Privacy Policy

1. Who This Policy Covers

This Policy covers website visitors, prospects, customers, authorized users, vendors and job applicants; people who appear in public-record-derived or otherwise lawfully sourced datasets processed by the platform (“Data Subjects”); and our communications, support, billing, security and privacy-request records.

It does not govern how a customer independently handles data it obtains through the platform. Customers are separate businesses, responsible for their own notices and their own legal basis. Third-party sites and services we link to have their own policies.

2. Information We Collect

Account and identity information — name, work email, role, organization, authentication details, and the licensing, professional or compliance-verification information we ask for before granting access.

Sign-in provider data — if you sign in with Google or Microsoft we receive your name, email address and account identifier from that provider, solely to verify who you are and match you to an authorized account. We never receive your provider password.

Usage, device and security data — sign-in attempts, IP address, browser and device identifiers, approximate location derived from IP, cookie and log data, and the actions taken in the application.

Billing and transaction data — subscription, plan, payment status and support history. Card details are handled by our payment processor, not stored by us.

Customer business data — the lead, party, property, task, note, attachment and pipeline records your organization creates, imports or generates in the platform. This belongs to your organization; we process it on its behalf.

Public-record and event data — case or instrument numbers, filing type, status and date, the court or agency, parties named in a record, property and estate-related information, and the record's location.

Data from licensed or lawful commercial sources — which may include contact, household, property, demographic or identity-resolution attributes used for matching, validation and enrichment.

Derived data — inferences, match indicators, confidence and opportunity scores, category labels and workflow status generated by our scoring and AI features.

Consent and suppression records — communications preferences, consent evidence, complaints, opt-outs, do-not-contact entries and privacy-request records.

We do not intentionally collect Social Security numbers, full financial-account credentials, medical records, precise geolocation or children's data for ordinary lead products. Where a source unexpectedly contains high-risk data we apply minimization, restriction or deletion controls.

3. Where Information Comes From

From you and your organization directly; from public court, recorder, assessor, tax, probate, property, corporate and licensing records; from lawful open-data portals; from licensed data providers and service providers; from our business partners; from your browser and device; and from information we derive through matching, standardization, scoring and analysis.

“Public record” describes where data came from. It is not a blanket legal exemption. We assess the additional restrictions that may apply to collecting, using, disclosing and retaining each source.

4. How We Use Information

To provide, operate, secure and improve the Services; to authenticate users and administer accounts; to compile, match, deduplicate, validate, score and update lawful data products; to process orders and payments; to support users; to prevent fraud and abuse; to investigate complaints; to maintain suppression and audit records; to comply with law and with the terms imposed by our data sources; to enforce our agreements; to perform analytics; to communicate about the Services; and to establish, exercise or defend legal claims.

We do not use Lead Data to determine any person's eligibility for credit, insurance, employment, housing, tenancy, government benefits or any other purpose regulated by the FCRA. We do not sell personal information for advertising purposes and we do not use it for cross-context behavioural advertising.

Some platform features send text to third-party AI model providers to summarize, draft or classify. Those providers act as our processors under contract, and we do not permit them to train general-purpose models on your data.

5. How We Share Information

With customers who receive authorized lead products; with cloud hosting, security, analytics, payment, support, communications, data-enrichment, AI and professional-service providers that process data only on our instructions and under confidentiality obligations; with participants in a corporate transaction; and with authorities or other parties where reasonably necessary for legal compliance, safety, fraud prevention or protection of rights.

We do not share personal information with third parties for their own marketing purposes.

Some transfers of lead data for monetary or other valuable consideration may be treated as a “sale”, “sharing” or targeted advertising under certain U.S. state privacy laws, even though we do not use those labels colloquially. Where that applies, we provide the required notice and opt-out mechanism and honour recognized opt-out preference signals, including Global Privacy Control.

6. Cookies and Analytics

We use essential, functional and analytics technologies on our website. Where consent is required, non-essential technologies do not activate before you give it, and you can change your choice at any time through the consent tool. See our Cookie Notice for the categories, purposes and lifetimes involved.

7. International Transfers

LeadQuarry is operated from Brazil and its infrastructure and sub-processors are located in the United States and other countries. Where we transfer personal information across borders we rely on the transfer mechanisms available under applicable law and require contractual safeguards from our processors.

8. Retention

We keep information only as long as reasonably necessary for the purposes described here and for our contractual, source, security, suppression, dispute, tax and legal obligations. Retention depends on the data type, its sensitivity and freshness, the source's update cycle, account status, limitation periods and deletion rights. Consent evidence and suppression records are kept for as long as the law and the relevant claim periods require, and suppression entries may be kept in minimized form specifically to prevent data being reintroduced. Our Data Security & Retention Policy sets out the schedule.

9. Security

We protect data in transit with TLS and at rest with database-level encryption, apply role-based least privilege and multi-factor authentication on the administrative consoles used to operate the Services, log administrative and export activity, and restrict access to authorized personnel. No system is completely secure. High-level detail is published in our Data Security & Retention Policy; implementation specifics are not published because doing so would increase risk.

10. Your Rights

Depending on where you live, you may have the right to know or access, correct, delete, obtain a portable copy, opt out of sale, sharing, targeted advertising or certain profiling, limit certain sensitive-data uses, withdraw consent, appeal a denial, and receive equal service for exercising a right. Brazilian residents have the corresponding rights under the LGPD, including confirmation of processing, anonymization or blocking, portability, and information about shared parties.

Submit a request by emailing [email protected]. Tell us which right you want to exercise and give only the information reasonably necessary to locate your records. We verify requests proportionately, respond within the applicable time limits, explain any denial and offer an appeal route where required. Authorized agents may submit requests where the law permits. We will not discriminate against you for exercising a right.

If your request concerns records held by one of our customers rather than by us, send it to that customer; we will assist where our contract allows. See Your Privacy Choices for the full request pathway.

11. Children

The Services are business tools intended for authorized adult users and are not directed to children. We do not knowingly collect personal information from children, and our lead products are not designed to identify minors. If you believe we hold data about a minor, report it to [email protected] for review and suppression.

12. Changes and Contact

We may update this Policy to reflect changes in our operations or the law. We will revise the “Last updated” date and give additional notice where required. Material changes are communicated to account administrators.

Contact us at [email protected].