Data Policy

Last updated: June 2026

1. Purpose of This Policy

This Data Policy describes the categories of data that Broad Leads LLC ("Broad Leads," "we," "us," or "our") processes, where that data comes from, how it moves through our platform, and the safeguards we apply throughout its lifecycle. It complements our Privacy Policy and GDPR Compliance statement, which describe individual rights and lawful bases in greater detail.

2. What Data We Process

We process several categories of data in order to generate, verify, and deliver leads and to operate our CRM:

• Lead data — contact details and qualifying information for prospective buyers and sellers, such as name, phone, email, location/ZIP, budget, timeline, and stated intent.
• CRM data — records created or stored by agents inside the platform, including notes, appointments, pipeline stages, tasks, and communication history.
• Account data — information about agents and brokerages using the Services, including registration details, package selections, and billing information.
• Usage data — technical and behavioral data generated as users interact with the website and platform, such as device information, IP address, and feature usage.

3. Data Sources

We obtain data from a combination of sources, including:

• Information provided directly by prospects through campaign landing pages, forms, and inquiries;
• Information provided by agents and brokerages when they create accounts or enter records into the CRM;
• Data generated automatically as users interact with our website and platform; and
• Verification and enrichment data gathered by our inside sales agent (ISA) team during the qualification process.

4. How Data Flows Through the Platform

Data moves through our platform in a structured lifecycle designed to deliver high-quality, verified opportunities:

• Capture — a prospect submits an inquiry or responds to a targeted campaign, and the lead data is recorded in our system.
• ISA verification — our inside sales agent team reviews and contacts the prospect to confirm intent, timeline, budget, and contact accuracy.
• Delivery — verified opportunities are routed to the agent whose territory matches the lead, via alerts, appointments, or live call transfers.
• CRM — the lead and all subsequent activity are organized in the agent's CRM for follow-up, pipeline tracking, and reporting.

5. Data Security & Storage

We store data with reputable infrastructure providers and apply administrative, technical, and physical safeguards designed to protect it against unauthorized access, loss, or misuse. These measures include access controls, authentication, encryption in transit where appropriate, monitoring, and vendor due diligence. While we work to protect your data, no system can be guaranteed completely secure.

6. Data Sharing With Agents and Processors

Verified lead data is shared with the agent or brokerage that holds the relevant territory, so they can follow up with the prospect. We also share data with trusted service providers (processors) who support the platform, such as hosting, analytics, payment processing, and messaging and call-transfer providers. These providers are permitted to process data only as needed to perform services for us and are bound by appropriate confidentiality and data protection obligations. We do not sell personal data.

7. Data Accuracy

Lead quality depends on accurate data. Our ISA verification process is designed to confirm and improve the accuracy of lead data before delivery. Agents are responsible for keeping the records they maintain in the CRM accurate and up to date, and for correcting or removing data as appropriate. If we learn that data is inaccurate, we will take reasonable steps to correct or update it.

8. Retention & Deletion

We retain data for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. Lead and CRM data are generally retained for the duration of the relevant account relationship and for a reasonable period afterward, after which the data is deleted or anonymized in accordance with our retention schedule. Agents may request deletion of records they control, subject to applicable legal requirements.

9. Agent Responsibilities as Data Controllers / Recipients

When an agent receives lead data, that agent acts as an independent data controller (or recipient) for the data they hold and the communications they send. Agents are responsible for:

• Using lead data only for legitimate, lawful real estate purposes;
• Complying with applicable privacy, anti-spam, telemarketing, and "do not call" laws;
• Honoring opt-out and deletion requests from individuals they contact;
• Maintaining appropriate security for the data they store and handle; and
• Not reselling, redistributing, or sharing lead data without authorization.

10. Contact Us

For questions about this Data Policy or our data practices, please contact us:

• Broad Leads LLC
• 2717 Commercial Center Blvd, Suite E200, Katy, TX 77494, USA
• Phone: +1 346 214 6333
• Email: support@broadleads.com