Privacy Policy

Last updated: May 14, 2026

1. Introduction

LeadMatch (the “Service”) is a brand operated by First Commit LLC, a New York limited liability company (“we,” “us,” or “our”). The Service has two distinct product lines, both covered by this policy:

  • LeadMatch data + API platform(leadmatchai.com) — business data and intelligence sold to professional customers via subscription or pay-per-record.
  • LeadMatch consumer matching(leadmatchai.com/find) — a referral service that matches homeowners with licensed contractors. We are a referral service only; we are not a contractor and do not perform the underlying construction work.

This Privacy Policy describes how we collect, use, disclose, and protect information across both product lines. By using the Service, you consent to the practices described in this policy. First Commit LLC is the legal entity responsible for the Service; our registered address and a complete list of affiliates authorized to contact consumers appear on our Affiliates page.

2. Information We Collect

Account Information: When you create an account, we collect your name, email address, company name, and payment information (processed by our third-party payment provider).

Usage Data: We automatically collect information about how you use the Service, including API call logs, pages visited, features used, IP addresses, browser type, device information, and timestamps.

Cookies and Tracking: We use cookies and similar technologies to maintain sessions, remember preferences, and analyze usage patterns. You can manage cookie preferences through your browser settings.

Communications: If you contact us directly, we may collect your name, email address, and the contents of your message.

3. Business Data We Provide

The lead data available through our Service is compiled from publicly available sources, including public business directories, government records, and commercial databases. This data pertains to businesses and business contacts, not to individuals acting in a personal capacity. We process this data to provide our business intelligence services.

4. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Process transactions and send billing-related communications
  • Monitor usage to enforce plan limits and prevent abuse
  • Respond to your requests, comments, and questions
  • Send service-related notices (e.g., updates, security alerts, account notifications)
  • Analyze usage trends to improve the Service
  • Detect, prevent, and address fraud or technical issues

5. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

  • Service Providers: With third-party vendors who perform services on our behalf (e.g., payment processing, email delivery, hosting, analytics), under agreements that require them to protect your data
  • Legal Requirements: When required by law, regulation, legal process, or governmental request
  • Protection of Rights: When we believe disclosure is necessary to protect our rights, safety, or property, or that of our users or the public
  • Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets, with notice to affected users

6. Data Security

We implement industry-standard security measures to protect your information, including encryption in transit (TLS/SSL), encryption at rest, access controls, and regular security assessments. API keys are hashed before storage. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your account information for as long as your account is active or as needed to provide the Service. Usage logs are retained for up to 24 months for analytics and compliance purposes. Upon account deletion, we will remove your personal information within 30 days, except where retention is required by law.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate personal information
  • Deletion: Request deletion of your personal information, subject to legal retention requirements
  • Portability: Request a machine-readable copy of your data
  • Objection: Object to certain processing of your personal information
  • Opt-out: Unsubscribe from marketing communications at any time

To exercise any of these rights, contact us at team@leadmatchai.com or via the contact form. We will respond within 30 days.

9. Consumer Lead Matching Service (/find)

When you submit a project request through the consumer matching service at leadmatchai.com/find, we collect:

  • Your name and email address (required)
  • Your phone number (optional — only collected if phone matching is enabled and you choose to provide one)
  • Project details: trade, scope, project city/state/zip, budget range, timeline
  • Submission metadata: IP address, user agent, timestamp, UTM source/medium/campaign parameters if applicable

How we use it:We use this information to identify licensed contractors near you whose trade, capacity, and license status match your project, and to facilitate a referral. A LeadMatch team member reviews every submission and selects the contractors we forward your information to — we do not auto-distribute consumer leads.

Who receives your information: Your name, email, and project details are forwarded by email to up to five licensed contractors selected by our team. Your phone number, if provided, is only forwarded to the specific affiliate entities you separately consent to on the match- confirmation page (see Section 10 below). The complete and current list of authorized affiliates is maintained at leadmatchai.com/affiliates. We never share consumer information with parties outside that list.

How long we keep it: Consumer lead records are retained for up to 24 months from submission for service-quality auditing and consent-record preservation. You may request earlier deletion at any time using the Do Not Sell flow described in Section 11 (CCPA) below.

