1. What this covers
This Privacy Policy describes how LeadPointWeb(“we”) handles information collected through our website (and any subdomain), our quote-request form, and the dashboard our clients use to manage their site builds.
2. Information we collect
You give us:
- Identity and contact information you provide on the quote form or in messages (name, business name, phone, email, city/state, photos).
- Account credentials for the client portal (your email + a password hash; we never store your plain-text password).
- Payment information (handled by Stripe — see section 4).
- Content you upload to the site we build for you (text, photos, testimonials, business hours, services).
Collected automatically:
- Server logs (IP address, browser, page paths, timestamps) for security and abuse prevention.
- A session cookie that keeps you signed in to the client portal.
3. How we use it
- To respond to your quote request and prepare a proposal.
- To deliver, host, and support the website we build.
- To bill you for services you have ordered.
- To send you transactional emails (order confirmation, build status, password reset). We do not send marketing email without separate opt-in.
- To detect, prevent, and respond to fraud and abuse.
- To comply with legal obligations.
4. Service providers
We use a small set of trusted vendors to deliver the service:
- Vercel — hosts our dashboard and the client sites we deploy on your behalf.
- Stripe — processes payments. We never see or store your full card number.
- Turso / libSQL — stores client and account data.
- Google — for Sign in with Google (only if you opt in) and the optional Google Reviews link on your site.
Each provider has its own privacy practices. We share only the minimum information needed for each integration.
5. Sharing
We do not sell your personal information.
We may disclose information when required by law (subpoena, court order, lawful government request) or to protect our rights, property, or safety, or that of our users or the public.
6. Cookies
We use a small number of strictly necessary cookies to keep you signed in to the client portal and to remember CSRF / OAuth state during sign-in. We do not use third-party advertising cookies on the dashboard.
7. Data retention
We keep client account data for as long as your account is active and for a reasonable period afterward to satisfy our legal, accounting, and operational obligations. You may request deletion of your account data at any time via the contact form; some records (invoices, transactional logs) may be retained where law requires.
8. Your rights
Depending on your jurisdiction, you may have the right to access, correct, export, or delete the personal data we hold about you, and to object to or restrict certain processing. To exercise any of these rights, contact us via the form on the home page.
9. Security
We use TLS in transit, HTTP-only cookies, bcrypt-hashed passwords, and least-privilege access controls. No system is perfectly secure; if we detect a breach affecting your information we will notify affected users without undue delay.
10. Children
Our services are intended for businesses, not children. We do not knowingly collect information from anyone under 13.
11. Changes
We may update this Privacy Policy. The “Last updated” date at the top reflects the most recent revision. Continued use of our services after a change constitutes acceptance.
12. Contact
Questions or requests? Reach us via the contact form on the home page.