Privacy Policy

BridgeLeads is a business-to-business service that compiles real-estate lead information from public records (county recorder, assessor, and court filings) and related data sources, and delivers it to business customers (real-estate investors and professionals).

• Account data: your email address and a securely hashed password.
• API credentials: a hashed API key, if you create one.
• Subscription & usage data: plan, record and skip-trace usage counters, trial and billing dates, and referral relationships.
• Payment data: processed by Stripe. We store only a Stripe customer identifier — we never receive or store your full card number.
• Security & log data: IP address and request metadata recorded for authentication, security auditing, and rate-limiting.

We do not use third-party advertising, analytics, or session-replay trackers in our application backend.

To provide the service we compile information from public records and licensed data sources. Depending on the source and the customer's configuration, a lead record may include:

• Name(s) and, for probate records, named heirs;
• Property address, mailing address, parcel identifier, and legal description;
• Record type and date (e.g., pre-foreclosure, tax-delinquency, probate, divorce, code violation, eviction);
• Where a customer enables skip tracing: a phone number, phone type, a Do-Not-Call indicator, and/or an email address obtained from a third-party skip-trace provider.

We obtain this information from government public records and the providers listed in Section 6. We do not knowingly collect it directly from the individual.

• To provide, operate, secure, and bill the service;
• To compile and deliver lead lists to the business customer who requested them;
• To prevent fraud and abuse and to comply with law;
• To send service and account messages.

We share information only as needed to run the service, with the sub-processors in Section 6, and:

• with the customer who configured the relevant lead job (lead records are delivered to that customer);
• to comply with law or legal process, or to protect rights and safety;
• in connection with a corporate transaction (merger or acquisition), subject to this policy.

We act as a data broker in certain U.S. states. Where required, we register as a data broker and honor the rights described in Section 8.

We use the following providers, each under a data-processing agreement:

• Supabase — database hosting
• Railway — application and worker hosting
• Vercel — frontend hosting
• Cloudflare R2 — export file storage
• Upstash (Redis) — rate-limiting and queueing
• Anthropic — AI-assisted data extraction
• Tracerfy — skip-trace (phone/email) lookups
• Regrid — property data enrichment (optional)
• Stripe — payment processing
• Resend — transactional and delivery email

• Lead records are retained for approximately 365 days, then deleted.
• Skip-trace results are cached for up to 90 days.
• Account data is retained for the life of the account and as required by law thereafter.
• Security logs are retained for [retention period].

Depending on where you live (e.g., California/CCPA-CPRA, other U.S. state laws, and the EU/UK GDPR where applicable), you may have the right to access, correct, delete, or port your information, and to opt out of the “sale” or “sharing” of personal information.

This includes people in our lead records who are not customers. To exercise any right — including requesting deletion of your information from our lead data — email privacy@bridgeleads.com. We will verify and respond within the timeframes required by law.

We do not sell information about individuals under 18, and the service is not directed to consumers or to anyone under 18.

We protect information using encryption in transit, hashed credentials, access controls, rate-limiting, and secret redaction in logs. No method is perfectly secure. To report a vulnerability or suspected incident, email security@bridgeleads.com.

We are based in [country] and process data in the United States. If we serve individuals in the EU/UK, transfers rely on Standard Contractual Clauses or another lawful mechanism.

We will post changes here and update the date above; material changes will be communicated to account holders. Contact: [legal entity name], [mailing address], privacy@bridgeleads.com.