Privacy Policy

1. Who this applies to

This policy covers three groups of people:

• Agents and team members who sign in to Lead Latte (“Users”).
• Contacts — the clients, leads, sphere of influence and other people whose details a User stores in their CRM. The User, not Lead Latte, decides what is entered about them.
• Visitors to public pages — for example open house sign-in pages, listing feedback forms, shared business directory pages and short links.

2. Information we collect

Account and profile information

When you request early access or sign in, we collect your name, email address, license number, brokerage and state. Sign-in is done with Google, so we receive your Google account name, email address and profile photo. We never see or store your Google password. Your profile can also include a phone number, photo, team or brokerage logo, a “why” statement, life list, timezone and application preferences.

CRM data you enter

• Contacts: names, phone numbers, email addresses, mailing and property addresses, birthdays and anniversaries, relationships, tiers, tags, notes, lead sources and referral sources.
• Activity: touches (calls, emails, texts, notes, meetings), tasks and to-dos, calendar entries, sequences, pipeline stages and transaction details tracked in the Business Tracker.
• Real estate records: properties, open houses and the sign-in details visitors provide, listing feedback, market reviews, distress records and farm lists.
• Business directory entries (vendors and other professionals) and the share links you create for them.
• Team messages, checklists, bookmarks, habit tracker entries and dashboard widget settings.
• Files and images you upload, such as logos and photos.

Information from connected services

If you connect Google Contacts, we access your Google contacts (read and write) so they can be imported and kept in sync with Lead Latte. We store an encrypted refresh token so the sync can run without you signing in each time. If you add an iCal feed, we fetch the events from the URL you provide.

Information from public pages

When a visitor completes an open house registration or a listing feedback form, we collect what they submit (such as name, contact details, ratings, comments and price opinions) and store it in the account of the agent who published the page. Public pages are protected by Cloudflare Turnstile, which may process technical signals from your browser to tell people from bots.

Usage and technical information

We keep an activity log of actions taken in the app, and we record clicks and visits on short links and QR codes created in Lead Latte (including timestamp, approximate referrer and device information) so the link owner can see analytics. Our servers log standard request information such as IP address, browser type and errors. We use cookies only as described in section 8.

3. How we use information

• To provide, operate, secure and support the service, including authentication, syncing, imports, exports, reports and backups.
• To show your own data back to you, and to your team where you have chosen to share it.
• To send service emails on your behalf and to you, such as team invitations, join-request notices, outbound email you compose, and account or security messages.
• To power optional features you turn on, such as AI summaries and propensity scoring (see section 5).
• To investigate abuse, debug problems, prevent fraud and improve performance and reliability.
• To comply with the law.

We do not sell your information or your contacts’ information, and we do not use CRM data for advertising.

4. Who we share information with

Your team. If you are part of a team in Lead Latte, team leads and members can see data according to the team visibility settings in your account. Team messages are visible to the participants.

Service providers that process data for us under the purposes described in this policy:

• Google, for sign-in and Google Contacts sync.
• Cloudflare, for Turnstile bot protection on public forms.
• An email delivery (SMTP) provider, to send invitations, notifications and email you send through the app.
• Anthropic, for AI features you enable (section 5).
• Gravatar, to look up avatar images for contact email addresses (only an irreversible hash of the email address is sent).
• Our hosting and database providers, which store the data described above.

Public pages you publish. Information you choose to publish, such as an open house page, your agent photo, name and team logo, or a shared business directory page, is visible to anyone with the link.

Legal and safety. We may disclose information when required by law or to protect the rights, safety and security of Lead Latte, our users or others.

Business transfers. If Lead Latte is involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction, and we will tell you before it becomes subject to a different privacy policy.

5. AI features

AI features are optional and off by default. When you enable them and supply a Claude (Anthropic) API key, or we provide one, Lead Latte sends the relevant CRM data (for example a contact’s notes and touch history, or report queries) to Anthropic to generate summaries and suggestions. Anthropic processes this data under its own terms and privacy policy, and we do not allow it to be used to train models through our integration. Turn the feature off in Settings at any time and no further data is sent. AI output can be inaccurate — review it before relying on it.

6. Google user data

Lead Latte’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

• We request your basic profile and email to sign you in, and access to your Google Contacts to import and sync them.
• Google data is used only to provide the import and sync features you request. It is not sold, used for advertising, or used to train generalized AI models.
• Humans at Lead Latte do not read your Google data except with your consent for support, where needed for security or to comply with law.
• Access is read and write: we read your contacts to import and sync them, and when you use sync features we create, update or delete the matching contacts in your Google account. We make no changes to your Google account that you have not asked for.
• Imported Google contact data is stored in your Lead Latte account and encrypted at rest. Your Google refresh token is stored encrypted and is used only to run the sync you enabled.
• If you turn on AI features, Google-sourced contact data may be sent to Anthropic as described in section 5, only to produce the summary or suggestion you requested.
• When you disconnect, we revoke and delete the Google token. Contacts already imported stay in your Lead Latte account until you delete them or delete your account, which permanently erases them.
• You can disconnect Google Contacts in Settings and revoke access at any time at myaccount.google.com/permissions.

7. Security

We use reasonable administrative and technical safeguards, including encrypted connections, encryption of stored Google tokens and authenticator secrets, and access scoping so Users see only data they are entitled to. You can add optional two-factor sign-in with an authenticator app or a passkey/security key in Settings → Security. No system is perfectly secure, and we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately.

8. Cookies and similar technologies

We use cookies that are necessary for the service: a session cookie to keep you signed in, a verification cookie after two-factor sign-in, and security cookies. Our public pages may also use Cloudflare Turnstile. We do not use advertising or cross-site tracking cookies.

9. Your CRM data and your contacts

As a User, you are responsible for the information you put about your contacts into Lead Latte and for having a lawful basis to store it and to contact them, including compliance with laws on marketing calls, texts and email (such as the TCPA and CAN-SPAM) and any do-not-contact requests. For that data, Lead Latte acts as a service provider processing it on your behalf, and we handle it only to provide the service to you.

If you are a contact and want to access, correct or delete information about you, please ask the agent who holds it. You may also contact us at support@leadlattecrm.com and we will help route the request.

10. Retention and deletion

We keep your information while your account is active and as needed to provide the service. You can edit or delete individual records in the app and export your data. You can delete your account yourself in Settings → Data & Privacy: this permanently erases your account and the data you own, and revokes your Google connection. If you cannot do that (for example, you no longer have access to your account), email support@leadlattecrm.com and we will do it for you. Infrastructure backups of our database are overwritten on their normal cycle, so deleted data may remain in them briefly, and we may retain limited information where we must for legal or security purposes.

11. Your choices and rights

You can access and update your profile and preferences in Settings, export data, disconnect integrations, disable AI features, and manage two-factor sign-in. Depending on where you live, you may have additional rights, such as to request access to, correction of, or deletion of your personal information, or to object to certain processing. To exercise a right, email support@leadlattecrm.com. We will not discriminate against you for doing so.

12. Children

Lead Latte is for professional use by adults and is not directed to children under 18. We do not knowingly collect information from children. If you believe we have, contact us and we will delete it.

13. International users

Lead Latte is operated in the United States and data is processed and stored there. If you use the service from elsewhere, you understand your information will be transferred to and processed in the United States.

14. Changes to this policy

We may update this policy from time to time. We will post the new version here with a new effective date and, for material changes, notify you by email or in the app.

15. Contact us

Questions or requests about this policy can be sent to support@leadlattecrm.com.