PRIVACY POLICY
Short version: we collect what we need to run the service. We don't sell your data. We don't sell your customers' data. Below is the long version.
Who runs LeadLayer
LeadLayer is operated by James J Kaiser Jr DBA LeadLayer, a sole proprietorship based in Las Vegas, NV, USA. "We," "us," and "our" refer to that entity.
What we collect from you (the contractor)
- Account info: name, email, business name, phone number, address, service area.
- Payment info: handled by Stripe. We don't store card numbers ourselves.
- Usage data: which pages you visit in the app, when you log in, what you click. Used to make the product better.
What we collect from your leads (your customers)
- Name, phone, email, address — whatever they share with the AI during the conversation.
- The full text of their conversation with the AI.
- Photos they send (e.g. of a damaged roof) if any.
This data belongs to you, the contractor. We process it on your behalf. We don't sell it. We don't share it with other contractors. It's used to qualify the lead and show it to you.
SMS messaging and TCPA compliance
Homeowners may opt in to receive SMS by checking an optional consent box in the LeadLayer web chat, as documented on our SMS Opt-In & Consent page. The checkbox is not required to use the chat. Only homeowners who opt in receive automated and AI-generated SMS responses about their service request, consistent with the Telephone Consumer Protection Act (TCPA).
Standard message and data rates may apply. Message frequency varies based on the conversation. To stop receiving messages at any time, reply STOP to any LeadLayer message. To get help, reply HELP. STOP and HELP responses are processed automatically and do not count against carrier rate limits.
We do not sell, share, or otherwise provide your mobile phone number, SMS opt-in, or messaging consent information to any third parties or affiliates for marketing or promotional purposes. Mobile information is used solely to deliver the messaging you requested and is not shared for any other purpose.
Who we share data with (subprocessors)
We use these third parties to run the service:
- Anthropic — for the AI that processes conversations. Conversation text is sent to their API. They don't train models on it.
- Twilio — for the phone number, SMS, and voice routing.
- Clerk — for login authentication.
- Railway — for hosting our backend and database.
- Cloudflare — for DNS, email forwarding on our company domain, and DDoS protection.
- Stripe — for payment processing.
- Netlify — for hosting our marketing site.
Each of these is a "subprocessor." They only access the data they need to do their job. We don't share data with any party not on this list. Business customers can request a Data Processing Agreement (DPA) for their records by emailing us.
International data transfers
Our infrastructure is hosted in the United States. If you or your leads are outside the U.S., your data will be transferred to and stored in the U.S. We rely on standard contractual measures with our subprocessors to protect international transfers.
What we DON'T do
- Sell your data or your leads' data.
- Share your leads with other contractors.
- Train AI models on your conversations.
- Track you across other websites.
- Use your data for advertising.
- Use SMS opt-in data for marketing or share it with third parties.
How long we keep your data
For as long as your account is active. If you cancel, we delete your data within 30 days. Anonymized usage logs may be retained longer for security and abuse monitoring. You can request export at any time by emailing hello@useleadlayer.com.
Cookies and tracking
The LeadLayer app uses cookies for login sessions (via Clerk) and basic usage analytics. The marketing site uses minimal first-party analytics to track page visits. We don't use third-party advertising cookies, retargeting pixels, or cross-site tracking.
Your rights (general)
You can:
- Access your data (most is visible in the app; for the rest, email us).
- Correct your data (Settings page in the app).
- Delete your data (cancel your account; we delete within 30 days).
- Export your data (email us, we'll provide a JSON or CSV export).
California residents (CCPA / CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act and California Privacy Rights Act:
- Right to know: what personal information we collect, how we use it, and who we share it with (this policy covers all of that).
- Right to delete: request deletion of your personal information.
- Right to correct: request correction of inaccurate personal information.
- Right to opt out of sale or sharing: we don't sell or share your personal information, so there's nothing to opt out of.
- Right to non-discrimination: we won't deny you service for exercising any of these rights.
To exercise any of these rights, email hello@useleadlayer.com. We'll respond within 45 days as required by law. You can also authorize an agent to make a request on your behalf — we'll verify the authorization before acting.
European residents (GDPR)
If you are in the European Economic Area, UK, or Switzerland, our legal basis for processing your personal data is the contract between us (to provide the LeadLayer service) and our legitimate interest in operating and improving the service. You have the right to access, correct, delete, port, or object to processing of your data. Contact us to exercise these rights. You also have the right to lodge a complaint with your local data protection authority.
Children
LeadLayer is for business use by contractors. We don't knowingly collect data from anyone under 18. If you believe we've collected data from a minor, contact us and we'll delete it.
Security
We use industry-standard practices to protect your data: TLS in transit, encryption at rest, tenant isolation at the database level, signed webhooks, rate limits on public endpoints, and strict access controls. No system is perfectly secure, but we take this seriously.
Changes
If we change this policy in a way that affects how we handle your data, we'll email you and update the "Last updated" date above. Continued use after a change means you accept the new policy.
Contact
Questions, requests, complaints — email hello@useleadlayer.com.