Legal
Privacy Policy
Effective: August 31, 2026
Introduction
This Privacy Policy covers the LeadResponse.ai website, applications, and services (the “Services”), operated by Leadforms LLC, doing business as LeadCapture.io and LeadResponse.ai (“LR,” “we,” “us”). By accessing or using the Services you agree to this policy; if you do not agree, do not access the Services. We may revise this policy at any time by posting an updated version on this page with a new effective date; your continued use of the Services after changes are posted constitutes acceptance of the modifications.
Overview
The Services place AI-powered telephone calls to sales leads on behalf of our business customers, within about a minute of the lead’s own inquiry, and include lead qualification, appointment booking, live call transfer, call recording and transcription, and reporting. The Services include features that support (but do not guarantee) regulatory compliance for TCPA, CCPA, and GDPR; customers remain solely responsible for their compliance obligations.
Two roles matter in this policy. For the account information of our customers (the businesses that sign up), we act as the data controller. For the information of End-Users (the leads our customers ask us to call), we act as a processor on the customer’s behalf: the customer determines why a lead is called and is responsible for having the lead’s consent; we process the data to deliver the service they configured.
Personally Identifiable Information That We Collect
We may ask you for, or you may voluntarily submit, personally identifiable information when you are using the Services. The personally identifiable information which you may provide to us includes but is not limited to: your name; your contact information (including, without limitation, name, company name, title, mailing address, telephone, and electronic mail address); your IP address; communications to and from you and your End-Users; information provided by users or obtained through public and third-party sources to process A2P 10DLC and carrier trust registration; login credentials and other authorization data for various third-party products and services (such as connected calendars); billing information (payment card details are processed by Stripe and are not stored by us); and various data and information pertaining to the operations and attributes of your business (collectively, “Business Identifiable Information”).
End-User (lead) information processed on customers’ behalf includes: contact details and form answers delivered by the customer’s systems; consent records captured with the submission (timestamps, IP addresses, form URLs, and consent-verification certificates); phone-number metadata from carrier lookups (line type, carrier, country); call events and outcomes; call recordings and transcripts; appointment details; and Do Not Call requests.
Call Recordings, Transcripts, and AI Processing
Calls placed and received by the Services are recorded and transcribed. Voice recordings and transcripts may constitute personal information under applicable law. Transcripts and related context are processed by artificial-intelligence models (see the vendor list below) to conduct the conversation, qualify the lead, and produce summaries for the customer’s team. We do not use customers’ lead data to train foundation models. Our agents identify themselves as AI on calls. Recordings are retained per the customer’s plan (currently one year) and consent records for five years; customers control deletion requests for their leads’ data.
Non-Personal or Aggregate Information; Automatically Collected Information
We gather browser types, IP hosts, page views, device data, and usage analytics through cookies and tracking technologies, with efforts to anonymize aggregated data. We automatically record IP addresses, device identifiers, browser data, page access patterns, and time-spent metrics. IP addresses may be legally classified as personal information in certain jurisdictions and are treated accordingly.
Information Usage
We use personal information to provide and operate the Services (placing calls, booking appointments, transferring calls, notifying the customer’s team), to respond to inquiries, to secure and improve the Services (including aggregate analytics), to bill, and, with consent, to send marketing communications, which you may opt out of at any time via the unsubscribe link in any email or by contacting support@leadcapture.io. We may share personal information with third-party vendors solely for the purposes stated in this policy.
Third-Party Vendors
The Services rely on the following categories of service providers, each processing data under its own privacy and security commitments: a telecommunications carrier (telephony, carrier lookups, and registrations); a speech-recognition provider; artificial- intelligence model providers; a voice-synthesis provider; Stripe (payment processing); cloud hosting and data-storage providers; a job-queue provider; an email-delivery provider; Calendly (when the customer connects it); and error-monitoring and analytics providers. A current named subprocessor list is available to customers on request at support@leadcapture.io. Third-party integrations you connect operate independently; this policy does not extend to data collected by external services, and LR disclaims responsibility for their practices.
Data Security
LR uses reasonable technical and organizational safeguards, including encryption and authentication measures, to help protect personal information against unauthorized access, use, disclosure, alteration, or loss. Despite these measures, no security system is entirely secure, and LR cannot guarantee the absolute security of personal information or any data transmitted through or stored in the Service. Any transmission of information over the internet is undertaken at your own risk.
You are responsible for maintaining the confidentiality of your account credentials and for restricting access to your account and related email communications. You agree to use a strong, unique password and not to share your login credentials with any third party. If you believe your account has been compromised or used without authorization, you must notify LR promptly at support@leadcapture.io. LR will make reasonable efforts to investigate and respond but shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from your failure to safeguard your account information.
Cookies, Analytics, and Similar Technologies
We use cookies and similar technologies for customization and analytics, including conversion tracking, to analyze user behavior on the Site. You may disable cookies via your browser settings, with potential impact on functionality, and may opt out of analytics tracking without disruption to the Services.
