Privacy Policy

1. Who we are

LeadBroker is a marketing and consumer-referral service operating in the Greater Los Angeles area. We are not a contractor. We do not perform, supervise, or contract for home-improvement work, and we hold no contractor license. We connect homeowners who request help with licensed local contractors. You contract with and pay your contractor directly; no payment for any job is made to or through us.

2. Information we collect

When you submit a request form, we collect:

• Identifiers — your name, phone number, and email address (when provided).
• Service details — the service address you provide, whether you own the property, a description of the work you need, your rough timeline, and an optional budget range.
• Consent and technical records — captured at the moment you submit: the exact consent language you agreed to and its version, a timestamp, the page URL, your IP address, your browser user-agent string, and whether your browser sent a Global Privacy Control signal. These are retained as evidence of your consent.
• Site and source information — the page that led to your submission and how you reached the site (for example, an organic search or a link). We also record basic anti-spam signals (such as submission timing) to filter automated abuse.

The work-description field is free text. Please do not enter sensitive personal information (such as government ID or financial account numbers) — we do not need it to match you with a contractor.

When phone lines launch (see Section 5), calls to our tracked numbers will also generate call records and, where disclosed, recordings. That collection is not active until those lines are live.

3. How we use your information

• To match your request with a licensed contractor who covers your area.
• To let us and the matched contractor contact you about your request.
• To detect and prevent duplicate or fraudulent submissions and to rate-limit abuse.
• If you opt in, to follow up later to confirm whether the work was done and ask about your experience.
• To keep records of consent and of our own billing to contractors.

4. How we share your information

When you submit a request, you direct us to share the information you provide — your name, contact details, service address, and job description — with the licensed contractor(s) matched to your request, so they can contact you about it.

We use service providers who process information on our behalf to operate the service: our database host (Neon), our website host (Vercel), our email provider (Resend), our privacy-respecting, cookieless analytics provider, and, when phone lines launch, our telephony provider (Twilio). They may use your information only to provide services to us.

We do not sell your personal information to data brokers, and we do not share it for cross-context behavioral advertising. We use no advertising or third-party tracking technology on this site.

5. Calls and recording

This section becomes effective when our tracked phone lines launch; those lines are not yet active. When they are, calls placed to numbers shown on this site may be recorded. Before any recording begins, a notice will play disclosing that the call may be recorded, and the contractor you are connected to separately consents to recording. We keep call recordings only for record-keeping and dispute resolution and intend to retain them for a limited period, after which they are purged. We will update this policy’s effective date when call lines go live.

6. Cookies and analytics

We set no tracking cookies and use no advertising cookies. At launch we use a cookieless, privacy-respecting analytics tool that measures aggregate page activity without profiling individual visitors.

7. Your California privacy rights

If you are a California resident, you have rights under the California Consumer Privacy Act. Here is exactly how each is handled today:

• Opt out of sale/sharing. You can direct us to stop sharing your information with contractors using our Do Not Sell or Share My Information page. This is enforced automatically before any future contractor delivery.
• Revoke consent to contact. You can tell us to stop contacting you on the same page; this is recorded and enforced.
• Delete your information. You may request deletion on that page or by email. Deletion requests are processed manually, within the timeframe required by law. We do not offer instant or automated deletion. Some records are retained even after a deletion request — see Section 9.
• Know / access and correct. To request a copy of the information we hold about you, or to correct it, email us (Section 13). These requests are fulfilled manually by our team; there is no automated download tool.
• Non-discrimination. We will not treat you differently for exercising these rights. We charge consumers nothing; our fees are paid by contractors.

We do not use financial incentives for personal information. There is no charge to you for any of the above.

8. Global Privacy Control (GPC)

If your browser sends a Global Privacy Control signal, we record that signal with your submission. Because we set no tracking cookies and do not sell information to data brokers or share it for advertising, the practical target of GPC does not exist on this site. When you submit a request form, you are actively directing us to share your information with a matched contractor for that request; we honor that direction and log the GPC signal alongside it rather than treating the signal as a blanket cancellation of the request you just made. You can always use the Do Not Sell or Share page to stop sharing.

9. How long we keep information

We keep your request and contact information for as long as needed to provide the service and for our records. Consent records, form-version records, and internal audit logs are kept as append-only records and are retained as evidence of consent and for financial-integrity and legal-compliance purposes.

Because of this, a deletion request does not erase everything. When we act on a deletion request, we remove or de-identify your request information where we can, but we retain consent records and audit records — including copies of the information contained in them — under the legal-obligation and record-keeping exceptions permitted by law. We do this so we can prove what you consented to and maintain accurate billing records with contractors.

10. How we protect information

Information is transmitted over encrypted (TLS) connections and stored in an access-limited managed Postgres database. Changes to consumer-facing and billing records are recorded in an audit log, and consent records cannot be altered after they are written. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children

This site is intended for homeowners and is not directed to children. We do not knowingly collect personal information from children under 16. If you believe a child provided us information, contact us and we will delete it.

12. Changes to this policy

We may update this policy. The version and effective date appear at the top. Prior versions are available on request. Material changes will be reflected by a new effective date.

13. Contact us

To exercise a privacy right or ask a question about this policy, email privacy@[DOMAIN]. (A permanent contact address is finalized before launch.)

14. Additional required disclosures

(a) Notice at collection. In addition to this Privacy Policy, California law requires that, at or before the point we collect personal information, we provide a summary “notice at collection” disclosing (i) the categories of personal information to be collected, (ii) the purposes for which each category will be used, (iii) whether that information is sold or shared, and (iv) how long we intend to retain each category (or the criteria used to determine retention). The categories of personal information LeadBroker collects, and the purposes and retention periods for each, are set out in the table below. We provide a link to this notice, or an equivalent just-in-time notice, on or immediately before any form where personal information is first collected (for example, our sign-up and project-request forms).

(b) Annual metrics disclosure. Businesses that alone or in combination process the personal information of 10,000,000 or more California consumers in a calendar year must publish specified metrics — the number of requests to know, delete, correct, and opt-out received, complied with (in whole or part), and denied, plus the median or mean number of days to respond — covering the prior calendar year, by July 1 of the following year. LeadBroker does not currently meet this threshold and this disclosure does not currently apply.

(c) Verification procedure for rights requests. When you submit a request to know, delete, correct, or opt out, we will verify your identity using a method reasonably calibrated to the sensitivity and risk of harm associated with the request:

• Requests to know (categories) and to delete or correct: we will match at least two data points you provide (for example, name and email address) against information we already maintain about you.
• Requests to know specific pieces of personal information: we will use a more stringent method — matching at least three data points and requiring a signed declaration under penalty of perjury — given the greater sensitivity of disclosing specific data points.
• We will respond within 45 days of receiving a verifiable request, extendable once by an additional 45 days when reasonably necessary, with notice of the extension provided within the initial 45-day period.
• We will not charge a fee to process or respond to a verifiable request unless it is manifestly unfounded or excessive, in which case we may charge a reasonable fee or decline to act, and will explain why.
• If we cannot verify your identity, we will explain what additional information is needed or, where verification is not possible, will treat the request as a request to opt out of sale/sharing (which does not require full verification) to the extent applicable.

(d) Authorized agents. You may designate an authorized agent to submit a request on your behalf by providing the agent with written permission signed by you, or a valid Power of Attorney. We may still require you to independently verify your own identity directly with us and to directly confirm that you provided the agent permission to act on your behalf, unless the agent submits a Power of Attorney valid under Probate Code §§4000–4465.

(e) Right to opt out of sale/sharing; Global Privacy Control. Where applicable (see subsection (g)), you have the right to opt out of the sale or sharing of your personal information. We will honor opt-out preference signals, including the Global Privacy Control, as an operative request to opt out of sale/sharing.

(f) Right to limit use of sensitive personal information. LeadBroker does not currently collect sensitive personal information as defined by the CCPA (for example, government ID numbers, precise geolocation beyond a service address, or financial account credentials) for purposes that would trigger the right to limit its use.

(g) Consumer-directed disclosure vs. “sale/sharing” — confirmation and forward-looking flag. When you request a match, we disclose your relevant contact and project information to the single contractor you are matched with, at your direction, so that the contractor can respond to the specific request you initiated. We treat this as a disclosure made at your direction to complete a transaction you requested, not a “sale” or “sharing” of personal information under the CCPA (see Civ. Code §1798.140(ad)(2)(A)). This characterization depends on the current one-to-one matching model. If LeadBroker begins distributing the same lead to multiple contractors who were not individually selected by the consumer — as contemplated in your product roadmap — that later disclosure will very likely constitute a “sale” and/or “sharing” of personal information under the CCPA’s broad definitions, regardless of whether cash changes hands. Before that feature ships, this Privacy Policy must be revised to: (i) reclassify the relevant categories as sold/shared in the table above, (ii) add a “Do Not Sell or Share My Personal Information” link and opt-out mechanism, (iii) update the notice at collection accordingly, and (iv) confirm whether the “sale” of contractor-side data (e.g., to other platforms) requires separate treatment. Treat this subsection as a compliance gate on that roadmap item, not just a disclosure.