Privacy Policy

Who we are

LeadsAlto is a lead-generation service operated by LeadsAlto LLC, an Arizona limited liability company owned by Alluvion AI LLC (Wyoming) (“LeadsAlto,” “we,” “our,” or “us”). We provide exclusive, qualified sales leads to local service businesses. This Privacy Policy explains how we collect, use, share, and protect personal information when you visit our website, respond to an advertising campaign we operate, use our services, or otherwise interact with us. It also serves as our notice at collection under California law.

Scope & our role

This policy covers two audiences: clients and prospects (the businesses that hire us or inquire about our services) and consumers (people who respond to an advertisement we operate on a client’s behalf).

When we generate a consumer lead, we act as the business/controller responsible for our own collection and qualification of that information. Once we deliver a lead to the client that funded the campaign, that client independently decides how to contact and use the information and becomes a separate controller responsible for its own privacy and communications practices. This policy does not govern how a client handles a lead after delivery; please refer to that business’s own privacy policy.

Information we collect

We collect information you provide directly, information collected automatically, and information generated when we operate advertising campaigns.

Information you provide directly

• Client & prospect inquiries: name, company, email address, phone number, industry, service area, and details about your business needs.
• Consumer lead information: if you responded to an advertisement operated by LeadsAlto, we may collect your name, phone number, email, ZIP code, the service requested, and answers to qualifying questions (such as timeline, budget range, or property type).
• Communications: the content of emails, text messages, and voice interactions with our qualification systems.
• Billing details (clients): payment information processed through our payment provider; we do not store full card numbers ourselves.

Information collected automatically

• Device and browser information (type, operating system, IP address).
• Usage information (pages viewed, time on page, referring URL, general geographic region).
• Cookies and similar technologies (see § Cookies & tracking).

Categories under California law

The table below maps the above to the statutory categories used in the CCPA/CPRA.

We do not intentionally collect Social Security numbers, precise geolocation, government IDs, financial account credentials, health data, or other “sensitive personal information” as defined by the CCPA. We do not use or disclose sensitive personal information for purposes that would trigger the right to limit its use. If this changes, we will update this policy.

Sources of information

We obtain personal information from: (a) you directly, when you fill out a form, contact us, or interact with our qualification systems; (b) automatically, from your device and browser when you visit our website or landing pages; and (c) our clients, in connection with setting up and servicing their accounts.

How we use information

We use the information we collect to:

• Provide, operate, and improve our lead-generation services.
• Qualify consumer prospects against a client’s criteria (service area, ticket size, timeline, etc.) before delivering them as leads.
• Deliver qualified leads to the corresponding client via email, text message, or webhook.
• Contact consumers by call or text to qualify their request (see § Text messages & calls).
• Communicate with clients about their accounts, billing, and service performance.
• Measure and improve the performance of advertising campaigns.
• Detect, prevent, and respond to fraud, abuse, security incidents, and unauthorized access.
• Comply with legal obligations and enforce our terms.

How we share information

We do not sell consumer lead information to third parties in the traditional lead-broker sense. Every qualified consumer lead we generate is delivered exclusively to a single client — the business that paid for it — and is never resold, redistributed, or shared with additional buyers. We share information only as follows:

• With our clients: when you submit an inquiry through an ad campaign we operate, your qualified lead information is delivered to the corresponding local service business so they can contact you.
• With service providers: hosting, telephony/SMS, email delivery, analytics, CRM, and payment-processing vendors that act on our behalf under written confidentiality and data-protection obligations, and that are not permitted to use the information for their own purposes.
• For legal reasons: when required by law, subpoena, or court order, or to protect rights, safety, or property.
• In a business transfer: in connection with a merger, acquisition, or sale of assets, subject to standard confidentiality protections.

Sale & sharing

Under the broad definitions in California and other state privacy laws, delivering a lead to the client that funded a campaign may be considered a “sale” or “sharing” of personal information. You can opt out at any time; details and the opt-out methods are on our Do Not Sell or Share My Personal Information page. We do not use advertising or tracking cookies for cross-context behavioral advertising, and we do not knowingly sell or share the personal information of consumers under 16 without opt-in consent (see § Children).

Text messages & calls

If you provide your phone number through one of our campaigns, you agree that we (and the client to whom your lead is delivered) may contact you by phone call and text message about the services you requested, including through automated technology where permitted. Consent to receive marketing texts is not a condition of any purchase.

Message frequency varies. Message and data rates may apply. You can opt out of text messages at any time by replying STOP, and reply HELP for assistance. Opting out of texts from us does not automatically opt you out of communications from a client that has already received your lead; contact that business directly. We and our clients maintain internal do-not-call and do-not-text practices as required by applicable law.

Cookies & tracking

We use only cookies and similar technologies that are necessary to operate our website and to understand basic site traffic. We do not use advertising or tracking cookies to build profiles about you or to share your information for cross-context behavioral advertising. You can control cookies through your browser settings; blocking certain cookies may limit site functionality.

Retention

We retain personal information for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Consumer lead records are typically retained for up to 36 months from the date of collection, after which they are deleted or de-identified. Client account records are retained for the duration of the client relationship plus a reasonable period thereafter. When we no longer need information, we delete or de-identify it.

Your privacy rights

Depending on where you live, you may have the right to:

• Know / access the personal information we hold about you, including the categories, sources, purposes, and recipients.
• Correct inaccurate personal information.
• Delete your personal information.
• Opt out of the sale or sharing of personal information — see our Do Not Sell or Share My Personal Information page.
• Limit the use of sensitive personal information (we do not use sensitive personal information in ways that trigger this right).
• Withdraw consent where we rely on your consent to process information.
• Non-discrimination — we will not discriminate against you for exercising these rights.
• Appeal — in states that provide it, you may appeal a decision to decline a request (see below).

How to submit a request

Submitting. Email [email protected], or use the form on our Do Not Sell or Share page for opt-out requests. Tell us the type of request and your state of residence.

Verification. For access, deletion, and correction requests, we will take reasonable steps to verify your identity by matching the information you provide against our records before acting; we may request additional information if needed. Opt-out of sale/sharing does not require identity verification.

Authorized agents. You may use an authorized agent to submit a request. The agent must provide proof of authorization, and we may contact you to confirm.

Timing. We will acknowledge and respond within the timeframe required by applicable law (generally, opt-out requests within 15 business days; access/deletion/correction requests generally within 45 days, extendable as the law allows).

Appeals. If we decline a request and your state grants an appeal right, you may appeal by emailing [email protected] with the subject “Privacy Request Appeal.” If your appeal is denied, you may contact your state Attorney General.

Security

We use reasonable technical and organizational safeguards to protect personal information, including encryption in transit, access controls, and vendor security reviews. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children

Our services are not directed to children, and we do not knowingly collect personal information from children under 16. We do not knowingly sell or share the personal information of consumers under 16 without opt-in consent — for those 13 to 16, the consumer must opt in; for those under 13, a parent or guardian must opt in. If you believe a child has provided us with information, contact us so we can remove it.

Third-party links & U.S. scope

Our website and campaigns may link to third-party sites and to our clients’ websites; we are not responsible for their privacy practices, and we encourage you to review their policies. Our services are intended for users in the United States and are not directed to individuals in the European Union, United Kingdom, or other regions with separate data-protection regimes.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Material changes will be communicated through our website or by email where appropriate.

Contact us