PRG Lead Vault

PRG Lead Vault ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and safeguard information when you use the PRG Lead Vault platform. By using the Service, you agree to the practices described in this policy.

1. Information We Collect

We collect the following types of information:

• Account Information: Your full name, email address, and a hashed version of your password when you create an account.
• Profile Information: Optional business details you provide in your profile, including business name, phone number, city, state, and mailing address.
• Lead Data You Upload: Property addresses, owner names, phone numbers, email addresses, and related real estate data that you upload or manually enter into the platform.
• Usage Data: Information about how you use the Service, including pages visited, actions taken, and timestamps of activity (such as scrub requests and exports).
• Compliance Records: Timestamps and confirmations when you accept TCPA/DNC compliance checkboxes within the platform, stored for audit purposes.
• Support Communications: Messages and information you submit through our support ticket system.

2. How We Use Your Information

We use the information we collect to:

• Operate, maintain, and improve the PRG Lead Vault platform.
• Process phone number scrubbing requests against DNC databases on your behalf.
• Generate export files and reports for your use.
• Manage your account and respond to your support requests.
• Maintain compliance logs for audit and legal protection purposes.
• Send you important service-related communications (not marketing).
• Detect and prevent fraudulent or unauthorized use of the platform.

3. Data We Do Not Sell

We do not sell, rent, trade, or share your personal information or your lead data with any third party for marketing or commercial purposes. Your data belongs to you.

4. Third-Party Service Providers

To operate the Service, we share limited data with trusted third-party providers:

• BatchData API: Phone numbers you submit for DNC scrubbing are transmitted to BatchData for processing against the National DNC Registry and other DNC databases. BatchData receives only the phone numbers, not your personal information or account details. Please review BatchData's Privacy Policy for details on their data handling.
• Hosting & Infrastructure: Our platform is hosted on secure cloud infrastructure. Infrastructure providers may have access to encrypted server data as part of standard operations.

We require all third-party providers to maintain appropriate security standards and to use your data only as necessary to provide services to us.

5. Data Security

We take the security of your data seriously and implement the following measures:

• Passwords are stored using industry-standard one-way hashing (PBKDF2-SHA256) and are never stored in plain text.
• All data is stored in a private, access-controlled PostgreSQL database.
• Each user's data is fully isolated — no user can access another user's lead records, files, or account information.
• Session tokens are randomly generated, stored server-side, and expire automatically.
• API keys and secrets are managed as environment secrets and are never exposed in the application interface.

While we take commercially reasonable steps to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Your Responsibility for Uploaded Data

You are responsible for the data you upload to PRG Lead Vault. By uploading data containing personal information (such as names, phone numbers, and email addresses of third parties), you represent that:

• You have the legal right to possess and process that data.
• You have complied with all applicable privacy laws regarding the collection of that data.
• You have obtained any necessary consents from the individuals whose data you are uploading.

PRG Lead Vault is not responsible for the legality, accuracy, or privacy compliance of data you upload.

7. Data Retention

We retain your account information, lead data, and activity records for as long as your account is active. If you request deletion of your account, we will delete your personal account information and associated lead data within 30 days, except where retention is required by law or for legitimate audit purposes (such as billing records and compliance logs). DNC scrub cache data may be retained for service improvement purposes in anonymized form.

8. Your Rights

Depending on your jurisdiction, you may have the following rights with respect to your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate personal data.
• Deletion: Request deletion of your account and associated data.
• Portability: Request an export of your lead data in a machine-readable format.

To exercise any of these rights, please submit a request through the Support section of the platform.

9. Cookies & Session Data

PRG Lead Vault uses session cookies solely to maintain your authenticated session. We do not use tracking cookies, advertising cookies, or analytics cookies. Session cookies are deleted when you log out or when your session expires.

10. Children's Privacy

PRG Lead Vault is intended for use by business professionals and is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by posting the updated policy on this page with a revised effective date. Your continued use of the Service after any such changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us through the Support section of the platform. We are committed to resolving privacy concerns promptly and transparently.