Privacy Policy

1.1 What This Policy Covers

This Privacy Policy covers information we collect through our marketing websites, our checkout flow, our communications with you (including email and phone), and our delivery of the Services to our customers.

1.2 What This Policy Does Not Cover

This Privacy Policy does not cover: (a) the privacy practices of websites we build, host, or operate for our customers (those websites are governed by the customer's own privacy policy); (b) the privacy practices of third-party platforms we use to deliver Services to our customers (for example, Google, Meta, ZocDoc, or call-tracking providers), which are governed by the third party's own policies; or (c) the privacy practices of third-party websites or services you access through links on our online properties.

1.3 No Protected Health Information (PHI)

Lead Massive is not a "Business Associate" under HIPAA and does not perform Services that require, request, or contemplate access to Protected Health Information. We will not knowingly collect, store, or process PHI under this Privacy Policy. If you are a customer of ours, your obligations regarding PHI are set forth in Section 6 of our Terms of Service. If you believe you have transmitted PHI to us in error, contact us immediately at the address in Section 14.

2.1 Information You Provide Directly

We collect information you give us when you interact with us, including: (a) name, business name, email address, phone number, and mailing address; (b) information about your business (industry, locations, specialties, current marketing channels, target audience); (c) checkout and account information (selected Service Plan, billing contact, payment method, and billing address); (d) communications with us (support requests, sales inquiries, scheduled calls, and messages); and (e) any other information you choose to share with us.

2.2 Information Collected Automatically

When you visit our online properties, we and our service providers automatically collect technical and usage information, including: (a) IP address and approximate location derived from it; (b) browser type, operating system, device identifiers, and screen resolution; (c) pages visited, referring URLs, time spent, and clickstream data; (d) cookies, local storage, pixel tags, and similar tracking technologies described in Section 4; and (e) conversion events (such as form submissions, page views, and checkout completions) tracked through advertising and analytics platforms.

2.3 Information from Third Parties

We may receive information about you from third parties, including: (a) lead-generation platforms, advertising platforms, and referral partners; (b) our payment processor (transaction confirmation, billing data, card brand and last four digits — we do not store full card numbers); (c) publicly available business directories and professional networks; and (d) data enrichment providers that help us understand the businesses we serve.

2.4 Information Collected During Service Delivery

When we provide the Services to a customer, we may receive access to platforms, accounts, and analytics owned by the customer (such as Google Search Console, Google Analytics, Google Ads, Meta Ads, Google Business Profile, ZocDoc, and call-tracking systems). Information we access through these platforms is treated as the customer's Confidential Information under our Terms of Service and is used solely to deliver the Services.

3.1 Aggregated and De-Identified Data

We may aggregate, anonymize, or de-identify information we collect and use it for any lawful business purpose, including improving our products, methodologies, and benchmarks. Aggregated and de-identified data is not subject to this Privacy Policy and is not used to re-identify you.

3.2 Legal Bases (for EEA/UK Residents)

If you are located in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases: (a) performance of a contract (when you are our customer); (b) our legitimate interests in operating, securing, and improving our business (provided those interests are not overridden by your rights); (c) compliance with our legal obligations; and (d) your consent, where required (such as for certain cookies and marketing emails).

4.1 What We Use

We and our service providers use cookies, pixel tags, web beacons, local storage, and similar technologies to operate our online properties, analyze usage, and deliver advertising. These technologies fall into the following general categories:

(a) Strictly Necessary — required for the website and checkout to function (for example, session tokens and security cookies). These cannot be disabled.

(b) Analytics and Performance — help us understand how visitors interact with our online properties (for example, Google Analytics 4 / GA4 and Google Tag Manager).

(c) Advertising — help us show relevant ads about Lead Massive on third-party platforms and measure their effectiveness (for example, the Meta Pixel, Google Ads tags, LinkedIn Insight Tag, and similar tools we may use from time to time).

(d) Functional — remember your preferences and personalize your experience.

4.2 Third-Party Tools We Currently Use or May Use

Examples include Google Analytics 4, Google Tag Manager, Google Ads conversion tracking, Meta Pixel (Facebook/Instagram), LinkedIn Insight Tag, and our customer relationship management (CRM) and email-marketing platforms. Each of these third parties processes information under its own privacy policy. We do not control, and are not responsible for, the privacy practices of those third parties.

4.3 Your Choices

You can manage cookies through your browser settings, opt out of advertising cookies through industry tools (such as the Digital Advertising Alliance's WebChoices and the Network Advertising Initiative), and use the Global Privacy Control ("GPC") signal where supported. We honor GPC signals as opt-out requests for the "sale" and "sharing" of personal information for cross-context behavioral advertising under applicable U.S. state laws. Disabling certain cookies may affect the functionality of our website or checkout flow.

