Privacy Policy

This policy describes how StreamLeadX handles personal information. StreamLeadX is operated by David Melendez, a sole proprietor in California. "StreamLeadX," "we," and "us" mean that business. Contact us at contact@streamleadx.com.

StreamLeadX has two roles. When a business submits our website form or becomes a client, we collect information for our own purposes, including responding to the inquiry and providing the service. When we handle a caller's phone number, message content, or call metadata for a client, we act as that client's service provider and processor. The client decides why that caller information is collected. We process it only to provide the text-back service, on the client's instructions, and as described here. We do not sell that information or use it for our own marketing.

Information we collect

On this website, the demo form collects:

• Name, shop or business name, phone number, email address, city, and an optional message
• On the demo page, preferred days, preferred times, and an optional note
• Whether you checked the box agreeing to receive texts from StreamLeadX about your inquiry
• A hidden spam-check field, which we discard when it is filled and do not store as a lead

From clients, we collect business information the client provides so we can configure the service, including:

• Business name, contact name, email, and phone
• Services, hours, prices or pricing guidance, and FAQ answers
• Billing and plan details, and the dedicated StreamLeadX number assigned to that client

For a client's callers, and only on that client's behalf, we process the caller phone number, the content of the text conversation, and call metadata. Call metadata means information about the forwarded or missed call and the messages, such as the time of the call, whether the call was unanswered, message time, and delivery status. Details a caller types, such as a vehicle, a service, or a preferred time, are part of the message content.

Servers that host the site may keep technical logs, such as IP address, browser type, and the time of a request, for security and troubleshooting. If analytics are turned on, Plausible, Google Analytics, or both may receive page-visit data such as pages viewed and general device information. When those tools are not configured, their scripts are not loaded.

How we use information

• To reply to a website inquiry and, if you opted in, to text you about that inquiry
• To provide the missed-call text-back service from the client's dedicated StreamLeadX number
• To send the client a summary of a lead from its own callers
• To bill, support, secure, and improve the service
• To register business texting with carriers and to meet legal requirements
• To keep a record of STOP and other opt-outs so we do not text that number again

Texts to people who submitted this website form come from StreamLeadX and are about that inquiry. Texts to a client's callers come from that client's dedicated StreamLeadX number, not from the shop's own phone line. Message content may be sent to OpenAI to generate a reply for that conversation.

SMS and consent

If you check the box on the website form, you consent to receive SMS messages from StreamLeadX related to your inquiry. The box is optional and is not required to submit the form. Message frequency varies. Message and data rates may apply. Reply STOP to opt out and HELP for help. Opting out stops further texts to that number, other than a single confirmation where the carrier sends one. You can also email contact@streamleadx.com. Consent to receive texts is not a condition of buying anything from StreamLeadX or from the business you called. More detail is in the SMS Policy.

Mobile numbers and SMS opt-in consent are not shared with or sold to third parties or affiliates for marketing or promotional purposes.

If you called a business and the call was forwarded, the details you text, including your mobile number, are shared with that business so it can respond to the request you made. That handoff is the service the business hired StreamLeadX to perform. It is not a sale or share of your number for someone else's marketing.

Processors

We use processors to run StreamLeadX. They may process personal information only on our instructions, to provide the service, and not for their own marketing. Those processors are:

• Twilio, for dedicated phone numbers and SMS delivery
• OpenAI, to generate conversational text replies
• n8n, to receive website form submissions and route them to us
• Vercel, to host this website
• Google Workspace, for business email and related business records

Phone carriers deliver calls and texts under their own rules. Plausible and Google Analytics receive website visit data only when analytics are enabled. Processors are not permitted to use mobile numbers or SMS opt-in consent for their own marketing or promotional purposes.

Retention

We keep information only as long as the purpose requires, then delete or de-identify it. The periods we use are:

• Website inquiry records, including the consent checkbox: up to 24 months after our last communication about that inquiry, unless a longer period is required for a legal claim, fraud prevention, or the law
• Client account, configuration, and billing records: for the subscription and for up to 7 years after it ends, for accounting, tax, and disputes
• Caller phone numbers, message content, and call metadata we process for a client: for the subscription and for up to 90 days after it ends, or sooner if the client asks us to delete them, unless a longer period is required for a legal claim, a security incident, or carrier or legal compliance
• Opt-out records: the phone number and the fact of the STOP or opt-out, for as long as needed to honor that opt-out
• Security and server logs: up to 90 days, unless needed longer to investigate abuse or a security incident

A lead summary we have already sent to a client is then in that client's hands. The client's own retention of that copy is the client's responsibility.

Security

We use reasonable administrative and technical safeguards designed to protect personal information, including access limits and transmission over encrypted connections where the tools we use support them. No method of storage or transmission is perfectly secure, and we cannot guarantee absolute security. Please do not text government ID numbers, payment card numbers, or account passwords. If a message includes that kind of information, we use it only to provide the service, such as passing the message to the client, and not to infer characteristics about you.

California privacy rights

This section applies to California residents under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA).

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not use or disclose sensitive personal information for purposes other than providing the service you or the client requested.

Subject to exceptions in the law, a California resident may ask StreamLeadX to:

• Know and access the categories and specific pieces of personal information we hold
• Correct inaccurate personal information
• Delete personal information
• Opt out of sale or sharing, which we will confirm we do not do
• Appeal a denial of a request

We will not discriminate against you for exercising these rights. To make a request, email contact@streamleadx.com. We will verify the request by matching the information you provide to information we already hold, and we may ask for more detail if we cannot match it. You may use an authorized agent if you give the agent signed permission and we can verify your identity, or if the agent has a power of attorney. We respond within 45 days. If we need more time, we will tell you why and may take up to another 45 days.

If we hold caller information only as a service provider for a client, we may refer your request to that business, which decides the purpose of the collection, and we will help that business meet the request. Deletion does not require us to text a number that has opted out, and we may keep the opt-out record, billing records, and information we need for a legal claim or security.

The categories of personal information we collect are identifiers (such as name, email, phone number, and IP address), commercial information (such as business name, plan, and inquiry), customer content (messages and the business details a client configures), and internet or device activity if analytics are enabled. We collect these from you, from our clients, from forwarded-call signaling, and from our hosting and analytics providers. We disclose them to the processors listed above, and we disclose a caller's request to the client the caller contacted.

Children under 13

The website and the text-back service are meant for businesses and their customers. We do not knowingly collect personal information from children under 13. If you believe a child under 13 gave us personal information, email contact@streamleadx.com and we will delete it.

Changes

We may update this policy. We will post the new version on this page and change the effective date. If a change materially reduces how we protect information, we will also email clients at the address we have on file before the change takes effect. Continued use of the service after the effective date is the client's acceptance of the updated policy, except where the law requires a different form of consent.

Contact

Privacy questions and CCPA/CPRA requests: contact@streamleadx.com.