Blue Collar Lead
Blue Collar Lead
Last updated: October 7, 2026
Blue Collar Lead LLC ("we," "us," or "our") operates the Blue Collar Lead platform. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. It applies both to the businesses that use our platform and to the consumers we message on those businesses' behalf.
Account and business information: When you sign up or configure the Service, we collect names, company and contact details, service areas, team members, roles and permissions, notification preferences, business verification details, and passwords stored as one-way hashes.
Billing information: Payment processing is handled by Stripe. We do not store your credit card number. We store your Stripe customer ID and subscription status.
Customer and job data: Businesses may store contacts, addresses, leads, appointments, jobs, notes, communications, contracts, signatures, estimates, invoices, payment status, expenses, receipts, documents, photos, and videos. Businesses control what they and their authorized users upload.
Call, text, and email data: Our communications features process caller and recipient details, call recordings, transcripts, summaries, messages, delivery status, opt-outs, and consent evidence.
Integration data: When a business connects another service, we store encrypted authorization credentials and the identifiers and data needed to perform authorized actions, such as calendar events, mailbox identity, accounting records, reviews, or payment status.
Usage and device data: We collect security and operations logs, IP address, browser and device information, dashboard activity, call duration, feature usage, and error records.
Recordings and transcripts are used to operate the call, provide the business with call history and lead information, monitor quality, investigate incidents, and comply with legal obligations. They are disclosed to communications, AI, hosting, storage, and support providers only as needed to operate the Service. We do not sell recordings.
We do not sell your personal information. We share data only with:
Each of these providers has their own privacy policy and is contractually required to protect your data.
Automated lead-response texts are sent only when the intake source provides documented SMS consent. Closely related transactional messages, such as an appointment reminder or a direct reply in an active conversation, are sent on the business's behalf for the requested interaction. Merely providing a phone number is not treated as blanket consent for automated marketing.
Mobile phone numbers and SMS consent are used solely to deliver the messaging service the consumer asked for. We do not sell this information, and we do not share it with third parties or affiliates for their own marketing. Phone numbers are disclosed only to the subprocessors that operate the messaging service on our behalf (for example, Twilio for message delivery), strictly to send the messages. Consumers can reply STOP to any message to opt out at any time, or HELP for assistance. Full details are in our SMS / Text Messaging Policy.
If you connect your Google Calendar, we request access only to the Google Calendar events scope (https://www.googleapis.com/auth/calendar.events). We use this access solely to:
To answer a customer, the AI receptionist (see “AI providers and Google user data” below) receives only what that conversation needs: open time slots, or the date, time, and location of that customer’s own appointment. We store your encrypted Google authorization tokens, the IDs of events we create, and any appointments you choose to import. You can disconnect at any time from your dashboard, which revokes our access.
If you connect Gmail so customer email goes out from your own business address, we request one
Gmail scope, send only (https://www.googleapis.com/auth/gmail.send),
together with the basic openid and email scopes.
openid email: solely to learn which mailbox you just connected,
so we can set the correct From address. It returns your email address and nothing else.We cannot read your mailbox. The gmail.send scope grants no ability to
read, search, list, modify or delete any message in your Gmail account, and we do not request any
scope that would. We never see your inbox. Customer replies come back to your own business address
and, where you have set one up, to a Blue Collar Lead reply address that carries only that
conversation.
We store your encrypted Google authorization tokens and a record of the messages we sent on your behalf. You can disconnect at any time from your dashboard, which revokes our access, and you can also revoke it yourself at myaccount.google.com/permissions. On disconnection the stored tokens are deleted.
Our AI features run on Anthropic’s Claude model: directly through Anthropic’s commercial API, and on phone calls through Retell AI, our voice platform. When a customer asks about appointments, these providers process the calendar details described above only to produce that answer. No Gmail content is ever sent to them: we cannot read your mailbox, and the email address we learn from Google is used only as your From address. We do not use Google user data, or anything derived from it, to develop, improve, or train generalized AI or machine-learning models. Anthropic’s commercial terms prohibit it from training models on data sent through its API.
We retain account and customer data while the business account is active and as reasonably needed to provide the Service, meet legal, tax, security, dispute, and audit obligations, or enforce agreements. A business can request deletion or export. Some records may be retained longer where required by law, needed to preserve opt-outs and consent evidence, or stored temporarily in encrypted backups. We do not promise a fixed recording-retention period unless one is stated in a separate written agreement.
We implement industry-standard security measures including encrypted (hashed) passwords, HTTPS everywhere, HttpOnly session cookies with CSRF protection, rate limiting, and regular database backups. No system is 100% secure, and we cannot guarantee absolute security.
We use a single strictly-necessary session cookie to keep you signed in. It is set as HttpOnly, Secure, and SameSite, which means it is sent only over HTTPS and cannot be read by JavaScript. It is paired with an anti-CSRF cookie used solely to protect against cross-site request forgery. We do not store login or session tokens in your browser's localStorage, and we do not use advertising or tracking cookies.
For account, billing, and platform operations data, Blue Collar Lead LLC determines why and how the data is processed. For customer and job information a contractor enters or connects, the contractor generally determines the purpose and Blue Collar Lead processes the data to provide the Service. If you are a contractor's customer, we may route your request to that contractor so it can verify your identity and respond.
Depending on your location, you may have the right to:
To exercise any of these rights, or to request deletion or export of your data, reach us through our contact page.
We do not sell personal information or use it for cross-context behavioral advertising. Where applicable law grants additional rights, such as appeal or restriction rights, we will honor verified requests as required.
The Service is not directed at children under 13. We do not knowingly collect personal information from children.
We may update this Privacy Policy from time to time. We will notify you by email or dashboard notice when we make material changes. Continued use of the Service after changes constitutes acceptance.
Questions about this Privacy Policy? Reach us through our contact page.
Blue Collar Lead LLC