 years). Anonymized, aggregated data may be retained indefinitely for analytical purposes.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Portability: Request a machine-readable copy of your data for transfer to another service.
• Objection: Object to the processing of your data for certain purposes.
• Withdrawal of Consent: Withdraw consent for data sharing with Contractors at any time (note: leads already purchased cannot be revoked).

To exercise any of these rights, contact us at privacy@leadonhold.com. We will respond within 30 days.

8. Security

We implement industry-standard technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (TLS 1.3) and at rest (AES-256).
• HMAC-signed authentication tokens with 90-day expiry.
• Rate-limited OTP requests (maximum 3 per 10 minutes per phone number).
• Access controls restricting internal access to personal data on a need-to-know basis.
• Regular security reviews and dependency updates.

No method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security but will notify you promptly if we become aware of a data breach affecting your personal information.

9. Cookies & Analytics

We use minimal cookies solely for essential platform functionality (session management and preference storage). We do not use third-party advertising cookies or tracking cookies for marketing purposes.

We may collect anonymized usage analytics through server-side logs to improve Platform performance and user experience. This data cannot be used to identify individual users.

10. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be notified via email or platform notification. Your continued use of the Platform after changes take effect constitutes acceptance of the updated policy.

11. Contact

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: