Privacy Policy

At a Glance

• Platform & Data. Supabase stores your account, profile, licensing, business data, and uploaded files.
• Hosting. Vercel hosts and delivers the site.
• Payments. Stripe processes payments; leadspply does not store your card details.
• Calls & SMS. Twilio powers the in-browser dialer, text messaging, and A2P 10DLC registration.
• CRM & Messaging. GoHighLevel manages contacts, calendars, and SMS/email automations.
• Email. Resend delivers transactional and service email.
• AI. Anthropic (Claude) powers product recommendations and message drafting.
• Analytics & Advertising. Google, Meta (Facebook), and TikTok set cookies/pixels to measure site usage and ad conversions and to deliver and retarget ads.
• Other. Google Maps (address lookup), Google Fonts, Sentry (error monitoring), NIPR (license verification).

1. Policy Summary

leadspply (leadspply.com), operated by Leads Spply LLC, collects Personal Data from its Users in order to provide its services. leadspply is a lead marketplace and sales-enablement platform for licensed insurance professionals and their teams. This policy describes what data is collected, how it is used, and what rights you have in relation to that data.

This document contains a dedicated section for Users in the United States outlining additional state-specific privacy rights. It can be printed for reference using the print command in your browser.

Personal Data Processed & Services Used

Cookies & Trackers

leadspply uses strictly necessary cookies and browser local storage for authentication and to remember your preferences. We also use analytics and advertising cookies, pixels, and similar trackers from Google, Meta (Facebook), and TikTok to measure site usage, attribute conversions, and deliver and measure advertising (including retargeting). These partners may set their own cookies and combine the data they collect with data they already hold about you.

Interest-Based Advertising & Opt-Out

You can manage or opt out of interest-based advertising through your browser cookie settings and through each partner: Google (adssettings.google.com and the Google Analytics Opt-out Browser Add-on), Meta (your Facebook ad preferences), and TikTok (your TikTok ad settings). You may also opt out via industry tools at optout.aboutads.info (DAA) and optout.networkadvertising.org (NAI). leadspply honors Global Privacy Control (GPC) signals for opt-out of Sale/Sharing where applicable.

2. Types of Data Collected

The Personal Data that leadspply collects, by itself or through the services above, includes:

• Identifiers — first and last name, email address, phone number, username, hashed password, and account/User ID.
• Insurance licensing information — National Producer Number (NPN), licensed states, and license status.
• Business identity — business legal name, EIN, business address, and website/microsite domain.
• Billing information — billing address and payment details (payment card data is processed by Stripe and is not stored by leadspply).
• Communications data — call recordings, SMS and email content and metadata, and consent records.
• Usage and technical data — IP address, browser and device information, pages viewed, interaction events, and system logs.
• Tracking and advertising data — cookies, pixels, device and advertising identifiers, and page-view/conversion events collected by our analytics and advertising partners (Google, Meta, and TikTok).
• Lead and consumer data — contact information for insurance leads you purchase and consumers you contact through the platform, processed on your behalf.

We do not collect Social Security numbers, dates of birth, government IDs, biometric or health data, or device sensor data. Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically when using leadspply. Some Data is mandatory to provide the services; failure to provide it may make it impossible for leadspply to deliver them. If you are unsure which Data is mandatory, contact us using the information at the end of this document.

3. Methods & Place of Processing

Methods of Processing

leadspply takes appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of your Data, including encryption in transit, access controls, and secure infrastructure. Processing is carried out using computers and IT-enabled tools, following organizational procedures strictly related to the purposes indicated.

In addition to leadspply, your Data may be accessible to people involved in operating leadspply (administration, sales, support, legal, system administration) and to the external service providers listed above, appointed as Data Processors where required. An updated list may be requested from us at any time.

Place

Data is processed at leadspply's operating offices and at the facilities of the service providers above, which are located in the United States. Depending on the User's location, data transfers may involve transferring Data to a country other than their own.

Retention Time

Unless specified otherwise, Personal Data is processed and stored for as long as required by the purpose for which it was collected, and may be retained longer due to applicable legal obligations or based on the User's consent.

