Privacy Policy
Last updated: September 9, 2026 · Version 2026-09-09
Who we are
VIPLead is business software operated by Disrupt Technologies LLC, an Illinois limited liability company, of 29 E Stephenson St, Freeport, IL 61032. We provide customer-relationship, estimating, contracting, scheduling and billing software to home-improvement and home-services contractors.
Two kinds of people, two different roles
This distinction runs through everything below and is the most important thing on this page.
Our customers are contracting businesses that subscribe to VIPLead. When we handle information about those businesses and their staff, we decide how it is used — we are the controller of it.
Our customers' customers are the homeowners and property owners those contractors sell to and work for. When we handle information about homeowners, we do so on our customer's instructions and on their behalf. The contractor decides what is collected and why; we process it to provide the service to them. If you are a homeowner with a question about your information, please contact the contractor you are working with — they control it, and we will support them in responding to you.
Information we collect
- From our customers (contracting businesses): account and billing details; the names, work email addresses, phone numbers and roles of staff users; authentication data; subscription and payment records; support correspondence; and usage and diagnostic data about how the software is used.
- On behalf of our customers, about homeowners: contact details and property address; project details, measurements, site conditions and photographs; estimates and contracts; where our signing features are used, signatures and the associated audit record (timestamp, IP address and signing method); invoices, payments and payment status; scheduling and job history; communications sent through the platform, including SMS, email and call records; and, where a homeowner applies for financing through a lender we integrate with, the application data submitted and the decision the lender returns.
- Automatically: log data, device and browser information, IP address, and — where a user enables it in the mobile application — location captured at the moment a staff member clocks in or out, recorded as evidence attached to that punch. A punch made outside the expected work location is flagged for a manager rather than blocked. Location is collected only with the device permission the user grants, is not used for continuous tracking or route monitoring, and the permission can be withdrawn in device settings at any time.
Consumer financing information
Where a homeowner applies for financing through a lender integrated with VIPLead, we transmit the information the lender requires to evaluate the application — which, depending on the lender, includes the applicant's Social Security number — and we receive and store the lender's decision and status. We transmit this only when an application is initiated, only to the lender chosen, and only for that purpose. The lender makes the credit decision; VIPLead does not. We are not a creditor and not a consumer reporting agency.
What we do not store
We do not store complete payment card numbers. Where online payments are enabled on an account, card and bank details entered by a homeowner are captured directly by our payment processor's hosted fields and never reach VIPLead's servers; we store only a token, the card type and the last four digits.
One exception: where a contracting business gives us its own bank account and routing number so a lender can pay it directly, we store those details encrypted at rest. These are the business's payout details, not a consumer's payment details.
We do not sell personal information, and we do not share it with third parties for their own advertising or marketing.
Why we use information
To provide and operate the platform; to authenticate users and secure accounts; to process payments and produce invoices, receipts and financial records; to transmit financing applications a homeowner initiates; to send transactional and other messages our customer initiates; to provide support; to detect fraud and abuse; to meet legal, tax and accounting obligations; and to maintain and improve the reliability, security and performance of the service.
Who we share it with
We share information only with the service providers who make the platform work, and only to the extent each needs. Our current subprocessors are listed at /legal/subprocessors, which we keep current.
We also disclose information where we are legally required to; where necessary to establish or defend legal claims, or to protect the rights or safety of any person; and to a successor in the event of a merger, acquisition or sale of assets, in which case this policy continues to apply until replaced with notice.
When a customer connects an accounting system. If a customer connects VIPLead to an accounting platform, we send that platform the financial records the customer chooses to sync — customers, invoices, payments and journal entries — and read back only what is needed to confirm the sync. We access only the company file the customer authorizes, using credentials the customer can revoke at any time from within VIPLead or from the accounting platform. We do not access a customer's accounting data for any purpose other than performing the sync they configured.
Security
We encrypt data in transit and at rest. Access to production systems is limited to personnel who need it, is authenticated, and is logged. Credentials for connected third-party systems are stored encrypted and are never exposed to the browser. We maintain change control and vulnerability management processes appropriate to the platform and review them regularly.
No system is perfectly secure. If a breach affects personal information we hold, we will notify affected customers without undue delay and in accordance with applicable law.
How long we keep it
We retain customer account data for as long as the account is active. After an account closes we retain it for ninety (90) days to allow reactivation and export — the same ninety-day window during which you may export under section 14 of the Terms — after which it is deleted or irreversibly anonymized.
Financial and accounting records — invoices, payments, ledger entries and tax records — are retained for seven (7) years to meet accounting, audit and tax obligations, as are executed contracts and their signing audit trails. A customer may request earlier deletion of data not subject to those obligations.
Your rights
We extend the following rights to everyone, wherever you live, rather than only to residents of particular states:
- To know what personal information we hold about you and why
- To obtain a copy in a portable format
- To have inaccurate information corrected
- To have information deleted, subject to the retention obligations above
- To withdraw a consent you previously gave
- To appeal a decision if we decline a request
To exercise any of these, contact [email protected]. We will acknowledge within ten (10) days and respond substantively within forty-five (45) days, extending once by a further forty-five days where necessary and telling you if we do. We will not discriminate against you for exercising a right.
If you are a homeowner, the contractor you are working with controls your information and is the right first contact. Write to us at the address above and we will route your request to them and assist them in responding.
Marketing email. You may opt out of non-transactional email at any time using the link in the message or by writing to us. Transactional messages necessary to operate the service cannot be opted out of while an account is active.
Children
VIPLead is business software, is not directed to children, and we do not knowingly collect information from anyone under 18. If you believe a child has provided us information, write to [email protected] and we will delete it.
Changes to this policy
We will post changes here and update the date above. Where a change materially affects how we handle personal information, we will notify account administrators before it takes effect. Previous versions remain available at /legal/privacy.
Contact
Privacy enquiries: [email protected] · Privacy owner: Alex Marck, Disrupt Technologies LLC · Post: Disrupt Technologies LLC, 29 E Stephenson St, Freeport, IL 61032