Report To Leads ("we," "us," "our") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information. This policy applies to the Report To Leads software ("Service") and the reporttoleads.com website.

1. Information We Collect

Account Information

• Email address (used for login, communications, and account recovery)
• Password (stored as a one-way cryptographic hash — we cannot see your password)

Shop and Business Data

Data you enter into the Service, including but not limited to:

• Shop name, address, phone number, and licence information
• Customer records (names, addresses, ID information, photos, physical descriptions)
• Purchase and sales records (items, serial numbers, photos, amounts, dates)
• Inventory records
• Staff member information

This data is your data. We store it on your behalf and do not access, analyze, or use it for any purpose other than providing the Service to you — including transmitting the reports you direct the Service to send to law-enforcement reporting systems such as LEADS Online.

Automatically Collected Information

We collect basic technical information to keep the Service running:

• Browser type and version
• IP address (for authentication and security purposes)
• Timestamps of login sessions

Marketing website: the reporttoleads.com marketing pages use Google Analytics to measure visits and page views. Google Analytics sets cookies and receives standard visit data under Google's privacy policy. The application itself (app.reporttoleads.com) does not use tracking cookies, analytics services, or advertising pixels.

2. How We Use Your Information

Information	Purpose
Email address	Account authentication, password recovery, service communications, subscription billing
Password hash	Secure login verification
Shop and business data	Providing the Service — storing, syncing, displaying your data back to you, and transmitting the reports you direct to law-enforcement reporting systems
Technical data	Security monitoring, debugging, and maintaining Service availability

We do not use your data for advertising, profiling, marketing to third parties, or any purpose other than operating the Service.

3. How We Protect Your Information

• Encryption in transit: All data between your browser and our servers travels over TLS encryption.
• Encryption at rest: Data stored on our database servers is encrypted at rest.
• Row Level Security: Every database table is protected by Row Level Security (RLS). The database itself enforces that only your authenticated session can read or write your data.
• Password hashing: Your password is stored as a one-way cryptographic hash. It cannot be reversed, viewed, or recovered by anyone — including us.

4. Who We Share Your Information With

We do not sell, rent, trade, or share your personal or business data with any third party for their own use. The only cases in which data leaves our systems are:

• Law-enforcement reporting you direct: when you use the Service's reporting features, the transaction data you enter is transmitted to the reporting system your jurisdiction requires (such as LEADS Online). That transmission is the purpose of the Service and happens at your direction; the receiving system's handling of the data is governed by its own policies and your local laws.
• Infrastructure providers: your data is stored on our cloud database host, which provides infrastructure but does not access your data.
• Payment processing: subscription payments are processed by Stripe under Stripe's own privacy policy. We do not store your credit card numbers.
• Legal requirements: we may disclose information if required by law, court order, or lawful government request. We will notify you if legally permitted to do so.

5. Your Rights

• Access your data: view all data stored in the Service at any time by using the application.
• Export your data: download a complete copy of your data at any time using the export tools in the application.
• Delete your data: request complete deletion of your account and all associated data by emailing [email protected]. Deletion requests are processed within 30 days.
• Correct your data: update or correct any information at any time through the application.
• Cancel your account: cancel your subscription at any time. Your data is retained for 90 days after cancellation, then permanently deleted unless you request earlier deletion.

6. Data Retention

• Active accounts: data is retained as long as your account is active and your subscription is current.
• Cancelled accounts: data is retained for 90 days after cancellation to allow reactivation or export, then permanently deleted.
• Deletion requests: processed within 30 days. Once deleted, data cannot be recovered.
• Note: reports already transmitted to law-enforcement systems reside in those systems and are outside our control; retention there is governed by the receiving agency.

7. Customer Data (Your Customers)

The Service stores information about your customers that you enter as part of your regulated business operations, including identification details required by reporting laws. This information is part of your business data and is subject to the protections described in this policy.

You are the data controller for your customer information. You are responsible for complying with all applicable privacy laws regarding the personal information of your customers — including, for Canadian businesses, the Personal Information Protection and Electronic Documents Act (PIPEDA) and any applicable provincial privacy legislation — together with any notice or consent requirements in your jurisdiction. We act solely as a data processor: we store your customer information securely on your behalf and transmit it only where you direct through the Service's reporting features.

8. Children's Privacy

The Service is intended for use by business operators who are at least 18 years old. We do not knowingly collect information from persons under 18.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. The version and effective date at the top of this page indicate when the policy was last revised.

10. Contact

Pawn Software  ·  [email protected]  ·  reporttoleads.com  ·  800-710-6184  ·  Grayson County, Texas