1. Who This Policy Covers

This policy applies to two groups:

• Customers — the businesses and agencies that sign up for and use TraceLever (our account holders and their authorized users).

• Visitors — individuals who visit or submit information on a website, landing page, or form operated by a TraceLever customer where our tracking is installed.

For data we process on behalf of our Customers about their Visitors, the Customer is the "controller" of that data and TraceLever acts as a "processor" — we handle it under the Customer's instructions and our agreement with them.

2. Information We Collect

Account and billing information

When you create a TraceLever account, we collect your name, business name, email address, and account credentials. If you purchase a paid plan, payment is processed by our third-party payment processor; we do not store full card numbers on our systems.

First-party tracking and session data

When our tracking is installed on a Customer's website, landing page, or funnel, TraceLever collects information about visits and interactions in order to connect an ad click to a later conversion. This may include:

• A first-party identifier (a device or session "fingerprint") used to recognize a returning visitor across the customer journey;

• Page views, referring URLs, and timestamps;

• Advertising parameters attached to a link (such as UTM tags, click IDs, and campaign, ad set, and creative identifiers);

• General device and browser information and approximate location derived from IP address;

• IP address.

Form submission data

When a visitor submits a form on a Customer's site or funnel, we may receive the information entered (such as name, email, phone number, and message) so it can be tied to the originating ad and the resulting conversion.

Connected ad platform data

With the Customer's authorization, we connect to advertising platforms such as Google Ads and Meta to retrieve campaign performance data — spend, impressions, clicks, campaign and ad structure, and platform-reported conversions. This data is associated with the Customer's ad accounts.

Connected business and CRM data

With the Customer's authorization, we connect to tools such as GoHighLevel, AccuLynx, Jobber, Square, and HubSpot to retrieve contact, opportunity, job, and revenue information. This lets us tie a closed job or sale back to the ad that drove it.

3. How We Use Information

We use information to:

• Provide the core Service — tracing the customer journey from ad click to revenue and reporting it back to the Customer;

• Calculate attribution metrics such as cost per closed job and revenue by ad;

• Operate, maintain, secure, and improve the Service;

• Communicate with Customers about their account, support requests, and Service updates;

• Detect, prevent, and address fraud, abuse, and technical issues;

• Comply with legal obligations.

We do not sell personal information, and we do not use Visitor data collected on a Customer's behalf for our own advertising.

4. How Information Is Stored and Protected

TraceLever data is hosted on reputable cloud infrastructure providers. We use industry-standard safeguards — including encryption in transit, access controls, and authentication — to protect information against unauthorized access, loss, or misuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We retain information for as long as a Customer account is active and as needed to provide the Service, and afterward as required for legitimate business or legal purposes. Customers may request deletion of their data as described below.

5. How We Share Information

We share information only as needed to run the Service:

• Service providers — cloud hosting, payment processing, and analytics vendors that help us operate, bound by confidentiality and data-protection obligations;

• Connected platforms — the ad and business tools a Customer chooses to connect, to send and retrieve the data the integration requires;

• Legal and safety — when required by law, legal process, or to protect rights, safety, and the integrity of the Service;

• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy.

6. Cookies and Tracking Technologies

TraceLever uses first-party cookies and similar technologies to recognize returning visitors and maintain the attribution thread across a customer journey. These are set in the first-party context of the Customer's domain. Visitors can control cookies through their browser settings, though disabling them may affect how journeys are traced. Customers are responsible for providing appropriate cookie and privacy notices and obtaining any required consent on their own sites.

7. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, or port your personal information, or to object to or restrict certain processing.

• Customers can access and update account data within the Service and may request export or deletion of their account data by contacting us.

• Visitors whose data was collected through a Customer's site should direct requests to that business (the controller). We will assist our Customers in responding to such requests.

To exercise any right, contact us at the email below. We will respond consistent with applicable law.

8. Children's Privacy

The Service is intended for businesses and is not directed to children under 16. We do not knowingly collect personal information from children.

9. International Users

TraceLever is operated from the United States, and information may be processed in the United States or other countries where we or our service providers operate. By using the Service, you understand that your information may be transferred to and processed in countries with different data protection laws than your own.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we'll revise the "Last updated" date above and, where appropriate, notify Customers. Continued use of the Service after changes take effect means you accept the updated policy.

11. Contact Us

Questions about this policy or your data? Contact us at [email protected].