Data & Privacy Practices

Data handling

• Purpose-bound collection. Consumer data is collected to connect the consumer with the product they requested — nothing is harvested "because it might be useful."
• No blind resale. Leads are delivered to the campaign they were generated for. We are not a data broker reselling records across buyers.
• Minimum necessary sharing. Advertisers receive the fields their campaign requires; internal access is role-based and logged.

Consumer rights requests

• Access, deletion, and correction requests are honored per applicable state privacy laws (e.g., CCPA/CPRA and successors).
• Requests can be submitted via the contact page; identity is verified before disclosure or deletion.
• Opt-outs propagate to our suppression lists network-wide.

Security posture

• Encryption in transit for all delivery integrations; encryption at rest for stored records.
• Role-based access with audit logging on consent records and recordings.
• Vendor and subprocessor review before any consumer data touches a third-party system.
• Incident response procedure with contractual notification commitments to partners.