Privacy Policy

1. Who we are

IncidentLead is operated by Genesis One, based in Riverside County, California. IncidentLead is a business tool sold to licensed restoration contractors. It is not intended for, marketed to, or usable by consumers or by anyone under 18, and we do not knowingly collect information from children.

Questions, requests, or complaints: [email protected].

2. Information we collect about account holders

If you hold an IncidentLead account, we collect and store:

• Account details. Your email address, your company name, and your contractor license number. Your password is stored only as a salted hash by our authentication provider; we never see or store it in readable form. If you sign in with Apple, we receive only the identifier and email Apple chooses to share, which may be a private relay address.
• Compliance records. The date and version of the Terms of Service and Compliance Acknowledgment you accepted, and which user accepted them. We keep these permanently, because they are the record of a legal agreement.
• Coverage and billing. The territories you subscribe to and your subscription status. Card payments are processed by Stripe. We never receive or store your full card number; we store only Stripe’s customer and subscription identifiers.
• Push notification token. If you turn on alerts, we store the push token your device issues, so we can deliver alerts to it. Turning alerts off in Settings deletes the token.
• Server logs. Ordinary request logs, including IP address and timestamps, kept for security and troubleshooting.

What we do not collect. IncidentLead does not request or use your device’s location. It contains no advertising, no analytics or tracking SDKs, and no third-party trackers. We do not build advertising profiles, and we do not track you across other companies’ apps or websites.

3. Information about properties and property owners

The core of the service is information about property-loss incidents and the properties affected. This necessarily includes personal information about people who are not our customers and who did not sign up for IncidentLead. We think that deserves a plain explanation rather than a footnote.

• What it is. Incident details reported by public safety dispatch (type, address, time, responding units, severity), the property address, and the owner’s name, mailing address, and telephone numbers where available.
• Where it comes from. Public safety dispatch communications and public records, combined with owner and contact information supplied by licensed third-party data providers and county records. We do not obtain it from the property owner, and we do not place calls, send messages, or contact property owners ourselves.
• Who sees it. Only licensed contractors who subscribe to the coverage area that incident falls in, and who have accepted our Compliance Acknowledgment. Access is enforced per-record at the database level, not merely in the interface. Subscribers are contractually forbidden to resell or redistribute it.
• What subscribers agree to. Manual dialing by a live person only, no autodialers and no prerecorded or AI voice, scrubbing against the National and state Do-Not-Call registries, calling only within legally permitted hours, and honoring any request to stop contact immediately and permanently.

4. If you are a property owner and want your information removed

You do not need an account, and you do not need to explain why. Email [email protected] with the property address or the phone number concerned and ask us to remove it. We will confirm what we hold, delete it from our systems, and add the number to a permanent internal suppression list so it is not shown again if it reappears from a data provider later.

California residents have rights under the CCPA/CPRA to know what personal information we hold, to have it deleted, to correct it, and to opt out of its sale or sharing. Residents of other states with comparable laws have similar rights. We honor all of these regardless of where you live, we do not charge for it, and we will not treat you differently for asking. We aim to respond within 45 days.

We do not sell personal information to data brokers or advertisers. We do provide owner contact information to the subscribing contractor who purchased coverage for that area, which some state privacy laws classify as a “sale” or “sharing.” You can opt out of that at the address above.

5. How we use information

To operate the service and deliver alerts and leads to the subscribers entitled to them; to verify contractor licenses; to bill subscriptions; to maintain the compliance and acceptance records described above; to secure the service and investigate misuse; and to comply with law. We do not use personal information for advertising, and we do not make automated decisions that produce legal effects about any individual.

6. Who we share information with

We share only with service providers who process data on our behalf under contract, and only as needed to run the service:

• Supabase: database, authentication, and file storage
• Netlify: application hosting
• Stripe: subscription payments
• Apple and Google: push notification delivery
• Twilio: SMS alert delivery, where a subscriber has enabled it
• Resend: transactional email
• Licensed data providers: owner and contact lookups

We may also disclose information if required by law or valid legal process, or to protect our rights, the service, or the safety of others. If the business is sold or merged, information may transfer as part of that transaction, subject to this policy.

7. Retention and security

Incident and lead data is retained while it is commercially useful and as needed for our records; compliance acceptance records are retained permanently; suppression entries are retained permanently by design, because their whole purpose is to remember that someone asked not to be contacted. Data is encrypted in transit and at rest, access is restricted per-record at the database level, and administrative access is limited to the operator. No system is perfectly secure, and we do not claim otherwise.

8. Account deletion

You can ask us to close your account and delete your personal information at any time by emailing [email protected]. We will delete your account data, retaining only what we must keep for legal, tax, or compliance-record purposes.

9. How to reach us

Email [email protected], or write to us at Genesis One, 2834 Hamner Ave #1014, Norco, CA 92860. A privacy policy that only offers an email is one a regulator, and a customer, cannot post to.

10. Changes

If we change this policy we will update the date above, and for material changes we will notify account holders by email or in the app. Continued use after a change means you accept the updated policy.