LeadArrow Privacy Policy

LeadArrow processes personal information in two principal roles:

1. As a business or controller. We determine how and why we process information about website visitors, prospective customers, account owners, authorized users, billing contacts, and people who communicate directly with LeadArrow.
2. As a service provider or processor for customers. Our business customers determine how and why their lead, CRM, and representative data is processed. We process that information on their instructions to provide lead ingestion, routing, alerts, integrations, and related services.

If your information was submitted to LeadArrow by one of our customers, that customer is generally responsible for its privacy practices and for responding to your privacy request. You may contact the customer directly. We will reasonably assist the customer where required by law and technically feasible.

LeadArrow currently sends SMS only to customer users and sales representatives who voluntarily enroll in operational LeadArrow Alerts. LeadArrow does not currently use the Service to send a customer's marketing or sales texts to consumer leads.

The information we collect depends on how you interact with the Service.

We collect personal information:

• directly from you;
• from your employer or the organization that invites you to the Service;
• from LeadArrow customers;
• from connected CRMs, forms, webhooks, lead sources, and integrations;
• automatically from your browser, device, extension, and use of the Service;
• from communications providers, carriers, payment processors, hosting providers, security services, and other vendors; and
• from referrals, demonstrations, and other lawful business-development sources.

LeadArrow does not purchase consumer telephone lists for marketing through the Service.

We may use personal information to:

• provide, operate, maintain, and improve the Service;
• create and administer accounts;
• authenticate users and manage permissions;
• receive, route, assign, and display lead information;
• send browser, push, email, telephone, and optional SMS alerts;
• connect and synchronize authorized integrations;
• process subscriptions, payments, invoices, and trials;
• provide customer service and technical support;
• personalize configurations and notification preferences;
• monitor performance, reliability, routing, delivery, and feature usage;
• create aggregated or de-identified statistics;
• detect, investigate, prevent, and respond to fraud, abuse, security incidents, spam, and unlawful activity;
• enforce our agreements and acceptable-use requirements;
• manage consent, opt-outs, suppression records, and communications compliance;
• comply with legal obligations and lawful requests;
• establish, exercise, or defend legal claims;
• communicate about the Service, security, billing, policy updates, and support; and
• market LeadArrow to business prospects where permitted by law and honor applicable opt-out requests.

We do not use customer lead data for unrelated advertising or to train public, general-purpose artificial-intelligence models.

We may disclose personal information as described below. The providers used at launch or during development may change as the Service evolves.

LeadArrow does not sell personal information for money. LeadArrow does not share personal information for cross-context behavioral advertising and does not use customer lead data for targeted advertising on unrelated services.

If our practices materially change, we will update this Policy and provide any choices required by applicable law before beginning the changed practice.

We may use cookies, local storage, pixels, and similar technologies to:

• keep users signed in;
• maintain security and prevent fraud;
• remember preferences;
• operate requested features;
• measure performance and reliability;
• diagnose errors; and
• understand how the Service is used.

We do not currently use advertising cookies to track users across unrelated websites for targeted advertising. Browser settings may allow you to block or delete cookies, but blocking essential cookies may prevent parts of the Service from functioning.

Because there is no universally accepted standard for ordinary browser "Do Not Track" signals, the Service may not respond to those signals. Where required, we will process legally recognized opt-out preference signals, such as Global Privacy Control, in a manner appropriate to the practices to which the signal applies.

This section applies to LeadArrow Alerts and is intended to be read together with the SMS terms in the LeadArrow Terms of Service.

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing the Service, meeting contractual obligations, protecting security, resolving disputes, enforcing agreements, and complying with law.

Our general retention approach is:

• Account and operational data: while the account is active and generally for up to 30 days after termination or a valid deletion request, subject to the exceptions below;
• Customer lead and routing data: as directed by the customer and generally for the account term plus a limited post-termination export and deletion period;
• SMS consent, opt-out, suppression, and related compliance records: generally for at least five years after the relevant consent, message, or opt-out event, or longer if reasonably necessary for a legal claim or compliance obligation;
• Billing, transaction, and tax records: generally for up to seven years;
• Security, access, and diagnostic logs: generally for up to two years, unless a longer period is needed to investigate an incident;
• Support and legal records: for as long as reasonably necessary to address the matter and establish or defend legal rights; and
• Backups: deleted information may remain in encrypted or access-restricted backups for up to 90 days before being overwritten, unless legal preservation is required.

These periods are general targets, not guarantees that every record is retained for the entire period. We may delete information earlier when it is no longer necessary. We may retain aggregated or de-identified information that no longer reasonably identifies a person.

Automated export and deletion features are still being developed. Until those controls are available, eligible requests may be handled manually through the contact information below.

We use reasonable administrative, technical, and organizational measures designed to protect personal information. Depending on the system and stage of deployment, these measures may include encryption in transit, encryption or provider-managed protection at rest, credential encryption, access controls, least-privilege practices, account authentication, logging, backups, monitoring, and incident-response procedures.

No method of transmission, storage, or security is perfectly secure. We cannot guarantee that unauthorized parties will never defeat safeguards or that information will never be lost, altered, or improperly accessed. You are responsible for securing your account, devices, credentials, connected systems, and user permissions.

If you believe your information or account has been compromised, contact us promptly at eliotsamurin@gmail.com.

Depending on where you live and applicable law, you may have the right to:

• know whether we process your personal information;
• access or obtain a copy of personal information;
• correct inaccurate information;
• request deletion;
• request portability of certain information;
• restrict or object to certain processing;
• opt out of sale, targeted advertising, or certain profiling;
• withdraw consent where processing is based on consent;
• appeal a denied privacy request; and
• receive equal service without unlawful discrimination for exercising a privacy right.

LeadArrow does not currently sell personal information or use it for cross-context behavioral advertising.

To submit a request, email eliotsamurin@gmail.com with the subject line "Privacy Request." Describe the request and identify the account or relationship involved. We may take reasonable steps to verify your identity and authority before acting. We will respond within the time required by applicable law.

You may use an authorized agent where permitted by law. We may request proof of the agent's authority and may need to verify your identity directly.

We may deny or limit a request where an exception applies, such as where information is needed to provide a requested service, maintain security, prevent fraud, honor an SMS opt-out, comply with law, protect another person's rights, or establish or defend legal claims. If applicable law provides an appeal right, you may appeal by replying to our decision or emailing the same address with "Privacy Appeal" in the subject line.

The Service is intended only for adults engaged in business activity. We do not knowingly collect personal information from children under 18. Customers may not create accounts for children or knowingly submit children's information as Customer Data.

If you believe a child has provided personal information, contact us at eliotsamurin@gmail.com so we can investigate and take appropriate action.

The Service is intended for United States business customers. Personal information may be stored and processed in the United States and other locations where our service providers operate. Those locations may have data-protection rules different from the rules where you live.

Customers must not use the Service in a jurisdiction where doing so would require LeadArrow to satisfy additional localization, registration, or international-transfer obligations unless LeadArrow has agreed in writing.

The Service may contain links to or integrations with services that LeadArrow does not control. This Policy does not govern an independent third party's privacy practices. Review that party's privacy policy before providing information or enabling an integration.

We may update this Policy to reflect changes in the Service, vendors, technology, law, or our practices. We will post the updated Policy and revise the Last Updated date. If a change materially affects how we use personal information, we will provide additional notice or obtain consent where required by law.

For questions, concerns, privacy requests, SMS support, or complaints, contact:

LeadArrow
Operated by Eliot Samurin, sole proprietor
Columbus, Ohio, United States
Email: eliotsamurin@gmail.com
Website: https://getleadarrow.com