Privacy Policy

KRussCo LLC ("we," "us" or "our") operates The Lead Toolbox business software and mobile application. This Policy describes how we handle personal information in connection with the app, the supporting website, account administration and support. It should be read with any separate notice provided for a particular feature.

When a business customer uploads or manages its own customers' records through LTB, that business may decide why and how those records are used. We and our platform providers process that information to deliver the service and follow appropriate instructions. If your request concerns a business's customer records, contact that business, or contact us so we can identify the responsible organization. This does not limit any rights you have against us for our own processing.

Depending on how you use the Service, information may include your name, business name, email, phone, account and role information; contact records and business communications entered into the CRM; appointments and related notes; files or media you upload; billing and transaction information relevant to your account; and support requests and feedback.

Do not include unnecessary sensitive information in support forms or uploads. Payment information may be handled by the payment provider used for the relevant transaction.

The mobile app and its providers may process information needed to operate the app, authenticate access and diagnose problems, such as app version, device and operating-system information, identifiers, interaction events and crash reports. The exact categories and purposes must match the app build and enabled services.

• Contacts: [whether device address-book access is used; information uploaded; purpose; optionality]. CRM contact records and the device address book are different sources.
• Photos, files and camera: [selection or capture features; information uploaded; recipients and purpose].
• Microphone and audio: [live calling, voicemail, recordings or transcription; processing and storage].
• Location: [none, approximate or precise; foreground/background; feature and recipient]. A HighLevel "location" can mean a business sub-account, not device geolocation.
• Notifications: [push provider, device token use and any message content delivered through push].
• Diagnostics and analytics: [SDK/provider names, data categories, purposes, user linkage and retention].

We request a device permission only when an enabled feature needs it. You can change permissions in your device settings; disabling a permission may stop the related feature from working.

We use information for the disclosed purposes relevant to your interaction: providing the Service; authenticating and managing access; delivering requested communications and integrations; processing account administration and billing; responding to support; maintaining security and investigating abuse; diagnosing and improving operation; and meeting legal obligations. Marketing uses require their own appropriate basis and choices and are not implied by a support or deletion request.

We use service providers to operate the platform and deliver relevant functions. HighLevel supplies the underlying platform services. Other providers may supply communications, hosting, payments, diagnostics, support or enabled integrations.

Information may also be available to authorized members of your business account, shared with an integration at your direction, disclosed to meet lawful requests or protect legal rights and security, or transferred in a business transaction subject to applicable safeguards and notice. We limit operational access to appropriate purposes and require applicable protections from providers.

We retain personal information only as long as needed for the disclosed purposes, including service delivery, legitimate security and recordkeeping needs, legal requirements and dispute handling. Retention depends on the type of record, customer instructions where applicable and the reason it is held. When no longer needed, information is deleted or de-identified according to the approved process.

To request account or data deletion, use our deletion page. We verify identity and authority using proportionate measures, explain the scope of the request and process it in accordance with applicable law. Deleting an app or disabling an account is not the same as deleting associated information. Where records must remain, we explain the applicable category and reason and restrict their use as appropriate.

We use reasonable administrative and technical measures appropriate to the information and service. No system can guarantee absolute security. Protect your credentials and report suspected misuse through support.

Information may be processed where we and our service providers operate. Where required, we use an applicable lawful mechanism and safeguards for international transfers. Mere use of the Service is not a substitute for a required transfer mechanism or consent.

Depending on applicable law and our role, you may be entitled to request access, a copy, correction or deletion; withdraw consent; object to or restrict certain processing; or opt out of applicable sale, sharing, targeted advertising or qualifying automated decisions. You may also have a right to appeal a decision or complain to a regulator. These rights depend on the law that applies to you.

To submit a request, use our privacy rights page. We may ask for information reasonably needed to verify identity, authority and the request, but we will not ask you to send passwords or complete payment-card numbers. We respond within applicable legal timeframes and explain a denial and available review route where required.

You can manage app permissions through device settings and unsubscribe from marketing using the instructions in that communication. Withdrawing marketing consent does not stop necessary service communications.

The Service is intended for business users and is not directed to children. If you believe a child provided information to us, contact us so we can investigate and take appropriate action.

We will update the effective date when this Policy changes and provide additional notice or obtain consent where required. We will not rely on a policy update alone to authorize a materially different use that requires consent.

KRussCo LLC • 629 Maple Valley Drive #102, Farmington, MO 63640

Privacy inquiries: legal@theleadtoolbox.com • Telephone: (573) 515-2065