Privacy Policy

1Who this policy covers

Most privacy policies describe one relationship. This product has three, and conflating them would hide the one that matters.

• Visitors — people who read quickleadsllc.org without signing up. Section 2.
• Customers — people who create an account and subscribe. They gave us their information directly. Sections 3 to 6.
• Property owners named in filings — people whose Notice of Default or Notice of Trustee’s Sale was recorded by a county, whose contact details we append from third-party sources, and who have no relationship with QuickLeads and did not choose to be here. Section 7. If that is why you are reading this, go straight there.

One policy covers both quickleadsllc.org and the portal at app.quickleadsllc.org. They are the same company doing the same things with your information, and two documents would only create two versions to disagree with each other.

2Visitors to this site

If you are reading quickleadsllc.org and have not signed up, we hold very little about you: whatever your browser sends with a request, and anything you type into a contact or demo form.

This site runs no analytics, no advertising pixels, no session recording and no third-party trackers. There is no Google Analytics tag, no Meta pixel and no heatmap tool. We do not sell or share your browsing information with anyone, for advertising or otherwise, which is why this site carries no “Your Privacy Choices” opt-out link. If that ever changes, this section changes first.

Our host, Vercel, keeps ordinary server request logs, which include IP address, requested URL, user agent and timestamp, to serve the site and to defend it against abuse.

3What we collect about customers

• Account: name, email address, and a password or a one-time email code.
• Subscription: plan, county, status and billing history. Card details go to Stripe and are never held by us.
• Use of the portal: saved and watched filings, saved searches, layout and grid preferences, notification settings, onboarding progress.
• Google Calendar connection: only if you connect one. We store an encrypted refresh token and the identifier of the calendar we create.
• Email delivery events: whether the emails we send were delivered, opened or bounced.
• Technical: request logs and error reports kept by our hosting provider.

We use this to run your subscription, deliver the filings you pay for, support you, and keep the service secure. We do not use it to build a profile of you for anyone else.

4Who we share customer information with

Each of these is a processor doing one specific job, not a partner we sell to:

• Supabase — the database and the sign-in system.
• Vercel — hosting and request logs.
• Stripe — payments and subscription state.
• Resend — transactional email and its delivery events.
• Google — sign-in with Google, and the Calendar API if you connect a calendar.
• Mapbox — map tiles and geocoding for the map view.
• Google Cloud Storage — storage for the recorded filing documents.

We also disclose information where the law requires it, to enforce our Terms & Conditions, or as part of a merger, acquisition or sale of assets, in which case this policy travels with the data.

We do not sell customer account information.

Google user data

QuickLeads’ use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically, when you connect a Google Calendar:

• we request only the scopes needed to create and maintain a single QuickLeads calendar in your account and to write the filings you watch into it;
• that data is used solely to provide the calendar feature you asked for, and for no other purpose;
• it is not transferred to anyone except as necessary to provide that feature, to comply with applicable law, or as part of a merger or acquisition;
• it is never used for advertising, and never sold;
• no human at QuickLeads reads it, except with your explicit consent, to resolve a support issue you have raised, or where security or the law requires it;
• you can disconnect at any time from the calendar page, which revokes our access and deletes the stored token. The refresh token is encrypted at rest while connected.

5Cookies and local storage

We use cookies to keep you signed in. They are strictly necessary; there are no advertising or analytics cookies on either the site or the portal.

The portal also stores small preferences in your own browser, such as your theme and whether you read result sets as a table or as cards. Those never leave your device and are not used to track you.

Your calendar feed address contains a private token. Anyone with that link can read the filings you watch, so treat it as a credential. You can rotate it from the calendar page, which immediately breaks every client subscribed to the old address.

6How long we keep customer information

We would rather describe what actually happens than publish a schedule nothing enforces.

• Active accounts: for as long as the account exists.
• Closed accounts: when you close your account it becomes inactive immediately and enters a 30-day recovery window, so a closure made in error, or a card dispute that arrives late, can still be undone. After 30 days an automated job permanently deletes the account: the profile, saved and watched filings, saved searches, notification settings, avatar and sign-in record all go, and any Google Calendar access is revoked at Google. This is a real deletion, not a flag.
• Billing records: retained. Invoices have to outlive the account for tax, accounting and dispute reasons, so your Stripe customer record and its invoice history are deliberately left in place when the rest is purged. Stripe holds these under its own policy.
• Email delivery events and server logs: we do not delete these on a fixed schedule. Delivery events are held by Resend and request logs by Vercel, each on that provider’s own rolling retention, and we keep them only as long as they are useful for deliverability and security.