5.1 We Do Not Sell Personal Information

We do not sell personal information for monetary consideration. Some U.S. state privacy laws (such as the California Consumer Privacy Act, as amended by the CPRA) broadly define "sale" or "sharing" to include certain disclosures of personal information for cross-context behavioral advertising. To the extent we use third-party advertising cookies and pixels described in Section 4, those disclosures may be considered "sharing" under applicable law. You may opt out of such sharing by using the GPC signal or by contacting us at the address in Section 14.

5.2 Service Providers and Vendors

We share information with third-party service providers who perform services on our behalf, such as hosting, payment processing, analytics, advertising attribution, email delivery, customer support, scheduling, project management, accounting, and legal services. We require these service providers to use the information only to provide services to us and to implement appropriate safeguards.

5.3 Business Transfers

If Lead Massive is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of our assets, information about you may be transferred to or accessed by the counterparties as part of that transaction. We will require any successor to honor the commitments in this Privacy Policy or provide you with notice and an opportunity to make choices about your information.

5.4 Legal Requirements and Protection

We may disclose information when we believe in good faith that disclosure is necessary to: (a) comply with a lawful subpoena, court order, regulatory request, or other legal process; (b) enforce our Terms of Service or other agreements; (c) protect the rights, property, or safety of Lead Massive, our customers, or others; or (d) investigate or prevent fraud, security incidents, or unlawful activity.

5.5 With Your Consent or at Your Direction

We may share information for any other purpose with your consent or at your direction (for example, when you ask us to integrate with a specific third-party platform on your behalf).

9.1 General

Depending on where you reside, you may have certain rights regarding your personal information. We honor applicable privacy rights regardless of whether your specific state's law expressly grants them, to the extent doing so does not unreasonably burden our operations or conflict with other legal obligations.

9.2 Common Rights Under U.S. State Privacy Laws

Subject to verification of your identity and limited exceptions under applicable law, you may request to:

(a) Access — confirm whether we process your personal information and obtain a copy or summary;

(b) Correct — ask us to correct inaccurate personal information;

(c) Delete — request deletion of personal information we have collected from you, subject to legal exceptions (for example, information needed to complete a transaction, comply with law, or detect security incidents);

(d) Portability — receive a copy of your personal information in a portable, machine-readable format;

(e) Opt-Out of Sale or Sharing — opt out of the "sale" or "sharing" of your personal information for cross-context behavioral advertising (as described in Section 5.1); and

(f) Limit Use of Sensitive Personal Information — to the extent we process sensitive categories defined under applicable state law.

9.3 California Residents — Additional Disclosures

Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), California residents have the rights described in Section 9.2 and the right to designate an authorized agent to make requests on their behalf. We do not discriminate against you for exercising your privacy rights. The categories of personal information we have collected, the purposes for which we use that information, the categories of sources, and the categories of third parties with whom we share that information are described throughout Sections 2, 3, and 5 of this Privacy Policy.

9.4 Texas Residents

Texas residents may have rights under the Texas Data Privacy and Security Act, including the rights to access, correct, delete, port, and opt out of certain processing of personal data. To exercise these rights, use the contact methods in Section 14. If you are a Texas resident and your privacy request is denied, you may appeal that decision by contacting us at the same address.

9.5 EEA/UK Residents

If you are located in the European Economic Area or the United Kingdom, you have additional rights under the GDPR (or UK GDPR), including the rights to object to processing, restrict processing, and lodge a complaint with your local supervisory authority. Where we rely on your consent as a legal basis, you may withdraw consent at any time without affecting the lawfulness of prior processing.

9.6 How to Exercise Rights

To exercise any rights described in this Section 9, contact us at the address in Section 14. We may need to verify your identity and the legitimacy of your request before fulfilling it. We will respond within the time period required by applicable law.

10.1 Marketing Emails

If you provide us with your email address (for example, by completing checkout, requesting a consultation, or subscribing to a list), we may send you marketing emails about our Services and content. Each marketing email includes an unsubscribe link, and we honor unsubscribe requests promptly in accordance with the CAN-SPAM Act and applicable state laws.

10.2 Transactional Emails

We will send transactional and account-related communications (for example, invoices, billing notices, account alerts, and notices required by our Terms of Service) for so long as you have an active account. These communications are not promotional and you cannot opt out of them while your account is active, except by terminating the engagement under our Terms of Service.

10.3 SMS / Text Messages

If we send you SMS or text messages, we will obtain consent in compliance with the Telephone Consumer Protection Act ("TCPA") and applicable carrier rules. You may opt out of marketing SMS at any time by replying STOP to any such message. Standard message and data rates may apply.