Privacy Policy

Effective: 2026-05-26 Version: 2026-05-26.v2

This Privacy Policy describes how Lead Friendly LLC ("we", "us") collects, uses, and protects personal information about visitors to www.leadfriendly.com and customers of Lead Friendly LLC's services. Lead Friendly LLC acts as the data controller for the personal information described below.

Where Lead Friendly LLC provides services on behalf of business customers — including any agency, sub-account, or end-client that contracts with Lead Friendly LLC to use the Service — those business customers act as the data controllers for their own end-users' personal information and Lead Friendly LLC acts as their processor (or sub-processor where the business customer is itself acting as a processor). Each business customer's own privacy policy governs personal information that Lead Friendly LLC processes on its behalf.

1. Information we collect

You provide to us when signing up or using the service:

Identifiers: name, business name, email address, phone number, billing address.
KYC information: government-issued ID and selfie (verified by a third-party identity provider — we receive only a pass/fail result and limited metadata).
Payment information: handled by Stripe; we receive last-four card digits and a customer reference, never the full PAN.
Content you upload: contact lists, calling scripts, recordings, AI-agent configuration.

Collected automatically:

Usage: IP address, browser type, pages viewed, actions taken.
Cookies and similar identifiers: see our Cookie Policy.
Call metadata: phone numbers dialled, call duration, disposition, outcome.

Call recordings and transcripts:

We record outbound calls our customers place through the service. State-specific consent rules are addressed by an in-call disclosure played at the start of recorded calls.
Transcripts are generated automatically and retained according to your account's retention setting (default: 90 days).
We do not use customer call content to train AI models.

2. How we use your information

Operate the service and bill you.
Verify your identity and your business for compliance with telephony regulations (TCPA, A2P 10DLC, E911).
Send transactional email (sign-up, password reset, billing, service notices).
Send product updates and marketing only with your opt-in or where permitted by law; you can opt out at any time.
Detect, prevent, and investigate fraud, abuse, security incidents.
Comply with legal obligations.

3. Who we share information with

We share personal information only with:

Service providers acting as subprocessors — see our Sub-processors page for the full list.
Law enforcement and regulators when we have a legal obligation to do so or to protect rights and safety.
Successor entities in connection with a merger, acquisition, or sale of substantially all our assets, subject to confidentiality.

We do not sell personal information. We do not "share" personal information for cross-context behavioural advertising (CCPA/CPRA sense).

4. Your rights

Depending on where you live, you may have the right to:

Access — know what personal information we hold about you.
Delete — request deletion of your personal information.
Correct — fix inaccuracies in your personal information.
Port — receive a copy of your personal information in a portable format.
Opt out — of any sale or sharing for advertising (we do neither).
Limit the use of sensitive personal information — including voice recordings used to identify you, where applicable.
Non-discrimination — we will not deny you service for exercising your rights.

To exercise any of these rights, email privacy@leadfriendly.com. We respond within 45 days (CCPA / state laws) or 30 days (GDPR), subject to extensions where allowed.

5. Children's information

Our service is not directed to children under 16. We do not knowingly collect personal information from anyone under 16.

6. International transfers

If you are located outside the United States, personal information you provide will be transferred to and processed in the United States. Where required, transfers from the EU/UK are governed by the EU Standard Contractual Clauses incorporated into our Data Processing Addendum.

7. Data retention

Our retention schedule is set out in detail in the Data Processing Addendum §8.3–8.4. Summary:

Operational customer content (CRM data, automation configuration, message and call logs): kept while your account is active. For 30 days after termination it remains available for reactivation and self-service export, after which it is deleted or de-identified.
Call recordings and transcripts: retained for as long as they are needed for the purposes described in our Recording Disclosure — quality assurance, regulatory attestation, and payment-dispute and chargeback defense — and for any longer period required by law or by an active legal hold. Account holders may request earlier deletion subject to legal-hold exceptions.
Identity-verification (KYC) records: up to 7 years after account closure (anti-fraud, tax, telecom record-keeping requirements).
Telephone-consent (PEWC) records: up to 7 years (TCPA defense).
Call and message metadata and compliance audit logs: up to 3 years.
Billing and payment-transaction records: for the period required by applicable tax and accounting law (typically 7 years).
Records evidencing acceptance of the Agreement and policies: for as long as they may be needed as evidence of the contractual relationship.
Backups: rolling 90-day retention cycle, overwritten in the ordinary course; backup data is not restored into production except for disaster recovery.

8. Security

See our Security page for current controls. We will notify you of any breach affecting your personal information without undue delay and no later than 72 hours after we confirm the incident.

9. Changes

Material updates to this Privacy Policy will be posted on this page with a new Effective date and, where required by law, notified to you by email.

10. Contact

Lead Friendly LLC Lead Friendly LLC, PO Box 88413, Tukwila, WA 98138 privacy@leadfriendly.com