You do not have to wait for a schedule. Ask us to delete something and we will, subject to the billing records above.

7Property owners named in filings

If you have arrived here because your name, address or phone number appears in QuickLeads, this is the section that applies to you.

Where it comes from. Notices of Default and Notices of Trustee’s Sale are recorded by California county recorders and are public records. We collect those filings, extract the property and party details, and append contact information (names, phone numbers, email addresses and mailing addresses) from third-party data providers. We make the result available to paying subscribers, who are typically real estate investors.

We did not get this from you, and you were not asked. That is the nature of public records and appended data, and it is why the rights below exist.

Categories, and what we do with them

• Identifiers — name, property address, mailing address, phone numbers, email addresses.
• Real property and financial records — the filing itself: recording date and number, trustee, beneficiary, amounts, assessor parcel number, sale date.
• Inferences — derived fields such as estimated equity or an estimated statutory sale window.

Purpose: to provide subscribers, who are typically real estate investors, with the means to contact property owners about their property. Sources: county recorders, and the data providers listed above. Made available to: our subscribers, and the processors in section 4. We do not disclose this data for cross-context behavioural advertising.

Your rights

If you are a California resident you have the right to know what we hold about you and where it came from, to have it deleted, to have it corrected, to direct us to stop making it available to third parties, and to limit the use of sensitive personal information. Residents of other states with comprehensive privacy laws have similar rights, and we apply this process to everyone regardless of where they live. We will not discriminate against you for exercising any of these rights.

How to make a request. Email Cody@quickleadsllc.org with the subject line Privacy request, or call 805-914-9625. Include the name and the property address as they appear on the filing, so we can find the right records. We may ask for one further piece of information to confirm you are the person named; we use anything you send for verification only and delete it afterwards. An authorised agent may act for you with written permission.

Our response time. We acknowledge within 10 business days and complete the request within 45 calendar days. If we need longer we will tell you why, and we will not exceed 90 days in total.

What deletion actually means here

Deleting a row that the next county upload recreates is not a deletion. So when we act on your request we do two things: we remove what we hold about you now, and we record enough to recognise you in future filings so that those are withheld rather than published again. We keep that minimal record for no other purpose, never sell it, and do not delete it, because deleting it would undo your request the next time your name is recorded.

We will also direct our service providers and, where applicable, our subscribers to delete the information they hold about you. We cannot retrieve copies a subscriber exported before your request, though our terms require them to comply.

We may keep the underlying public record where the law requires us to, but suppressed records are not shown to subscribers, exported, or emailed.

Retention

Filing and appended contact data is currently retained for as long as we operate the service. There is no fixed expiry, because a filing stays relevant to a property for as long as the matter is open and older filings give later ones their context. We are not going to publish a deletion schedule we do not keep.

Your right to have it removed does not depend on that. Ask, and we delete and suppress it, on the timescale set out above.

8Advertising, and your opt-out rights

We do not disclose personal information for cross-context behavioural advertising, and we run no advertising network, no ad pixels and no data-sharing arrangement with one. We do not knowingly collect or disclose the personal information of anyone under 16.

We do not sell or share the personal information of site visitors or of customers.

If you are named in a filing and you would rather your information were not made available to our subscribers, you can tell us to stop. Use the request process in section 7 and we will act on it whether or not we are able to verify your identity, because an opt-out costs you nothing to be wrong about.

9Security

Access to the portal requires a sign-in. Subscriber access is scoped by plan and county on the server rather than in the browser, contact information is withheld at the query layer for accounts that have not paid for it, and Google refresh tokens are encrypted at rest. Traffic is served over TLS.

No system is perfectly secure and we cannot guarantee against every risk. If a breach affects your personal information, we will notify you and the relevant authorities without undue delay and no later than 30 days after we confirm it.

10Children

The service is for business use and is not directed to anyone under 18. We do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.

11Changes and contact

Material changes are notified to customers by email, and the effective date at the top of this page changes. Questions, or a request about your own information:

QuickLeads LLC, 8605 Santa Monica Blvd #368000, West Hollywood, CA 90069. Cody@quickleadsllc.org · 805-914-9625