Privacy Policy
Last updated: October 6, 2026
1. Overview
Lead Sandbox LLC (“LeadSandbox,” “we,” “us,” and “our”) provides marketing support, data verification, contact management, and CRM assistance for licensed real estate professionals. We respect your privacy and are committed to protecting it. This Privacy Policy explains how we collect, use, share, and protect your information when you visit leadsandbox.com, communicate with us, or use our services (together, the “Platform”).
Please read this policy carefully. If you do not agree with our practices, please do not use the Platform. By accessing or using the Platform, you agree to this Privacy Policy.
We comply with applicable U.S. marketing and privacy laws, including the CAN-SPAM Act, the Telephone Consumer Protection Act (TCPA), and relevant state privacy laws such as the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), where applicable.
Head Office: 1500 N Grant St #10878, Denver, CO 80203, United States
Email: info@leadsandbox.com
2. Information We Collect and How We Collect It
We may collect two types of information: Personal Information and Non-Personal Information.
Personal Information is data that can identify you, such as your name, email address, phone number, brokerage affiliation, and billing details. Non-Personal Information is data that does not identify you specifically, such as aggregated usage statistics or general browsing activity.
Information you provide to us
- Contact & Business Details: name, email address, phone number, brokerage affiliation, markets served, and billing details.
- Service & Account Data: service requests, project scopes, preferences, support chats, and ticket history.
- Content You Provide: forms, files, or contact lists you submit to us for verification or management.
- Payment Information: payments are processed by secure third-party providers. We do not store complete credit or debit card numbers.
If you submit Personal Information about other people (for example, your clients or leads), you are responsible for making sure you have the right to share it with us and to allow us to use it as described in this policy.
Information we collect automatically
Technical Data: when you use the Platform, we collect your Internet Protocol (IP) address, device type, browser information, pages viewed, and similar details through cookies and comparable technologies. See Section 10 for more on cookies.
Information from third parties
We may receive information from partners, vendors, and service providers that help us deliver our services, such as CRM platforms, data verification sources, analytics providers, and advertising or marketing partners. We take reasonable steps to confirm that such information was collected lawfully. In some cases, we combine information from several sources, including information you give us directly.
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and improve our services, including contact verification, contact management, and CRM assistance.
- Verify information and maintain quality control over the data and deliverables we handle.
- Communicate with you about quotes, onboarding, deliverables, invoices, and customer support, including security alerts and policy updates.
- Run our business, including billing, accounting, auditing, and record keeping.
- Prevent fraud, ensure security, and comply with legal obligations or protect our legal rights.
- Market our services to you in line with your communication preferences.
- Analyze usage in aggregate form to improve website performance and user experience.
Legal bases for processing
Where data protection laws require a legal basis, we rely on your consent, the performance of a contract with you, compliance with legal obligations, and our legitimate interests (such as improving our services and keeping them secure), provided those interests are not overridden by your rights and freedoms. Where we rely on consent, you can withdraw it at any time; doing so does not affect processing carried out before withdrawal.
4. Contact Data You Submit for Verification or Management
When you send us contact lists or similar data so we can verify, organize, or manage it, we handle that data on your behalf and only to deliver the services you requested. We do not use your contact lists for our own marketing, and we do not sell them. You remain responsible for having a lawful basis to collect and share that data, including any consent required for email or text outreach.
5. How We Share Your Information
We share your information only as described below:
- Service Providers: CRM platforms, email services, cloud hosting, analytics providers, and payment processors that operate under strict contractual obligations and may use your information only to provide services to us.
- Affiliates/Operations: our U.S. and Canadian affiliates, for service delivery and in a manner consistent with this policy.
- Legal/Regulatory: when required to comply with law or legal process, enforce our agreements, or protect our rights and the safety of others.
- Business Transfers: in connection with a merger, acquisition, reorganization, or sale of all or part of our business or assets.
- With Your Consent: to any other person or organization where you have agreed to the disclosure.
We may also share aggregated or anonymized information that cannot identify you for analysis and service improvement.
No sale of personal data. We do not sell personal information. Where “sale” or “sharing” is defined under state privacy laws (for example, California), we do not sell or share personal information for cross-context behavioral advertising.
Mobile numbers and SMS consent. We do not share your phone number or text-message opt-in consent with third parties for their own marketing. Text-messaging opt-in data and consent are excluded from any sharing described in this policy, except with the carriers, aggregators, and platform providers that are necessary to deliver text messages.
6. SMS and Email Communications
Message frequency varies. Standard message and data rates may apply. Consent to receive communications is not a condition of purchase.
- Email: you can opt out of marketing emails at any time using the unsubscribe link in any message.
- SMS: reply STOP to opt out, or HELP for assistance.
If you opt out of marketing, we may still send you service-related messages, such as quotes, invoices, security notices, or support replies. See our separate SMS Terms for additional details.
