NorthLine Lead — Privacy Policy

1. Who this policy covers

• Clients and prospects — owners and staff of home-service businesses who talk to us, apply or buy.

• Homeowners — people who fill in a form, book online, call or reply to a message on a campaign we run.

• Visitors — anyone who visits our website or a booking page.

2. What we collect

From clients and prospects Name, company, role, email, phone, business address; service area (ZIP codes or radius), niche, licence and insurance details; calendar availability and the appointment entries we create through calendar sync (we read free/busy time and write our bookings; we do not read the content of your other events); billing details handled by Whop (we never see full card numbers); the record of your acceptance at checkout (date, time, email, IP address, version); no-show reports and the evidence you send (call-log screenshots, photos); recordings of sales or onboarding calls where you were told at the start that the call is recorded; and our communications with you.

From homeowners Name, phone, email, property address, the answers given in our quiz and in the SMS qualification conversation (for example whether you own the home, whether you will be present, your roof or project need, timing), appointment details, reschedules and cancellations, and your consent record (time, page, wording). SMS messages are stored with their content. Calls made or received by our human team are logged (number, time, duration, outcome) and not recorded. Where a client uses our AI Receptionist add-on, calls answered by the AI assistant are transcribed to text and the caller is told at the start that they are speaking with an AI assistant.

From visitors Device and usage data collected by the Meta Pixel, the Meta Conversions API and the booking widget (pages viewed, approximate location, device type, referring ad, form events). These are the only trackers on our pages.

3. Why we use data

• To run advertising (paid by NorthLine) and find homeowners who want an inspection.

• To qualify homeowners by SMS and book qualified appointments into one contractor's calendar.

• To send booking alerts to clients and confirmations and reminders to homeowners.

• To bill clients, apply credits, handle no-show reports, keep proof of acceptance and prevent fraud and chargeback abuse.

• To measure advertising performance, including sending conversion data to advertising platforms, hashed where supported.

• To deliver add-on services a client orders.

• To keep our systems secure, meet legal obligations and improve the Services using aggregated, de-identified data.

4. Homeowner data and our clients

A homeowner's request is delivered to one contractor only — the one the homeowner is booked with. It is never shared with other contractors, never sold and never given to data brokers. From the moment of booking, the booked contractor receives the homeowner's contact and property details to serve that request and becomes responsible for its own use of them. Requests that are not qualified or not booked stay with NorthLine and are not sent to any contractor. When we deliver add-on services using a client's own customer data (for example database reactivation), the client is responsible for that data and we act as its service provider, processing it only on its instructions.

5. Legal grounds

Under the Turkish Personal Data Protection Law (KVKK) and similar laws we rely on: performance of a contract (clients; homeowners who requested an inspection); legitimate interests (running, securing and improving the Services, fraud prevention); consent (texts and automated messages to homeowners, and the Meta Pixel where consent is required); and legal obligations (tax, accounting, lawful requests). For US homeowners we honour the consent given on the form under the TCPA and state telemarketing laws and respect do-not-call requests. Consent to be contacted is never a condition of any purchase.

6. Who we share data with

• The one contractor a homeowner is booked with

• CRM, automation, calendar and booking platforms

• SMS, telephony and AI voice providers

• Advertising platforms (Meta, Google and others) — conversion data, hashed where supported

• Payment processor (Whop) for client billing and dispute handling

• Cloud hosting, email and analytics providers

• Our team members and contractors, bound by confidentiality

• Courts, regulators or authorities where the law requires Providers are named by category only and are bound by contracts that limit their use of the data. We do not sell personal data.

7. International transfers

We operate from Türkiye and use providers in the United States and the European Union, so data may be processed there. We use contractual safeguards and, where KVKK requires, the approved transfer mechanisms.

8. How long we keep data

Data

Kept for

Client account and billing records

Term of the agreement, then as long as Turkish tax and commercial law requires (5–10 years).

Checkout acceptance records

Term of the agreement and 10 years after.

Homeowner requests and qualification conversations

24 months after last activity, unless deletion is requested sooner or the law requires longer.

SMS messages, call logs, AI transcripts

12 months.

No-show evidence (call logs, photos)

12 months after the credit decision.

Consent records for calls and texts

5 years, so consent can be proven.

Recorded client calls

12 months.

Website analytics

As set by the Meta Pixel and booking widget (typically up to 24 months).

9. Your rights

Depending on where you live, you may have the right to access, correct or delete your data, restrict or object to its use, receive a portable copy, and withdraw consent. Under KVKK you may also ask whether your data is processed, for what purpose and to whom it was transferred, and you may apply to the Turkish Personal Data Protection Board. US residents may have additional rights under state privacy laws. To stop texts, reply STOP to any message. To stop calls, tell the caller or email us — we add your number to our do-not-call list within 3 business days. For any other request, email bugra@northlinelead.com. We answer within 30 days and may ask you to verify your identity.

10. Security

We use access controls, encryption in transit, least-privilege access and provider contracts. No method is completely secure; if an incident affects your data we notify the affected client and, where the law requires, you and the authorities without undue delay.

11. Cookies and the Meta Pixel

Our website and booking pages use the Meta Pixel to measure ads and show relevant ads to past visitors, and the booking widget to run bookings. You can limit the Pixel in your Meta ad settings and browser settings. We do not use other advertising cookies.

12. Children

The Services are for businesses and adult homeowners. We do not knowingly collect data from anyone under 18. If you believe a child gave us data, email us and we will delete it.

13. Changes

We may update this policy. The effective date at the top shows the current one. Clients receive material changes by email; homeowners see the current version on our pages.

14. Contact

northlinelead.com