4. Purposes of Processing

Data concerning the User is collected to allow leadspply to provide its services, comply with legal obligations, protect its rights, detect fraudulent activity, and for these specific purposes:

• Providing and operating the leadspply lead marketplace and sales platform
• Creating and authenticating your account
• Processing payments, subscriptions, and lead purchases
• Placing and receiving phone calls and sending SMS and email on your behalf
• Registering your texting brand and campaigns for carrier compliance (A2P 10DLC)
• Providing AI-assisted product recommendations and message drafting
• Verifying your insurance license
• Managing contacts, calendars, and automations (CRM)
• Monitoring errors, securing the platform, and improving our services
• Measuring site usage and advertising performance, and delivering and retargeting ads (via Google, Meta, and TikTok)
• Sending push notifications
• Complying with legal obligations and preventing fraud

5. Device Permissions

Because leadspply is a web application, the only device permissions we may request are:

• Microphone — required to place and receive calls through the in-browser dialer. Audio is used for the live call and, where applicable, call recording.
• Notifications — used to send push notifications, such as new-lead alerts and callback reminders.

You can grant or revoke these permissions at any time in your browser settings. Revoking microphone access will disable in-browser calling; disabling notifications will stop push alerts.

6. Detailed Processing Information

The categories of processing and the services that support them are:

• Platform, Authentication, Database & File Storage — Supabase
• Hosting & Content Delivery — Vercel
• Payments & Billing — Stripe
• Telephony, SMS & A2P 10DLC Registration — Twilio
• CRM, Automation & Messaging — GoHighLevel (HighLevel)
• Email Delivery — Resend
• AI Features — Anthropic (Claude)
• Address Autocomplete — Google Maps Platform (Places API)
• Calendar Display (optional) — Google Calendar API
• Scheduling (optional) — Cal.com
• Web Fonts — Google Fonts
• Analytics & Advertising — Google Analytics & Ads; Meta (Facebook) Pixel; TikTok Pixel
• Error Monitoring & Logging — Sentry
• License Verification — NIPR
• Push Notifications — Web Push

Each service processes only the data necessary for its function, as summarized in the table in Section 1, and in accordance with its own privacy policy.

6a. Google Calendar Data (Google API Services)

Users may optionally connect their Google Calendar so their existing appointments appear, read-only, on their leadspply calendar alongside appointments booked through the platform. When you connect Google Calendar:

• What we access. We request the read-only Google Calendar scope (calendar.readonly) and your Google account email address. We read event times and titles for the date range you are viewing. We never create, modify, or delete events.
• How we use it. Events are fetched on demand solely to render your own calendar view and to avoid double-booking. Calendar events are not stored on our servers, not used for advertising, not used to train AI or machine-learning models, and never shared with or sold to third parties. If an appointment setter on your team views your shared calendar, your Google events are shown to them only as "Busy" time blocks without titles.
• What we store. Only the OAuth tokens needed to maintain your connection and your Google account email address, kept encrypted at rest and accessible only to our backend service.
• Limited Use. leadspply's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• Revoking access. Disconnect at any time from your leadspply profile (which also revokes the grant with Google and deletes the stored tokens), or from your Google Account at myaccount.google.com/permissions.

7. Further Information

Push Notifications

leadspply may send push notifications to achieve the purposes outlined in this policy. Users may opt out at any time by adjusting notification preferences in their browser. Disabling push notifications may reduce the utility of leadspply.

Identifiers

leadspply may store identifiers — such as a push subscription token or session identifier — to deliver notifications and remember your preferences.

Legal Action

The User's Personal Data may be used for legal purposes by leadspply in court or in stages leading to possible legal action arising from improper use of leadspply or related services. The User acknowledges that leadspply may be required to reveal personal data upon request of public authorities.

System Logs & Maintenance

For operation and maintenance purposes, leadspply and its service providers may collect files that record interaction with leadspply (system logs) or use other Personal Data (such as the IP address) for this purpose.

Changes to This Privacy Policy

leadspply reserves the right to make changes to this privacy policy at any time by notifying Users on this page and, where feasible, via available contact information. We recommend checking this page periodically. Where changes affect processing based on consent, leadspply will collect new consent where required.

8. Your Rights Under GDPR

Users may exercise certain rights regarding their Data processed by leadspply. In particular, Users have the right to:

• Withdraw Consent at any time where you previously gave consent to the processing of your Personal Data.
• Object to Processing carried out on a legal basis other than consent, including direct marketing.
• Access Your Data — learn if your Data is being processed, and obtain a copy of the Data undergoing processing.
• Rectification — verify the accuracy of your Data and ask for it to be updated or corrected.
• Restrict Processing to storage only while your request is evaluated.
• Erasure — request deletion of your Personal Data from leadspply's systems.
• Data Portability — receive your Data in a structured, machine-readable format and have it transferred to another controller.
• Lodge a Complaint before your competent data protection authority.