6A. SMS Opt-In Details
We send text messages only to people who have agreed to receive them. You can opt in by submitting an online form on our website and checking the SMS consent box. The box is optional, and you can leave it unchecked if you do not want to receive text messages from us.
If you opt in, you may receive appointment reminders, follow-up messages, and billing inquiries. Message frequency varies, and standard message and data rates may apply. Reply STOP at any time to opt out, or HELP for assistance.
Phone numbers and SMS opt-in consent collected for text messaging will not be shared with any third party or affiliate for marketing purposes. The only exception is the carriers and messaging providers that are needed to deliver our messages. For full details, see our SMS Terms & Conditions.
7. Data Retention
We keep your information only as long as reasonably necessary to provide our services and to meet legal, tax, accounting, or reporting obligations, after which we securely delete or anonymize it. Inactive accounts are typically retained for up to 24 months, unless a longer period is required for compliance or dispute resolution. We may keep information longer if there is a complaint or a reasonable prospect of a legal dispute. In some cases we anonymize information so it can no longer be linked to you and may use it for research or statistics.
8. Security
We maintain reasonable administrative, technical, and physical safeguards to protect your information against loss, misuse, and unauthorized access, alteration, or disclosure, and we expect our service providers to do the same. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. If you believe your interaction with us is no longer secure, please contact us immediately at info@leadsandbox.com.
9. International Data Transfers
Your information may be processed in the United States and Canada. Where information is transferred across borders, we implement contractual safeguards and restrict access to a need-to-know basis, and we handle it in line with applicable law.
10. Cookies & Similar Technologies
We use essential, functional, and analytics cookies to keep the Platform working and to understand how it is used. You can manage or disable cookies in your browser settings, though some features may not function properly if cookies are disabled. Some browsers offer a “Do Not Track” setting; at this time, the Platform does not respond to Do Not Track signals.
11. Your Rights and Choices
Depending on where you live, you may have the right to:
- Access, correct, or delete your information (subject to legal exceptions).
- Opt out of marketing emails at any time via the unsubscribe link.
- Opt out of SMS messages by replying “STOP” (reply “HELP” for assistance).
- Object to or restrict certain processing, or request a copy (portability) of your information, where applicable law provides.
- Withdraw consent where processing is based on consent.
To make a request, email info@leadsandbox.com with the subject line “Privacy Request.” We may need to verify your identity before acting on a request, and we may keep certain information where needed to complete a transaction, keep records, or comply with the law. If you are in the European Economic Area, the United Kingdom, or Switzerland and are unhappy with how we handle your information, you may also contact your local data protection authority.
12. California Privacy Rights
If you are a California resident, the CCPA/CPRA gives you the right to know what personal information we collect, use, and disclose; to request access to, correction of, or deletion of your personal information; to limit the use of sensitive personal information; to opt out of the “sale” or “sharing” of personal information (which we do not do); and to not be discriminated against for exercising these rights.
| Category | Collected | Disclosed for a business purpose | Sold |
|---|---|---|---|
| Identifiers (name, email, phone, IP address) | Yes | Yes | No |
| Commercial information (services requested or purchased) | Yes | Yes | No |
| Internet or network activity (pages viewed, browser, device) | Yes | Yes | No |
| Financial information (billing details; payments handled by third-party processors) | Yes | Yes (to payment processors) | No |
| Professional information (brokerage affiliation, markets served) | Yes | Yes | No |
| Inferences (analytics and preferences) | Yes | Yes | No |
| Biometric, geolocation, or protected-class information | No | No | No |
To exercise your rights, email info@leadsandbox.com with the subject line “Privacy Request.” You may also use an authorized agent to submit a request on your behalf; we may ask for proof of their authorization and to verify your identity. If we deny a request, we will explain why.
13. Other U.S. State Privacy Rights
Colorado, Connecticut, Utah, and Virginia. Residents of these states may have rights to access, correct, or delete their personal information and to opt out of targeted advertising, the sale of personal information, or certain profiling, as provided by their state’s privacy law. We do not sell personal information or use it for targeted advertising. To make a request, email info@leadsandbox.com with the subject line “Privacy Request.” If we decline your request, you may appeal by replying to our response or by emailing us again with the subject line “Privacy Appeal.” If we have not responded within 45 days, you may also appeal our failure to act.
14. Children’s Privacy
Our services are intended for business users age 18 and older. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.
15. Links to Other Websites
The Platform may link to third-party websites or services. We are not responsible for the privacy or security practices of those third parties, and a link does not mean we endorse them. Please review their policies before sharing information.
16. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. Your continued use of the Platform after changes are posted means you accept the updated policy, so please check back periodically.
17. Contact Us
If you have questions or requests regarding this Privacy Policy, please contact us:
Email: info@leadsandbox.com
Address: 1500 N Grant St #10878, Denver, CO 80203, United States