Privacy Policy

Effective 21 July 2026. We will say what changed when this is revised.

LeadLatch is a product of KeyBolt Inc., a New York corporation, which is the company responsible for the data described below.

The important distinction up front

For your shop’s own data, we are the controller. We decide what to collect and why, and this policy governs it.

For your callers’ data, you are the controller and we are the processor. They are your customers ringing your business. We hold their information on your instruction, as a service you have engaged, and we do not decide what to do with it independently. That relationship is set out in the Data Processing Addendum.

The distinction matters practically: if a caller wants their data deleted, the decision is the shop’s and we help carry it out.

What we collect about your shop

• Your business name, your name, and a contact phone number.
• Your service area, your prices, your job types and your hours.
• Billing contact details, when billing is live. Card details are held by our payment processor and never reach us.
• Support correspondence with us.

What we hold about your callers, on your behalf

• Their phone number, and their name if given.
• The service address they gave, and the coordinates it resolved to.
• A transcript of the call, and an audio recording where recording applies.
• What the agent decided, and the price and time it quoted.

We are conscious that this is more sensitive than a typical customer list. It is discussed frankly on the security page.

What we collect when you visit this website

Your IP address and basic request information, which any web server receives, and anonymous usage measurements such as which pages get read.

This site sets no cookies and shows no cookie banner. Our analytics are cookieless by design and there is no advertising or tracking code anywhere on it. That was a deliberate choice, and the absence of a banner is the visible result.

If you submit the contact form, we keep what you typed so we can call you back. The form is rate limited, and the identifier used for that is a salted hash rather than your address, so the service providing it holds nothing traceable to you.

Why we use it

• To run the service: answer calls, work out driving times, quote your prices, and book jobs.
• To keep a record you can go back to when there is a disagreement about a call.
• To bill you.
• To support you, and to investigate faults.
• To improve the product, using information about how it performed rather than the content of your callers’ conversations.

What we never do

• We do not sell personal information, and we do not share it for advertising. In the sense those words have under California law, we do neither.
• We do not use your callers’ conversations to train our own models.
• We do not pass your data to anyone except the providers listed below, or where the law requires it.

Who else touches it

Every company involved is named, with what it does and what it can see, on the subprocessors page. That list includes providers we have announced but not yet switched on, and says which is which.

One of them is outside the United States: our routing provider is a Netherlands company, so working out a real driving time sends the service address there.

How long we keep it

Transcripts are kept as the durable record of what was said. Audio recordings are treated as short-lived and deleted on a schedule unless a shop saves a particular call. Account and billing records are kept while you are a customer and for as long afterwards as we need them for tax and legal purposes.

We are not publishing exact durations yet, for the reason given on the security page: a number here becomes a promise, and we would rather set it once and keep it.

Your rights

You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Use the contact page and we will not make it awkward. We will not treat you differently for asking.

If you are a caller rather than a shop, the business you rang is the one that decides. Contact them, or contact us and we will pass it on and help them action it.

Security

Covered properly, including what we are not claiming, on the security page. In short: encrypted in transit and at rest, access limited to the people who run the service, and no SOC 2 certification.

Children

The service is for businesses. It is not directed at children and we do not knowingly collect their information.

Changes

If we change this policy we will update the effective date and say what changed. For a change that materially affects you we will tell you directly rather than relying on you noticing.

Contact

Questions, requests and complaints go through the contact page.