Privacy Policy
This policy explains how Total Leads Today ("TLT," "we," or "us") collects, uses, protects, and deletes information across the customer, provider, retailer, payment, and web experiences.
Licenses, certificates, and insurance documents are used to evaluate provider qualifications. They are not shown publicly or to other providers.
Early-access interest: If you join the national waitlist, we collect your email address, customer or Service Pro role, selected state, industry, service, consent record, and limited campaign attribution. We use it to measure genuine demand, prioritize recruitment and useful guidance, and send relevant launch updates. Joining does not create a paid membership or publish a job.
Share-tool measurement: We record the selected audience and channel when an article, reviewed-guide directory, or launch-kit share draft opens or a caption is copied. This event does not claim that a post was published and does not contain the caption, email address, phone number, or social account.
Information we collect
- Account data: name, email address, phone number, authentication provider, and account identifier.
- Customer requests: service scope, schedule, budget, service address, ZIP code, selected Service Pro, membership entitlement, and job-payment status.
- Service Pro and retailer profiles: business details, coverage, availability, qualification, connected-payment onboarding status, bids, and fulfillment activity.
- Qualification data: license or certificate numbers, issuers, jurisdictions, expiration dates, uploaded photos or PDFs, review status, and reviewer notes.
- Marketplace and procurement activity: labor bids, materials requirements, retailer quotes, purchase orders, shipment and fulfillment references, itemized pricing, payment, refund, dispute, and payout status. TLT does not store full card or bank-account numbers.
- Private job messages: text between a verified customer and assigned Service Pro, read state, reports, room status, and moderation actions. Version one does not support chat attachments.
- Google Analytics: page views, navigation paths, approximate location, device and browser information, referral source, campaign parameters, and interactions such as scrolls or outbound-link clicks. We do not intentionally send names, email addresses, phone numbers, service addresses, message contents, payment details, or credential documents to analytics.
- First-party traffic measurement: anonymous per-tab session identifier, page path, article slug, conversion destination, campaign tags, referring hostname, automation flag, and event time. For early-access and Service Pro recruitment, TLT may record privacy-safe audience, state, industry, and service selections, whether the relevant form or application was opened, the category of sign-in method selected, and whether account access was attempted or completed. These analytics events do not include an email address, phone number, password, or verification code. For verified job-request funnels, TLT may record privacy-safe job-request market selections and whether the form was opened or attempted so the operator can identify funnel drop-off. TLT does not store analytics cookies, full referring URLs, email addresses, or IP addresses in this measurement table. Do Not Track and Global Privacy Control signals disable this measurement.
- Technical and security data: IP-derived security signals, device/session identifiers used by authentication, errors, and request logs needed to secure and operate the service.
Why we use information
- Create and secure customer, provider, and retailer accounts.
- Verify identity, licenses, certificates, insurance, coverage, and marketplace eligibility.
- Match customers with providers for labor and let TLT source approved materials from retailers.
- Administer memberships, itemize charges, collect customer payments, verify fulfillment, and release provider or retailer amounts.
- Communicate decisions, correction requests, credential expirations, job updates, shipment status, cancellation requests, refunds, and disputes.
- Prevent fraud, abuse, unauthorized access, duplicate assignments, and duplicate payments.
- Meet legal obligations and enforce applicable customer, provider, and retailer terms.
Service providers and sharing
We share information only as needed to operate the service. Firebase provides authentication; Stripe processes membership, customer-payment, and connected-recipient information; Google Analytics measures website use and campaign performance with advertising-personalization signals disabled; hosting and storage providers process account records and private files; communication or verification vendors may process data when those features are activated. Customers receive provider labor-bid information needed to choose a provider. A selected provider receives job details needed to perform labor. Approved retailers receive only the material request and delivery details needed to quote or fulfill an awarded purchase order; retailers do not receive provider payouts or unrelated customer payment details. Private job messages are visible to the verified customer and assigned provider. Authorized staff access reported content and limited context when needed for moderation, safety, fraud, payments, disputes, or legal compliance. We may disclose information when required by law, to protect users, or in a business transfer subject to appropriate safeguards.
We do not sell personal information. We do not publicly display private messages, government identification numbers, full credential documents, payment credentials, or private customer contact details.
Security
Data is transmitted over encrypted connections. Provider records are access-controlled by authenticated user identity. Credential files use private object storage and are available only to the submitting provider and authorized reviewers. No security system is perfect, so we also limit collected data and audit privileged actions.
Retention and deletion
Early-access interest is retained while the applicable launch remains active or until the person opts out or requests deletion. First-party traffic events expire after 90 days.
Draft and active Service Pro records are retained while an account remains open. Review and job records are retained as needed to operate the marketplace, resolve disputes, prevent fraud, and meet legal or tax duties. Private message bodies are eligible for deletion 365 days after the room's last activity or closure; routine chat maintenance removes eligible bodies, while reported content may be held narrowly while a safety, fraud, or dispute review remains open. Account deletion closes affected rooms, redacts the requesting user's message bodies except where a narrow open-report hold applies, removes active chat receipts, and anonymizes any open report submitted by that account. A user may permanently delete the account from the app or web deletion resource. We may keep a minimal, non-identifying deletion receipt and records that law requires us to retain; retained records are isolated from active product use and deleted when the obligation ends.
Your choices
- Review and correct application data before submission.
- Control optional availability and notification settings, including removing a device from push alerts.
- Request correction of a qualification decision.
- Delete the account and associated data through the in-app Account tab or our external deletion page.
Age limit
TLT Provider is for adults age 18 or older who are legally able to provide professional or local services. It is not directed to children.
Contact
For privacy questions or data-rights requests, use our secure privacy request center. Do not submit passwords, one-time codes, or identity documents through the request form.