Privacy Policy

1. Introduction

Long Drive Marketing LLC, doing business as Long Drive Group ("Company," "we," "us," or "our"), operates Long Drive Leads, a customer relationship management (CRM) platform available at longdriveleads.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use the Service. By accessing or using the Service, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the Service immediately.

2. Information We Collect

2.1 Personal Information You Provide

When you register for an account, submit a form, or otherwise interact with our Service, we may collect the following personal information:

• Full name
• Email address
• Phone number
• Company or business name
• Mailing address
• Job title or role

2.2 Lead and Customer Data

When you use the Service to manage your business leads, you and your customers may submit contact information, service requests, and communication history through web forms, embeddable widgets, or direct entry. This data is stored within your account and is controlled by you.

2.3 Usage and Device Data

We automatically collect certain information when you access the Service, including:

• IP address
• Browser type and version
• Operating system
• Referring URLs and pages visited
• Date and time of access
• Feature usage patterns and click activity

2.4 Billing Information

We collect billing contact details and payment status for subscription management. Subscription charges are processed by Stripe. We do not store full card numbers on our servers. QuickBooks, when Long Drive sets it up, is a separate connection and is not the public checkout.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Create and manage your account
• Send lead notifications via email and SMS on your behalf
• Send follow-up communications to your leads through the workflows and review requests you configure
• Where Customer Intelligence is turned on, send recorded activity to a model to write a profile. That activity text is not stripped of names, email addresses, or phone numbers first.
• Send appointment reminders and follow-up nudges
• Process billing and manage subscriptions
• Generate reports, analytics, and performance summaries
• Send administrative communications (service updates, security alerts)
• Improve the Service, diagnose technical issues, and analyze usage trends
• Respond to support requests and inquiries
• Comply with legal obligations

4. SMS / Text Messaging Consent and Communications

By providing your phone number and opting in to receive text messages through the Service, you expressly consent to receive SMS and MMS messages from us or on behalf of businesses using the Service. These messages may include:

• Lead notifications and alerts
• Messages sent by workflows the business has configured
• Appointment reminders and confirmations
• Follow-up nudges and status updates
• Google review requests
• Service-related transactional messages

Message frequency varies based on account activity and configuration. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages.

Opt-Out: You may opt out of receiving SMS messages at any time by replying STOP to any message you receive from us. After opting out, you will receive a single confirmation message and no further texts will be sent to that number. You may also contact us at support@longdrivegroup.com to opt out.

Help: For assistance, reply HELP to any message or email support@longdrivegroup.com.

We do not sell, rent, or share phone numbers or opt-in consent data with third parties for marketing or promotional purposes. Phone numbers collected through the Service are used solely for the purposes described in this Privacy Policy.

5. Data Sharing and Disclosure

We do not sell, rent, trade, or otherwise share your personal information with third parties for their marketing purposes.

We may share your information only in the following limited circumstances:

• Service Providers: We use trusted third-party services to operate the platform, including Supabase (database and authentication), Resend (transactional email), Zoom Phone (SMS delivery), Vercel (hosting), Stripe (subscription payments), and QuickBooks (a connection Long Drive sets up, not public checkout). Each processes data solely to perform services on our behalf and in accordance with their own privacy policies.
• Legal Requirements: We may disclose information if required by law, subpoena, court order, or other governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

6. Data Ownership

You retain full ownership of all data you input into the Service, including lead information, communications, custom fields, and pipeline data. We do not claim any ownership rights over your content. We process your data solely to provide the Service.

7. Data Security

We use the controls below to protect account data, including:

• Encrypted data transmission via TLS/SSL
• Database hosting with row-level security so a signed-in user is scoped to their own account
• OAuth tokens encrypted before storage when that integration's key is set. Production refuses to store a plaintext token if the key is missing.
• API keys for lead ingest and outbound webhooks. Other connections use their own sign-in.
• Rate limits on some public and account routes. Not every route is limited.
• Secure session management and authentication tokens

While we strive to use commercially acceptable means to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Data Retention

We retain your personal information and account data for as long as your account remains active or as needed to provide the Service. Upon account termination or deletion request:

• Account deletion, after the owner confirms it, is scheduled for 30 days later. The terms also say we may retain data for up to 90 days after termination, including where a backup or a record we are required to keep has not yet been removed.
• You can export leads as CSV from the Leads page, and you can ask us for other account data, before deletion.
• Certain data may be retained longer if required by law or for legitimate business purposes (e.g., billing records, dispute resolution).

9. Cookies and Tracking Technologies

We use the following types of cookies and similar technologies:

• Essential Cookies: Required for authentication, session management, and core functionality. These cannot be disabled without breaking the Service.
• Analytics: Google Analytics, Vercel Web Analytics, and Vercel Speed Insights load only after you choose Accept All on the cookie banner. Essential-only does not load them. They are not used for advertising. You can also install the Google Analytics Opt-Out Browser Add-on to block Google Analytics in the browser.

We do not use tracking cookies for advertising purposes. We do not use third-party advertising cookies or participate in ad networks.

10. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Data Portability: Request an export of your data in a machine-readable format.
• Opt-Out: Opt out of non-essential communications, including marketing emails and SMS messages.

To exercise any of these rights, contact us at support@longdrivegroup.com. We will respond to verified requests within 30 days.

11. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the business purpose for collecting it, and the categories of third parties with whom it is shared.
• Right to Delete: You may request deletion of personal information we have collected, subject to certain exceptions.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
• No Sale of Personal Information: We do not sell personal information as defined by the CCPA. We have not sold personal information in the preceding 12 months.

To submit a CCPA request, email us at support@longdrivegroup.com with the subject line "CCPA Request." We will verify your identity before processing the request and respond within 45 days.

12. International Users & GDPR

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) and equivalent local legislation.

Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract Performance: Processing necessary to provide the Service you have subscribed to, including account management, lead tracking, communications, and billing.
• Legitimate Interest: Processing for analytics, security monitoring, fraud prevention, and service improvement, where our interests do not override your fundamental rights.
• Consent: Processing for marketing communications, which you may withdraw at any time.

Your GDPR Rights

Under GDPR, you have the right to:

• Access your personal data and receive a copy
• Rectify inaccurate or incomplete data
• Eraseyour personal data ("right to be forgotten")
• Port your data to another service in a machine-readable format
• Object to processing based on legitimate interest
• Restrict processing under certain circumstances

For full details on how to exercise these rights, visit our Data Rights page.

International Data Transfers

We use US-based sub-processors to deliver the Service (see Section 5). International transfers are described in the Data Processing Addendum, available on request, including Standard Contractual Clauses where they apply. This policy does not itself prove a signed clause for every vendor.

Contact for GDPR Inquiries

For data protection inquiries or to exercise your GDPR rights, contact us at privacy@longdrivegroup.com. We will respond within 30 days of receiving your verified request.

13. Children's Privacy

The Service is not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at support@longdrivegroup.com.

14. Third-Party Links

The Service may contain links to third-party websites or services that are not owned or controlled by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make material changes, we will notify you by email or through a prominent notice within the Service prior to the changes taking effect. The "Effective Date" at the top of this page indicates when the policy was last revised. Continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

16. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how your data is handled, please contact us: