Privacy Policy

1. Introduction

Conveyra, Inc. (“we,” “our,” or “us”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our lead generation platform.

Conveyra is a lead generation marketplace. We collect property owner contact information from publicly available sources, enrich it through licensed data providers, and sell qualified leads to contractors and service professionals. This sharing of your personal information may constitute a “sale” under California law. You have the right to opt out at any time by visiting our Do Not Sell My Personal Information page.

This policy applies to: (a) contractors and service professionals who purchase leads (“Buyers”); (b) homeowners whose information appears in leads (“Homeowners”); and (c) visitors to our website.

2. Information We Collect

Buyer Information

When you create a Buyer account or use our services, we collect:

• Name, email address, phone number, and company name
• Account credentials
• Service verticals and geographic preferences
• Payment and billing information (processed by Stripe; we do not store full card numbers)
• Lead purchase and interaction history
• TCPA consent records (timestamp and IP address)

Homeowner Information

We collect homeowner data from publicly available sources to generate leads:

• Property address, type, and characteristics (from publicly available property information)
• Property event data (storm reports, property activity records, and ownership changes)
• Owner name and contact information (from publicly available sources and licensed data providers)

Third-Party Data Enrichment Sources

To generate and improve the quality of our leads, we obtain homeowner data from the following categories of third-party sources:

• County Appraisal Districts (CAD): Property assessments, ownership records, and mailing addresses from county property information offices (e.g., Tarrant Appraisal District)
• Public Voter Files: Voter registration records used to verify owner identity and current address
• County Ownership Records: Property ownership changes, liens, and ownership history from county clerk offices
• State Business Entity Filings: Secretary of State business registration data for entity-owned properties
• People Search Services: Publicly aggregated directory data for phone and email resolution
• Licensed Skip Trace Providers: Phone and email lookup services (e.g., Tracerfy) used as a last resort when public sources are insufficient
• Weather & Storm Data: Weather monitoring reports and hail event data to identify properties with potential damage

How Homeowner Data Flows Through Our Platform

Homeowner data passes through the following stages in our platform:

1. Discovery: Property records are collected from publicly available sources (property information offices, storm reports, property activity records)
2. Enrichment: Property data is enriched with owner contact information through a layered process starting with free public sources and escalating to paid providers only when necessary
3. Do Not Call Screening: Phone numbers are checked against the National Do Not Call Registry before any outbound contact or lead distribution
4. Scoring & Qualification: Leads are scored based on property characteristics, event data, and service need indicators
5. Distribution: Qualified leads are delivered to Buyers (contractors) who have purchased access through our platform
6. Retention & Deletion: Lead data is retained per our data retention schedule (Section 7) and deleted upon valid homeowner request

Automatically Collected Information

When you access our platform, we automatically collect:

• Device information (browser type, operating system)
• IP address and approximate location
• Usage data (pages visited, features used, click events)
• Cookies and similar tracking technologies

3. How We Use Your Information

We use the information we collect to:

• Generate, score, and deliver qualified leads to Buyers
• Process payments and manage subscriptions
• Match leads to Buyers based on vertical and geographic preferences
• Send account notifications, lead delivery alerts, and billing communications
• Send marketing communications (with opt-out option)
• Monitor and improve lead quality and platform performance
• Detect, prevent, and address fraud and abuse
• Comply with legal obligations

4. Information Sharing

We share information as follows:

• Lead Delivery: As part of our lead matching service, we share homeowner contact information and property details with Buyers who purchase leads. This is the core function of our service.
• Payment Processing: Billing information is shared with Stripe for payment processing.
• Service Providers: We use third-party services for hosting, analytics, email delivery, and data enrichment.
• Legal Requirements: When required by law, subpoena, or to protect our rights and safety.

5. Do Not Call Compliance

We maintain compliance with the Telephone Consumer Protection Act (TCPA) and the FTC's National Do Not Call (DNC) Registry:

• DNC Registry Checking: We regularly sync with the National Do Not Call Registry and screen all phone numbers before lead distribution. Numbers appearing on the DNC list are flagged and excluded from leads sold to Buyers.
• State Do Not Call Lists: We also check applicable state-level do-not-call registries for the markets we serve.
• Consent-Based Contact: Homeowners who submit inquiries through our website provide explicit TCPA consent before their information is shared with contractors. Consent is recorded with timestamp and IP address.
• Opt-Out Honoring: Homeowners may opt out of contact at any time through our opt-out page or by emailing [email protected]. Opt-out requests are processed within 24 hours.
• Internal Suppression: We maintain an internal suppression list of homeowners who have opted out, and check it alongside the federal and state DNC registries.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit (TLS) and at rest
• Row-level security policies on database tables
• Access controls and role-based authentication
• Regular security assessments

7. Your Rights

All Users

You have the right to:

• Access your personal information
• Correct inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Opt out of marketing communications
• Data portability

California Residents (CCPA)

If you are a California resident, you have additional rights:

• Right to Know: You can request details about the personal information we have collected, the sources, the business purpose, and the third parties we share it with.
• Right to Delete: You can request deletion of your personal information, subject to certain exceptions.
• Right to Opt Out of Sale: You can direct us not to “sell” your personal information to third parties.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

How to Exercise Your Rights

• Opt out of data sharing/sale: Visit our Do Not Sell My Personal Information page or email us at [email protected] with the subject “CCPA Opt-Out.”
• Access or delete your data: Email [email protected] with the subject “Data Request.” We will verify your identity and respond within 45 days.
• Opt out of marketing emails: Click “Unsubscribe” in any marketing email or update your preferences in your account dashboard.

8. Data Retention

We retain personal information according to the following schedule:

• Buyer account data: Duration of active account plus 7 years (for tax and legal compliance)
• Lead data (homeowner information): 2 years from lead generation, unless the homeowner requests earlier deletion
• TCPA consent records: 5 years from date of consent (regulatory requirement)
• Transaction and billing records: 7 years (tax compliance)
• Usage analytics: 2 years, then aggregated/anonymized
• Opt-out requests: Indefinitely, to ensure continued compliance

9. Breach Notification

In the event of a data breach that affects your personal information, we will:

• Notify affected individuals by email within 72 hours of discovering the breach
• Notify the appropriate state attorneys general as required by applicable law
• Provide a description of the breach, the types of data affected, and steps you can take to protect yourself
• Take immediate steps to contain and remediate the breach

10. Cookies

We use cookies and similar tracking technologies to enhance your experience. You can control cookies through your browser settings. Note that disabling cookies may affect platform functionality.

11. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify active users of material changes via email at least 14 days before the changes take effect and update the “Effective date” at the top of this page.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at [email protected]