1. Introduction
Lash Digital Solutions LLC ("Company," "we," "us," or "our") operates the Client Landing platform (the "Service") accessible at clientlanding.com and api.clientlanding.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
By accessing or using Client Landing, you agree to this Privacy Policy. If you do not agree, please do not use the Service.
2. Information We Collect
2.1 Account Information
When you register for an account, we collect:
- Name, email address, and password
- Company name and business type
- Phone number
- Billing and payment information (processed by Stripe)
2.2 Lead and Contact Data
When you use the Service to manage leads and contacts, we store:
- Lead names, phone numbers, and email addresses
- Business names and addresses
- Lead source and status information
- Lead scores and qualification data
- Contact records (customers, partners, vendors)
- Deal and pipeline information
2.3 Communication Data
When the Service sends or receives communications on your behalf, we collect and store:
- SMS message content and delivery status
- Voice call recordings and transcripts
- AI-generated conversation responses
- Voicemail recordings
- Consent and opt-in/opt-out records
2.4 Usage and Analytics Data
We automatically collect:
- Campaign performance metrics (delivery rates, response rates)
- Feature usage statistics
- API request logs
- Audit logs of user actions
- Browser type, IP address, and device information
2.5 Publicly Available Business Data
Our Lead Finder feature retrieves publicly available business information from Google Maps/Places, including business names, addresses, phone numbers, websites, and ratings. This data is publicly listed by the businesses themselves.
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Service
- Send SMS messages and initiate voice calls on your behalf to your leads
- Generate AI-powered conversation responses
- Process payments and manage subscriptions
- Provide analytics, lead scoring, and campaign performance data
- Enforce TCPA compliance (quiet hours, DNC lists, consent tracking)
- Detect and prevent fraud, abuse, and security incidents
- Communicate with you about your account, updates, and support
- Improve and develop new features
4. Third-Party Services
We use the following third-party service providers to operate Client Landing. Each provider processes data only as necessary to deliver their respective services:
- Twilio — SMS messaging and voice call delivery. Twilio processes phone numbers, message content, and call audio. See Twilio's Privacy Policy.
- Anthropic (Claude) — AI-powered conversation generation and intelligence features (summarization, sentiment analysis, intent detection). Conversation transcripts are sent to Anthropic for processing. See Anthropic's Privacy Policy.
- Stripe — Payment processing for subscriptions. Stripe processes your payment card information directly; we do not store card numbers. See Stripe's Privacy Policy.
- Google Maps / Places API — Business search in the Lead Finder feature. Google processes search queries and returns publicly listed business data. See Google's Privacy Policy.
- Deepgram — Speech-to-text transcription for voice calls. Call audio is sent to Deepgram for real-time transcription. See Deepgram's Privacy Policy.
- ElevenLabs — Text-to-speech for AI voice calls. Generated conversation text is sent to ElevenLabs for audio synthesis. See ElevenLabs' Privacy Policy.
- Amazon Web Services (AWS) — Cloud hosting, data storage (S3), and database services (RDS). All data is stored in the US-East-1 (N. Virginia) region. See AWS Privacy Policy.
5. Data Storage and Security
All data is stored on Amazon Web Services (AWS) infrastructure in the US-East-1 (Northern Virginia) region. We implement industry-standard security measures including:
- Encryption in transit (TLS/SSL) for all data transmissions
- Encryption at rest for database storage
- Hashed API keys (SHA-256) — we never store raw API keys
- Hashed passwords — we never store plaintext passwords
- JWT-based authentication with httpOnly cookies
- Role-based access control (account admin, admin, agent, viewer)
- Audit logging of all user actions
- Rate limiting on API endpoints
While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
6. SMS and Voice Communications
Client Landing sends SMS messages and initiates voice calls to leads on behalf of our users. Important information regarding these communications:
- Opt-Out: Recipients can reply STOP to any SMS message to immediately opt out of future messages. We maintain Do-Not-Call (DNC) lists to honor all opt-out requests.
- TCPA Compliance: We enforce Telephone Consumer Protection Act (TCPA) compliance including quiet hours, rate limiting, and consent tracking.
- Call Recording: Voice calls may be recorded for quality and training purposes. Call recordings and transcripts are stored securely and accessible only to the account that initiated the call.
- AI Disclosure: Voice calls use AI-generated speech. Leads interacting with our voice system are communicating with an AI assistant.
7. Data Sharing and Disclosure
We do not sell your personal information. We may share data in the following circumstances:
- Service Providers: With the third-party providers listed in Section 4, solely to provide the Service.
- CRM Integrations: When you connect integrations (HubSpot, Salesforce, GoHighLevel, Google Sheets, Slack, etc.), data is shared with those platforms per your configuration.
- Legal Requirements: When required by law, regulation, legal process, or governmental request.
- Business Transfers: In connection with a merger, acquisition, or sale of assets.
- With Your Consent: When you explicitly authorize sharing.
8. Data Retention
We retain your data for as long as your account is active or as needed to provide the Service. Specifically:
- Account data is retained until you delete your account
- Lead and contact data is retained until deleted by the account owner
- Conversation transcripts and call recordings are retained for the duration of the account
- Audit logs are retained for a minimum of 12 months
- Consent and opt-out records are retained indefinitely for compliance purposes
- Billing records are retained as required by applicable tax and financial regulations
Upon account deletion, we will delete or anonymize your data within 90 days, except where retention is required by law or for legitimate business purposes (such as compliance records).
9. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict processing of your data
- Request portability of your data
- Withdraw consent at any time
To exercise any of these rights, contact us at support@clientlanding.com.
10. Cookies
We use httpOnly cookies for authentication (JWT session tokens). We do not use third-party tracking cookies or advertising cookies. Essential cookies are required for the Service to function and cannot be disabled.
11. Children's Privacy
Client Landing is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will take steps to delete that information promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.
13. Contact Us
If you have any questions about this Privacy Policy, please contact us:
© 2026 Lash Digital Solutions LLC. All rights reserved.