Privacy Policy

Last updated: May 12, 2026

Who We Are

Lead Capture 365 is a service provided by Eagle IT, LLC (“we,” “us,” “our”). We provide lead capture and business automation services for local businesses. This policy explains how we collect, use, and protect your information when you interact with our website, webchat widget, or services.

What We Collect

When you use our webchat widget:

  • Your chat messages (to respond to your inquiry)
  • A random identifier stored in your browser (to continue your conversation if you return)
  • Your name, phone, or email — only if you voluntarily provide it

When you submit our contact form:

  • Your name, business name, email, phone, and message

What we do NOT collect:

  • Cookies (we use localStorage only, which stays in your browser)
  • IP addresses
  • Device fingerprints or hardware identifiers
  • Browsing history or activity on other sites
  • Location data

How We Use Your Data

  • To respond to your inquiry or chat message
  • To continue your conversation if you return to our site
  • To provide services to the business whose website you visited
  • To send SMS messages you have opted in to receive (see SMS Communications below)

We do not sell, rent, share, or trade your personal information with third parties. We do not use your data for advertising or profiling.

SMS Communications & Recipient Consent

How end users consent. We send SMS messages only to recipients who have given express written consent. End users may opt in through any of the following methods:

  • Submitting a phone number through a form on our website at leadcapture365.com with a clearly labeled SMS consent disclosure next to the submit button,
  • Interacting with the chat bot on leadcapture365.com after acknowledging the SMS consent disclosure presented in the chat,
  • Sending an inbound text to our published SMS number 334-34-LEADS (the number printed on our business card, brochure, or other physical or digital material), or
  • Scanning a QR code that links to a designated opt-in page on leadcapture365.com (future).

The same consent standard applies when end users opt in through a business that uses Lead Capture 365 on their own website or intake forms — that business is responsible for collecting and recording the consent in compliance with applicable law.

Types of messages. Transactional and customer-care messages such as appointment confirmations, reminders, missed-call follow-ups, review requests, lead responses, and conversational replies from the business you contacted.

Message frequency. Varies by your interaction with the business. You will not receive recurring marketing texts unless you separately opt in to a marketing list.

Message and data rates. Standard message and data rates may apply per your mobile carrier plan.

How to opt out. Reply STOP to any message at any time to immediately unsubscribe. You will receive a single confirmation message and no further messages from that business.

Help. Reply HELP to any message for support, or contact us at [email protected].

Supported carriers. Compatible with major U.S. carriers including AT&T, Verizon, T-Mobile, Sprint, Boost, Cricket, MetroPCS, U.S. Cellular, Virgin Mobile, and others. Carriers are not liable for delayed or undelivered messages.

No sharing of mobile or SMS opt-in data. No mobile information or SMS opt-in / consent data will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors who provide support services (e.g. our SMS messaging provider) is permitted strictly to deliver the messages you have requested. All other use-case categories exclude text-messaging originator opt-in data and consent; this information will not be shared with any third parties.

Data Storage & Security

Your data is stored in a secure PostgreSQL database hosted on Railway (US infrastructure). Access is protected by:

  • Encrypted JWT authentication
  • Four-layer tenant isolation (middleware, application, ORM, database)
  • Encrypted connections (TLS/SSL)
  • Rate-limited API endpoints

Webchat Widget on Third-Party Sites

When our webchat widget is installed on a business’s website, that business is the data controller and we are the data processor. The business’s own privacy policy governs their use of your data. Our widget will show a consent notice before storing any data in your browser.

Your Rights

Depending on your location, you may have the right to:

  • Access your personal data
  • Delete your personal data
  • Correct inaccurate data
  • Opt out of data processing (by not using the chat or clearing your browser data)
  • Data portability — receive a copy of your data

To exercise these rights, contact us at [email protected].

Data Retention

We retain chat messages and lead data for as long as the business relationship requires, or until you request deletion. The random visitor identifier in your browser is cleared when you clear your browser’s site data.

Children’s Privacy

Our services are not directed at children under 13 (or 16 in the EU). We do not knowingly collect data from children.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.

Contact

For privacy questions or data requests:

Email: [email protected]

Applicable Laws

This policy is designed to comply with: GDPR (EU), CCPA/CPRA (California), VCDPA (Virginia), CPA (Colorado), CTDPA (Connecticut), UCPA (Utah), TDPSA (Texas), OCPA (Oregon), and MCDPA (Montana).