Privacy Policy

1. Introduction

Lotus Leads LLC ("Lotus," "we," "us," or "our") operates getlotusleads.com, related subdomains, the partner portal, our referral and affiliate program, the Lotus Discord community, and associated lead generation, advertising, data, and software services (collectively, the "Services"). This Privacy Policy explains what information we collect, how we use and share it, and the choices you have. By using the Services, you consent to the practices described here.

Please read this Policy alongside our Terms and Conditions. Capitalized terms not defined here have the meaning given in the Terms.

2. Information We Collect

2.1 Information You Provide

• Identity & contact data: name, email, phone, company, Discord username.
• Professional data: profession(s), markets / state coverage, experience level, monthly marketing budget, transactions closed in the past year, buyer lists, pipeline, and pod participation.
• Pre-qualification and partner pre-qualification answers, including investor type, capital acknowledgement, and goals.
• Account credentials (password hashes are managed by Supabase Auth; we never see your plaintext password).
• Payment information, processed by Stripe. We do not store full card numbers on our servers.
• Content you upload to the partner portal, including deals, expenses, contracts, buyer info, and files.
• Communications you send us (support messages, chat widget, email, SMS).
• Scheduling data when you book a Calendly consultation with us.

2.2 Information Collected Automatically

• Device & technical data: IP address, user agent, OS, browser, device identifiers, language, referrer URL, pages viewed, session timing.
• Approximate location derived from IP (used for geo-gating restricted regions and analytics).
• Cookies, local storage, and session storage (including referral attribution cookies and captured utm_source, utm_medium, utm_campaign, utm_content, and utm_term parameters at signup).
• Event data from ad pixels including the Meta Pixel and Reddit Pixel, used to measure and optimize advertising.
• Click and referral activity, including referral link clicks attributed to your referral code.

2.3 Information From Third Parties

• Lead data from advertising platforms (Meta, Reddit, Google, TikTok), landing-page forms, partner campaigns, and data providers, including consumer-supplied name, phone, email, property address, motivation, timeline, and condition.
• Payment and subscription metadata from Stripe (customer IDs, session IDs, invoice status).
• Ad account performance data from Meta Ads and other platforms via authorized API access.
• Calendly booking data when users schedule consultations with us.

3. How We Use Information

• Provide, operate, secure, and improve the Services.
• Create and manage accounts, authenticate users, and assign roles (customer, client, operator, partner, admin).
• Process payments, subscriptions, commissions, and payouts.
• Deliver, match, deduplicate, enrich, route, re-sell, and otherwise monetize leads, including after the six-month exclusivity window described in our Terms.
• Operate partner pods, match operators with partners, and track deal performance.
• Send transactional, service, and marketing communications (email, SMS, in-app) subject to your consent preferences.
• Attribute signups to marketing sources (e.g., Facebook Ads, Reddit Ads, organic) and measure ad performance.
• Run the referral / affiliate program, including attribution, fraud detection, tier calculation, and payout processing.
• Detect, investigate, and prevent fraud, abuse, chargebacks, and security incidents.
• Comply with legal obligations and enforce our Terms.
• Aggregate and de-identify data for analytics, benchmarking, and product development.

4. Lead Data; Re-Use After Six Months

Motivated-seller and consumer lead records we generate or acquire are business data of Lotus. If you purchase access to leads, you receive a non-exclusive license to use those records under our Terms.

Six (6) months after a lead is originally generated, Lotus may, at its sole discretion and without notice or additional payment to you, re-sell the lead to other customers, redistribute it, license it to third parties, work the lead internally (including through Lotus-operated pods, operators, partners, or affiliates), or include it in data products. If you submit information to us as a consumer (for example, via a seller lead form), you consent to your information being used, stored, and shared with real estate professionals and partners for the purpose of contacting you about your property, including over time and across multiple buyers.

