Privacy Policy

We collect three categories of information:

Information you provide to us. Name, business name, work email, phone, mailing or service address, agency role, agent count, application responses, support messages, dispute correspondence, and any other content you submit through forms, application, dashboard, or email.

Information generated as you use the Services. Account identifiers, login timestamps, IP address, browser and device information, pages viewed, features used, orders placed, dialer-seat activity, lead campaign assignments, dispositions, recordings (where applicable and disclosed), and similar usage telemetry.

Information from third parties. Payment, billing, and dispute information from Stripe, Inc. (our payment processor); deliverability and email-engagement events from Resend (our transactional email provider); telephony metadata from our dialer and Pay-Per-Call partners; identity, fraud, and carrier-routing signals from service providers; and lead source, opt-in, and TrustedForm certificate data from our acquisition partners and lead suppliers.

We use information to:

• Provide, operate, secure, and improve the Services, including authenticating you, provisioning dialer seats, delivering ordered leads, routing calls, and rendering dashboards.
• Process payments, prevent fraud, defend against chargebacks and payment disputes, and meet our financial recordkeeping obligations.
• Communicate with you about your account, transactions, support requests, product updates, and important policy changes.
• Send marketing communications about LeadCore products you have not yet purchased; you can unsubscribe at any time using the link in any marketing email or by emailing us.
• Maintain audit logs and contractual records sufficient to evidence the validity of charges, deliveries, and consents (see our Terms of Service for related obligations).
• Comply with applicable law and respond to lawful requests from government authorities.

Information collected through the Services is stored on managed cloud infrastructure operated by our service providers, including Supabase (for our application database and authentication), Stripe (for payment, billing, and dispute records), Resend (for transactional email logs), and our hosting and observability providers. These providers process information on our behalf under contractual obligations.

We use industry-standard administrative, technical, and physical safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction. No system is perfectly secure, however, and we cannot guarantee the security of any information.

We retain information for as long as your account is active and for a reasonable period afterward to satisfy our legal, accounting, dispute-resolution, and audit obligations. In particular, account, billing, dispute, and consent records are retained for at least seven (7) years after the last related transaction, or longer where required by law.

We may share information with:

• Service providers that help us operate the Services (e.g., Supabase, Stripe, Resend, our dialer and Pay-Per-Call partners, our hosting and analytics providers).
• Partners when you have asked us to do so, for example when you order a lead that is then delivered to your agency or downline.
• Authorities when required by valid legal process or to investigate potential fraud, misuse of the Services, or violations of our Terms.
• Corporate transactions — in connection with a merger, acquisition, financing, or sale of assets, subject to customary confidentiality protections.

We do not sell your personal information for monetary consideration.

You can review and update most of your account information from your dashboard. You can opt out of marketing emails using the unsubscribe link in any marketing message. Transactional emails related to your account, billing, security, or legal notices cannot be opted out of as long as your account is active.

You can request a copy of the personal information we hold about you (a “data access request”) or ask that we delete your personal information (a “data deletion request”) by following the steps below. Depending on the jurisdiction in which you reside, you may have additional rights under applicable privacy laws.

How to submit a request:

1. Email support@inboundcore.com from the email address associated with your LeadCore account. Use the subject line “Data Access Request” or “Data Deletion Request.”
2. Tell us which request type you are making and, briefly, the scope (for example: “all data” or a specific category such as “dialer activity logs”).
3. We will reply within a reasonable period — generally within 30 days — to confirm receipt and request any additional verification needed to confirm you are the account owner. We do this to protect your information from unauthorized disclosure.
4. Once verified, we will either (a) send you an export of your data in a portable, machine-readable format, or (b) delete the relevant personal information from our active systems and instruct our service providers to do the same.

Limits on deletion. We may retain certain information after a deletion request when we are required or permitted to do so by law — for example, billing and tax records, payment-dispute evidence, fraud- prevention records, audit logs, opt-in/TrustedForm certificates, and information necessary to defend or pursue legal claims. In those cases, we will limit access to the retained information to the purposes for which it was kept.

If you are submitting a request as a consumer who appeared as a lead in the LeadCore network (rather than as a LeadCore customer), please include the phone number or email address used at the time of opt-in so we can locate the relevant records.

We use cookies and similar technologies to keep you signed in, remember your preferences, measure how the Services are used, and improve them over time. Most browsers allow you to block or delete cookies; doing so may affect parts of the Services that rely on them, such as authentication.

The Services are intended for use by licensed insurance professionals and are not directed to children under the age of 18. We do not knowingly collect information from children. If you believe a child has provided us information, contact us at support@inboundcore.com and we will delete it.

We may update this Privacy Policy from time to time. If we make material changes we will notify you by email or by posting an updated version with a new “Last updated” date. Your continued use of the Services after the changes take effect constitutes your acceptance of the revised Policy.

Privacy questions, data access requests, and data deletion requests can be sent to support@inboundcore.com.