Marketing and Sharing of Data
Personal information is not sold to third parties for marketing purposes without explicit consent. We may combine information with data from third-party sources for service improvement. We may disclose information where required to comply with law or legal process, to enforce our Terms of Service, or to protect the rights, property, or safety of LR, our users, or others.
Opt-Out; Do Not Call
Customers may unsubscribe from marketing via the link in any email or by contacting support@leadcapture.io. End-Users (leads) may stop calls at any time: telling the agent on a call to stop calling immediately places the number on the responsible customer’s Do Not Call list, and requests may also be made to us directly, in which case we will route the request to the responsible customer and assist in honoring it. We cannot remove data from third parties previously contacted on a customer’s instructions.
Consent to Receive Electronic Notifications
Electronic communication is the most effective and timely way to provide users of our Services with any optional or required notifications and disclosures. Through this Privacy Policy, pursuant to 15 U.S.C. § 7001, you hereby affirmatively consent to receive electronic notifications and disclosures from us only (without requiring a paper copy), and you represent that, to date, you have not withdrawn such consent. You have the right to change your mind and withdraw your consent at any time.
Children's Personal Information
The Services are for businesses and are not directed at anyone under 18. We do not knowingly collect personal information from individuals under 16. If you believe such collection has occurred, notify us at support@leadcapture.io and we will delete it.
US-Based Servers; International Users
Our servers are maintained in the United States and the Services are offered in the United States. By using the Services you consent to the export of information to the U.S. and acknowledge that it may be subject to lawful government access. Non-U.S. residents transferring data to U.S. servers consent to processing under U.S. law, where data protection standards may be deemed inadequate relative to their home jurisdiction.
Your Rights Under GDPR / UK GDPR
Residents of the EEA, UK, and similarly regulated jurisdictions may request access to, rectification of, or erasure of their personal data; restriction of or objection to processing; and data portability; and may lodge a complaint with a supervisory authority. Requests should be submitted to support@leadcapture.io and require identity verification.
Business Transfers
Personal information may be transferred to an acquiring party in connection with an asset sale, merger, reorganization, or bankruptcy. Your acceptance of this policy constitutes consent to such transfer.
Data Retention
We retain information for as long as needed to provide the Services and to comply with applicable laws: call recordings per the customer’s plan retention (currently one year), consent and suppression records for five years, and account records for the life of the account plus any legally required period. Information you delete may still be retained where necessary to maintain the Services or comply with applicable laws, and deletion from live systems may not immediately remove data from backups.
SMS and Text Messaging
If you opt in to receive text messages from us or through our platform (for example, operational alerts about leads, appointment confirmations, or follow-up conversations you initiated by submitting a form), we use your mobile number solely to deliver those messages and to operate the service you requested.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, excluding vendors and service providers acting on our behalf solely to deliver the messages (for example, our telecommunications provider).
Message frequency varies. Message and data rates may apply. You can opt out at any time by replying STOP to any message, and get help by replying HELP. See our Terms of Service for the full SMS program terms.
U.S. State Privacy Notices
California (CCPA/CPRA). California residents have the right to know what personal information we collect, to access it, to request deletion, to correct inaccurate information, to limit the use of sensitive personal information, and to opt out of the sale or sharing of personal information for cross-context behavioral advertising. LR does not sell personal information and does not knowingly share it for such purposes. California's Shine the Light law also permits requests regarding disclosures to third parties for direct marketing. Requests may be submitted to support@leadcapture.io and will be verified before action; you may designate an authorized agent.
Colorado (CPA). Colorado residents have the right to access, correct, and delete personal data, and to opt out of the sale of personal data, targeted advertising, and certain profiling. Submit requests to support@leadcapture.io.
Connecticut (CTDPA). Connecticut residents have the right to opt out of sales, targeted advertising, and profiling in furtherance of decisions producing legal or similarly significant effects. LR does not sell personal data.
Nevada (SB-220). Nevada residents may opt out of the sale of covered information. LR does not sell personal data.
Texas (TDPSA). Texas residents have the right to access their data and to opt out of sales, targeted advertising, and profiling. LR does not sell personal data.
Utah (UCPA). Utah residents have the right to opt out of the sale of personal data and targeted advertising. LR does not sell personal data.
Virginia (VCDPA). Virginia residents have the right to access, correct, and delete personal data, and to opt out of sales, targeted advertising, and profiling. Submit requests to support@leadcapture.io.
Other U.S. states. Residents of Oregon, Montana, and other states with comprehensive privacy laws have comparable rights to access, delete, correct, and opt out of sales and profiling, which LR honors on verified request.
Canada. Canadian residents may access and correct their personal information and may withdraw consent except where the information is necessary for service delivery. Personal data processed in multiple countries may be subject to foreign government requests under applicable law.
No Rights of Third Parties
This policy does not create rights enforceable by third parties and does not require disclosure of any user’s personal information.
Governing Law and Contact
This policy is governed by Pennsylvania law, and disputes are subject to the arbitration provisions of our Terms of Service. Questions: support@leadcapture.io · Leadforms LLC (LeadResponse.ai, a LeadCapture.io product).