1. Who this policy applies to
This policy applies to visitors to LeadForm websites, contractors and service businesses using LeadForm, workspace members, and homeowners or prospects who submit information through a LeadForm-powered quote form.
When a contractor publishes a LeadForm quote form, that contractor is usually the business deciding why the homeowner data is collected and how it is used. LeadForm acts as the software provider that captures, stores, scores, routes, and syncs that data according to the contractor workspace settings.
2. Information we collect
Depending on how LeadForm is used, we may collect the following categories of information:
- Account information, such as name, email address, company name, workspace role, authentication identifiers, and billing status.
- Homeowner request information, such as name, email, phone number, ZIP code, service requested, urgency, project details, property context, budget, and preferred contact method.
- Consent evidence, including TCPA checkbox status, consent text, timestamp, form URL, country signal, and user agent where available.
- Operational data, such as form views, step progress, abandonment signals, requests, priority results, routing decisions, HubSpot status, launch checklist, and owner alerts.
- Attribution data, such as UTM source, medium, campaign, term, content, referrer, landing page, device/browser metadata, and approximate technical logs.
- Integration data, such as HubSpot portal identifiers, HubSpot avancé field mappings, encrypted OAuth tokens, test outcomes, and HubSpot contact IDs.
- Billing data handled through Lemon Squeezy, such as checkout status, plan, subscription identifiers, customer identifiers, and webhook events. LeadForm does not store full card numbers.
- Synthetic launch test data generated by admins to validate priority, routing, HubSpot, launch checklist, and paid-traffic safeguards before launch.
3. How we use information
We use information to operate LeadForm and help contractors convert owned job requests faster.
- Create, publish, render, and improve quote forms.
- Capture, validate, score, classify, and route homeowner job requests.
- Show Incoming Quotes priorities, next steps, launch exceptions, launch checklist, and activity timelines.
- Send HubSpot context, including creating or updating contacts and pushing request notes when enabled.
- Run launch tests, đ„ Urgent request proofs, 50-request simulation, cleanup tools, and traffic safety recommendations.
- Process billing, plan access, checkout redirects, webhook events, invoices, subscription status, and account upgrades.
- Detect abuse, troubleshoot errors, protect accounts, enforce policies, and maintain audit records.
- Measure product performance, reliability, and activation so the service can be improved.
4. Calls, texts, and TCPA consent
LeadForm quote forms can include an explicit consent checkbox for calls and text messages. When a homeowner submits the form with that checkbox selected, LeadForm stores the consent evidence listed above. This evidence helps the contractor document the request context.
Contractors remain responsible for making sure their calling, texting, email, auto-dialing, lead follow-up, Do Not Call, and opt-out processes comply with applicable law. LeadForm does not decide whether a contractor may legally call or text a homeowner.
5. Legal bases and business purposes
Where a legal basis is required, LeadForm may process information to perform a contract, provide requested services, support legitimate business operations, comply with legal obligations, protect the service, or act with consent where required.
For US privacy purposes, LeadForm uses information for business purposes such as providing software services, analytics, security, debugging, billing, customer support, fraud prevention, and integration delivery.
6. How information is shared
LeadForm may share information only as needed to operate the service or follow workspace configuration.
- With the contractor workspace that published the form and its authorized members.
- With connected CRM and workflow tools, such as HubSpot or Calendly, when enabled by the workspace.
- With infrastructure and product providers used to host, store, secure, analyze, bill, and deliver the service.
- With payment providers such as Lemon Squeezy for checkout, subscription, tax, invoice, and payment processing.
- With professional advisors, authorities, or counterparties if needed for legal, compliance, security, or corporate reasons.
LeadForm does not sell homeowner request data as a lead marketplace. The product is designed around owned contractor lead capture, not reselling shared leads.
7. Service providers
LeadForm may use providers such as Vercel for hosting, Supabase for authentication and database services, HubSpot for HubSpot delivery, Lemon Squeezy for billing, Google services for authentication or technical enrichment where configured, and email or scheduling providers used by the workspace.
Each provider processes data under its own terms and privacy commitments. Contractors should also review the privacy settings of any third-party integration they connect.
8. Cookies, analytics, and tracking
LeadForm may use cookies, local storage, and similar technologies to keep users signed in, protect the service, remember preferences, measure product usage, attribute form performance, and understand how visitors move through public quote forms.
Browsers may allow users to limit cookies or tracking technologies. Blocking some technologies may affect login, dashboard, public form, or analytics behavior.
9. Data retention
LeadForm keeps account, form, request, CRM, billing, and audit data for as long as needed to provide the service, support the workspace, maintain security records, comply with legal obligations, or resolve disputes.
Workspace admins may archive or clean synthetic launch test data through product controls. Some logs, webhook events, consent records, and billing records may be retained longer where needed for audit, security, tax, legal, or compliance reasons.
10. Security
LeadForm uses technical and organizational safeguards designed to protect data, including encrypted storage patterns for sensitive integration tokens, server-side validation, signed webhooks, access controls, tenant isolation, and production security headers.
No online service can guarantee absolute security. Customers should keep account access limited to trusted users, protect credentials, review connected integrations, and remove access when a team member leaves.
11. International transfers
LeadForm is designed first for US contractors, but service providers may process information in the United States or other countries where they operate. Those countries may have privacy laws different from the laws where a user lives.
12. Your privacy rights
Depending on location, users may have rights to request access, correction, deletion, portability, restriction, objection, or more information about certain processing. California residents may have rights under the CCPA/CPRA.
Homeowners who submitted a contractor form should first contact the contractor that received the request. LeadForm can help a workspace respond to valid requests when technically possible and legally appropriate.
13. Children
LeadForm is not directed to children and is not intended for use by anyone under 16. Contractors should not use LeadForm forms to knowingly collect information from children.
14. Changes to this policy
We may update this policy as LeadForm evolves, new integrations are added, legal requirements change, or business operations mature. The updated date above shows when the latest version was published.
15. Contact
For privacy questions, contact the LeadForm workspace owner that published the quote form. For platform privacy inquiries, contact LeadForm at privacy@useleadform.com.