5. How We Share Information

• Service providers / processors: Supabase (database, auth, storage, edge functions), Stripe (payments), email and SMS providers, analytics providers, Calendly, Discord, Meta, Reddit, and hosting/CDN vendors, each under contractual confidentiality and security obligations.
• Customers & partners: We share leads with the customers, operators, partners, and pods that receive or work them, and may re-share after the six-month window described above.
• Advertising platforms: We may share hashed identifiers with ad platforms (including Meta and Reddit) to measure, optimize, and create audiences.
• Legal & safety: We may disclose information to comply with law, lawful process, or government request; to protect rights, property, or safety; or to investigate fraud or TOS violations.
• Business transfers: In connection with a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction.
• With consent: For any other purpose disclosed at the time of collection.

We do not sell "personal information" in exchange for money in the colloquial sense of social profiling, but our lead business does involve the sale and sharing of consumer contact and property data; for California residents, this may constitute a "sale" or "sharing" under the CCPA/CPRA. See Section 9 for your choices.

6. Cookies and Tracking

We and authorized third parties use cookies, pixels (Meta Pixel, Reddit Pixel), local storage, and session storage to authenticate users, remember preferences, store referral codes, capture UTM marketing source at signup, measure advertising, and detect fraud. Most browsers let you refuse or delete cookies; doing so may disable parts of the Services.

Some browsers send Global Privacy Control (GPC) or Do Not Track signals. Where required by law, we honor GPC as an opt-out of "sale" and "sharing" under applicable state privacy laws.

7. SMS, Email, and Phone Consent

If you check the SMS consent box and provide a phone number, you consent to receive SMS/MMS messages from Lotus Leads LLC for transactional, operational, promotional, and marketing purposes, including via automated systems. Message and data rates may apply; frequency varies. Reply STOP to opt out of SMS, HELP for help. Consent is not a condition of purchase. You can unsubscribe from marketing email via the unsubscribe link; transactional messages related to your account will continue.

8. Data Retention

We retain account, billing, communication, and deal data for the life of your account and for as long afterward as needed to comply with legal, tax, accounting, dispute-resolution, or audit obligations. Lead records may be retained indefinitely as part of our lead database, subject to applicable law and to Section 4 regarding re-use. Backups are retained on a rolling schedule.

9. Your Privacy Rights

Depending on your state or country, you may have rights to:

• Access or receive a copy of your personal information.
• Correct inaccurate information.
• Request deletion, subject to legal retention obligations.
• Opt out of targeted advertising, "sale," or "sharing" of personal information.
• Limit use of sensitive personal information.
• Withdraw consent and unsubscribe from marketing messages.
• Appeal a denial of a privacy request.
• Be free from retaliation for exercising these rights.

To exercise rights, email info@getlotusleads.com with the subject line "Privacy Request." We will verify your identity and respond within the timeframes required by law. You may also designate an authorized agent.

10. California, Colorado, Virginia, and Other State Rights

If you are a resident of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, or another state with a comprehensive consumer privacy law, you have rights under those laws including access, correction, deletion, portability, and opt-out of targeted advertising, "sale," "sharing," and certain profiling. We honor verified requests as required by law. California residents may also request information about categories of personal information collected, sources, purposes, and categories of third parties to whom it is disclosed.

11. International Users

The Services are operated from the United States and are intended for U.S. audiences. Some regions are geo-gated and may be entirely unavailable. If you access the Services from outside the U.S., you consent to transferring your information to and processing it in the U.S., which may not provide the same protections as your jurisdiction.

12. Security

We use administrative, technical, and physical safeguards including TLS in transit, encryption at rest via our cloud providers, row-level security policies in our database, least-privilege access, and audit logging. No system is perfectly secure, and we cannot guarantee absolute security. You are responsible for safeguarding your credentials and for the security of devices used to access the Services.

13. Children

The Services are not directed to and may not be used by anyone under 18. We do not knowingly collect information from children. If you believe a child has provided us information, contact us to request deletion.

14. Changes to This Policy

We may update this Privacy Policy at any time. Material changes will be posted here with a new "Last Updated" date and, where required, communicated by email or in-app notice. Your continued use of the Services after the effective date constitutes acceptance.

15. Contact