How to Exercise These Rights

Requests can be directed to leadspply through the contact details at the end of this document. Such requests are free of charge and will be answered as early as possible and always within one month.

Legal Basis of Processing

leadspply may process Personal Data when one of the following applies:

• The User has given consent for one or more specific purposes.
• Provision of Data is necessary for the performance of an agreement with the User.
• Processing is necessary for compliance with a legal obligation.
• Processing is related to a task carried out in the public interest or exercise of official authority.
• Processing is necessary for the legitimate interests pursued by leadspply or a third party.

9. Your Rights Under US State Laws

This section supplements the rest of this privacy policy for Users who are residents of the following states: California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Nevada, Delaware, Iowa, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island, and Montana.

Categories of Personal Information Collected

• Identifiers (name, email, phone, account IDs)
• Commercial information (purchases and subscriptions)
• Internet or other electronic network activity (usage data and logs)
• Geolocation data (approximate, derived from IP address)
• Professional or employment-related information (insurance license and business details)
• Audio information (call recordings)
• Inferences (e.g., AI-generated product recommendations)

Rights Common to All US State Residents

• Right to Know — request confirmation that we are processing your Personal Information and access a copy of it.
• Right to Correct — request correction of inaccurate Personal Information we maintain about you.
• Right to Delete — request deletion of any of your Personal Information.
• Right to Portability — receive your Personal Information in a portable, usable format.
• Right to Opt Out of Sale or Sharing — opt out of the sale or sharing of your Personal Information, including sharing for cross-context behavioral advertising. leadspply does not sell your Personal Information for money, but our use of advertising cookies and pixels (Google, Meta, TikTok) may be considered a "sale" or "sharing" under some state laws. You can opt out as described in the Cookies & Trackers / Interest-Based Advertising section above, or via a Global Privacy Control (GPC) signal.
• Non-Discrimination — we will not discriminate against you for exercising any of your privacy rights.

Additional Rights — California Residents

• The right to opt out of the Sharing of your Personal Information for cross-context behavioral advertising.
• The right to limit our use or disclosure of your Sensitive Personal Information to only that necessary to perform services, as reasonably expected by an average consumer.

Additional Rights — Virginia, Colorado, Connecticut, Texas, Oregon, Nevada, Delaware, Iowa, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island, and Montana

• The right to opt out of the processing of your personal information for Targeted Advertising or profiling that produces legal or similarly significant effects.
• The right to freely give, deny, or withdraw consent for the processing of your Sensitive Personal Information.
• In Minnesota and Maryland: the right to obtain a list of the specific third parties to which we have disclosed your personal data.

Additional Rights — Utah and Iowa Residents

• The right to opt out of the processing of your Personal Information for Targeted Advertising.
• The right to opt out of the processing of your Sensitive Personal Information.

How to Submit a US Privacy Request

Contact us using the information at the bottom of this page. We must be able to verify your identity before processing your request. We will respond within the timeframe required by applicable law.

Global Privacy Control (GPC)

If you wish to opt out of Sale, Sharing, or Targeted Advertising via a user-enabled global privacy control such as the Global Privacy Control (GPC), you may do so and leadspply will abide by such requests in a frictionless manner.

10. Mobile & SMS Communications

SMS Opt-In Consent

By providing your phone number and checking the SMS consent box, you agree to receive SMS messages from leadspply about lead notifications, account and service updates, appointment and billing alerts, and platform follow-ups. Message frequency varies. Message and data rates may apply. Reply STOP to opt out and HELP for help.

Mobile Opt-In Data & Third-Party Sharing

Mobile opt-in data and consent will not be shared with third parties or affiliates for marketing or promotional purposes.

Opting Out

You may opt out of SMS communications at any time by replying STOP to any message you receive from us. After opting out, you will no longer receive SMS messages unless you re-enroll. To re-enroll, contact us at support@leadspply.com.

Calls Consent

By checking the calls consent box, you agree to receive phone calls from leadspply related to your account, leads, and platform services. You may withdraw this consent at any time by contacting us at support@leadspply.com.

Your Communication Preferences

Consent to receive SMS messages or calls is optional and is not required to use our services. Withdrawing consent will not affect the processing of any data we have already collected.

11. Contact Us

Owner and Data Controller

Leads Spply LLC (leadspply)
1261 S. 820 E. Suite #300
American Fork, UT 84003, United States
Email: support@leadspply.com

Requests to exercise your rights are free of charge and will be answered within one month.

© 2026 Leads Spply LLC (leadspply.com) — All rights reserved.