10. SMS and Phone Communications (TCPA)

First Commit LLC d/b/a LeadMatch does not currently initiate outbound telephone calls or text messages to consumers. When the optional phone-capture feature is enabled, your phone number is only shared with the specific affiliates you tick on the match-confirmation page following your project submission. Each affiliate maintains its own opt-out registry and is independently responsible for compliance with the federal Telephone Consumer Protection Act (TCPA) and applicable state telemarketing law.

Express written consent. Before any affiliate may contact you by phone, you must affirmatively check a box specifically naming that affiliate. Checking the box constitutes prior express written consent under the TCPA for that named affiliate to contact you at the phone number you provided, including via automated telephone dialing system or prerecorded voice message. Consent is granted on a per-affiliate basis; you may consent to some and not others. Consent is not a condition of any purchase. Message and data rates may apply. Message frequency varies by affiliate. The exact disclosure text shown to you at the moment of consent is preserved with your record.

Opt-out / revocation. You may revoke consent at any time by:

  • Replying STOP, UNSUBSCRIBE, END, CANCEL, or QUIT to any text message from a given affiliate. The affiliate will not contact you again. Reply HELP for assistance.
  • Emailing the specific affiliate directly using the contact information on our Affiliates page.
  • Emailing team@leadmatchai.com with subject line “Do Not Sell My Info” to opt out of ALL affiliate sharing at once.

Number scrubbing.Before forwarding a phone number to any affiliate, we verify the number against the federal Do Not Call registry and the FCC’s Reassigned Numbers Database. Numbers that return adverse results are flagged for manual review and may be withheld from distribution even when consent is on file.

Recordkeeping. For every grant of TCPA consent we retain (i) the exact disclosure text shown, (ii) the affiliates list snapshot as of consent time, (iii) the IP address and user agent of the consenting browser, and (iv) the precise timestamp. These records are preserved for four years after consent revocation, as required for statute-of-limitations defense, and are available to you upon request.

11. California Privacy Rights (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of its sharing or sale. You may designate an authorized agent to make requests on your behalf. We will not discriminate against you for exercising your privacy rights.

Consumer-lead sharing: If you submit a project request through our /find funnel, your name, email, project description, and project location may be shared with up to five licensed contractors matched to your project. Under California law this may be considered a “sale” or “sharing” of personal information. We do not share project requests for purposes of cross-context behavioral advertising, and we do not share project requests with anyone other than the contractors we match you with.

Do Not Sell or Share My Personal Information: California residents may opt out of the sharing described above. To opt out:

  • If you have an in-flight project request, click the “opt me out” link on your match-confirmation page; OR
  • Email team@leadmatchai.com with subject line “Do Not Sell My Info”.

Once opted out, no further contractor matches will be sent and we will queue your information for deletion within our standard retention window. We do not knowingly sell or share personal information of consumers under 16 years of age.

12. International Users

The Service is operated from the United States. If you access the Service from outside the US, your information may be transferred to, stored, and processed in the US. By using the Service, you consent to this transfer. For users in the European Economic Area, we rely on legitimate business interests and contractual necessity as our legal bases for processing.

13. Data Removal Requests

If your business contact information, license record, building registration, or any other record sourced from public data appears in our database and you would like it suppressed from our Service, you may submit a removal request to team@leadmatchai.com (subject line: “Data Removal Request”) or via the contact form. Include:

  • Your name and the business or entity the record refers to
  • The specific record(s) to be removed (URL, license number, BBL, BIN, or business identifying information)
  • Your relationship to the record (e.g., principal of the business, registered agent, authorized representative)
  • The basis for removal (e.g., privacy preference, factual inaccuracy, ceased operations)

We will process valid removal requests within 10 business days. Once suppressed, a record will not reappear in customer deliveries even if it is later re-ingested. Note that removal from our Service does not remove the underlying record from any public source — those requests must be made directly to the agency or organization that originally published the record.

14. Children’s Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete it.

15. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

16. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on the Service at least 30 days before they take effect. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

15. Contact

For privacy-related questions or requests, please reach us through our contact form. Mailing address and email details are listed there.