Privacy Policy
Last updated October 29, 2026
WebLeadsNow ("we", "us") runs WebLeadsNow CRM at crm.webleadsnow.com, a lead management system for contractors and other local businesses ("customers"). This policy explains what information the CRM handles, why, and the choices you have.
Who this covers
- CRM users: business owners and their staff who sign in to the CRM.
- Our customers' leads and clients: people who fill in a customer's website form, call a customer's tracked phone number, or receive an estimate. For this information we act on behalf of the business that collected it, and that business's own privacy policy also applies.
Information we collect
- Account details: name, email address, role and company for each CRM user, and a password if you choose one.
- Lead and customer records: what people send through a customer's forms (name, phone, email, address, the job they need, photos and messages), call details and recordings from tracked numbers, notes, estimates, signatures and documents the business adds.
- Billing: handled by Stripe. We see the plan, payment status and the last four digits of the card; we never see or store full card numbers.
- Technical data: basic logs (IP address, browser, pages requested) used for security and fixing problems.
Information from Google
The CRM uses Google in two optional ways. Neither is required to use the CRM.
| Sign in with Google | We request only your Google account's email address (scopes openid and email) to confirm who you are. We let you in only if that email was already invited to a CRM. We do not create accounts from it and do not receive your Google password. |
|---|---|
| Connect Google (Settings → Google) | An owner can connect the business's Google account so the CRM can show that business its own website statistics. We request read-only access to: Google Search Console ( webmasters.readonly): search queries, clicks, impressions and positions for the business's website.Google Analytics ( analytics.readonly): visits, traffic sources and conversions for the business's Analytics property. |
How we use Google user data
- Only to show the connected business its own Search Console and Analytics reports inside its CRM (the Search dashboard and lead insights).
- We never change anything in your Google account. Access is read-only.
- We store the access token Google gives us (encrypted at rest, in our database) and the email of the Google account that connected. Report figures are fetched from Google when you view them.
- Only that business's signed-in CRM users can see its Google reports. WebLeadsNow staff can see them only to provide support when the business asks.
Limited Use. WebLeadsNow CRM's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, do not use it for advertising, do not use it to train AI or machine-learning models, and do not let people read it except as described above, with your permission, for security, or to comply with the law.
Removing Google access
An owner can click Disconnect in Settings → Google at any time. We revoke the token with Google and delete it from our database. You can also remove access from your Google account at myaccount.google.com/permissions.
How we use information
- To run the CRM: show leads, send the alerts, emails, texts and estimates a business chooses to send, and keep records.
- Optional AI features (such as drafting an email or an estimate) send the relevant lead details to our AI provider to produce the draft. Google user data is not sent to AI providers.
- To bill customers, keep the service secure, and fix problems.
We do not sell personal information.
Service providers
We use trusted providers that process data on our behalf: Supabase (database and file storage), Vercel (hosting), Stripe (payments), Resend (email delivery), Twilio (calls and texts), Google Maps (address suggestions and maps) and Anthropic (optional AI drafting). They may use the data only to provide their service to us.
Security and retention
Data is sent over HTTPS and stored with providers that encrypt it at rest. Each business's records are kept separate from every other business's. We keep a business's data while its account is active; when an account closes we delete or return it on request, except where we must keep billing records by law.
Your choices
CRM users can update their details or ask us to delete their account. If a business has your information as a lead or customer, contact that business; we will help them respond. Customers who reply STOP to a text are not texted again, and every marketing email has an unsubscribe link.
Changes
If we change this policy we will update the date above, and tell CRM owners about important changes.
Contact
Questions about privacy: use the contact form on our home page.