ForeLeaf Marketplace Privacy Policy

Introduction

ForeLeaf LLC, a Missouri limited liability company (“ForeLeaf,” “we,” “our,” or “us”), respects the privacy of your information. This Privacy Policy is designed to assist you in understanding how we collect, use, share, and safeguard your information. This Privacy Policy applies to individuals who access our website at tryforeleaf.com and our mobile application (collectively, the “Sites”) and our online services that connect homeowners with independent home-services contractors (“Pros”) (collectively, the “Marketplace” or “Services”).

This Privacy Policy covers the Marketplace only. ForeLeaf’s separate business software product for merchant businesses, ForeLeaf Back Office, is governed by a separate Back Office Privacy Policy.

From time to time, we may change this Privacy Policy. If we do, we will post an amended version on this webpage with a new “last updated” date. If we make material changes, we will provide you with additional notice, such as adding a statement on the homepage of our Sites or sending you a notification, at least 14 days before the change takes effect. Please review this Privacy Policy periodically.

This Privacy Policy covers the following topics:

1. Personal Data We Collect;
2. How We Use Your Personal Data;
3. How We Share Your Personal Data;
4. Cookies and Other Tracking Technologies;
5. Universal Opt-Out Mechanisms;
6. Security;
7. Data Retention;
8. Third Party Links;
9. Children’s Privacy;
10. Notice to Nevada Residents;
11. Your State Privacy Rights and Additional Disclosures;
12. Notice to California Residents;
13. Accessibility;
14. How to Contact Us.

1. Personal Data We Collect

We collect personal data from you through your use of the Sites and Services. Personal data is information that is linked or reasonably linkable to an identified or identifiable individual. In this Policy, we refer to personal data that identifies you as an individual (for example, your name, email address, phone number, taxpayer identification number, or financial account information) as “Personally Identifiable Information” or “PII.” Depending on whether you use the Marketplace as a homeowner or as a Pro, we collect the following types of personal data.

Personal Data You Provide as a Homeowner

• Create an Account. If you create an account, you will provide us with your name, email address, phone number, and password.
• Book a Service. If you book a Pro’s services, you will provide us with your property address, service details, and payment card information, which is collected and stored by our payment processor, Stripe.
• Payment Information. We use Stripe to process payments. Stripe collects your payment card information directly; ForeLeaf does not store your full card number.
• Property Information. In connection with booking and completing a service, we collect your property address and, in some cases, property/parcel data from public records, which ForeLeaf’s ForeSite engine uses to help estimate and verify job scope.
• Photos, Messages, and Reviews. If you upload job photos, send in-app messages to a Pro, or leave a review, we collect the content you submit.
• Contact Us / Support. If you contact us, you will provide us with your name, contact information, and the content of your communication.
• Sign Up for Email or SMS. If you sign up to receive emails or text messages from us, you will provide us with your email address or phone number. SMS communications are opt-in and unchecked by default; you may opt out at any time by replying STOP. We do not share or sell mobile phone numbers or SMS consent with third parties or affiliates for their marketing or promotional purposes. To unsubscribe from marketing emails, click the unsubscribe link included in the footer of our emails.

Personal Data You Provide as a Pro

• Create an Account. If you create an account as a Pro, you will provide us with your name, email address, and phone number.
• Background Checks. To be approved as a Pro, you will complete a background check through our vendor Yardstik. You will enter your Social Security number and date of birth and provide consent directly on Yardstik’s hosted platform; ForeLeaf does not receive the Social Security number or date of birth you enter there. After you are approved, Yardstik continues to monitor for new background-check results, and new results can lead to suspension of your Pro account.
• Payout and Tax Information. To receive payouts, you will provide bank account information through our payment vendor, Stripe Connect. You will also provide a completed Form W-9. ForeLeaf stores the taxpayer identification number from your Form W-9 (for a sole proprietor, this may be your Social Security number); it is encrypted at rest and is never displayed.
• Location Information. While the Pro app is open, we collect your device’s precise GPS location: on your dashboard, to match you with nearby jobs; about every 30 seconds while you are traveling to a job and about every 60 seconds while you are on a job, including your heading and speed, which we show live to the homeowner for that job; and when you arrive, clock in, and clock out. We collect location only while the app is in use, not in the background.
• Photos, Messages, Documents, and Reviews. If you upload job photos, license and certificate-of-insurance documents, send in-app messages, or respond to a review, we collect the content you submit.

Personal Data as You Navigate Our Sites

We automatically collect certain personal data through your use of our Sites, such as the following:

• Usage Information. For example, the pages on our website you visit, the site that referred you, and campaign (UTM) parameters. We do not record clicks or mouse movements.
• Device Information. For example, hardware model, operating system, application version number, and browser.
• Network Information. The approximate city, region, and postal area of your internet connection and the name of the network operator your connection belongs to (for example, your internet provider, mobile carrier, or employer), as provided by our network provider, Cloudflare, and a hash of your IP address.
• Location Information. If you choose “use my location” in the app, we collect your device’s location to find your address. If you use the in-app emergency button, we send your location to ForeLeaf’s administrators. Pro location is described above.

Personal Data We Collect About You from Other Sources

In some cases, we may receive personal data about you from other sources, including our background-check vendor (Yardstik), payment processors, public records (including property and parcel records), and government entities.

2. How We Use Your Personal Data

In addition to the purposes stated above, we may use all the personal data we collect in accordance with applicable law to:

• Operate the Marketplace, including matching homeowners with Pros, processing bookings and payments, and facilitating in-app communication;
• Verify Pro identity and eligibility, including through background checks and continued monitoring of background-check results;
• Maintain and improve our Sites and Services;
• Protect the security and integrity of our Sites and Services;
• Provide customer support and resolve disputes, including through the ForeLeaf Guarantee process;
• Investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, or violations of our Terms of Service, and to otherwise fulfill our legal obligations;
• Monitor compliance with and enforce this Privacy Policy and any applicable agreements and policies;
• Defend our legal rights and the rights of others;
• Fulfill any other purpose for which you provide it; and
• Comply with applicable law.

Use of Artificial Intelligence

ForeLeaf uses a third-party large-language-model provider (Anthropic) to assist with (a) extracting details from insurance certificates Pros submit, (b) preparing job briefings for Pros, which include the homeowner’s job description and property notes (for example, gate codes or access instructions), and (c) suggesting potential resolutions to disputes between homeowners and Pros, which ForeLeaf’s team reviews before any resolution is finalized. AI-assisted suggestions are not final decisions.

3. How We Share Your Personal Data

We may share the personal data that we collect about you in the following ways:

• With Pros and homeowners, as applicable, to facilitate a booking (for example, sharing a homeowner’s property address and job details with the Pro assigned to the job, and sharing a Pro’s name, profile, and reviews with homeowners and, during a job, the Pro’s live location with the homeowner for that job);
• With vendors who perform services on our behalf, including Stripe (payments and payouts, including Stripe Connect and Google Pay), Twilio (SMS, and an inbound voice line that uses speech recognition), Postmark (email), Yardstik (background checks and continued monitoring), Anthropic (AI-assisted insurance-certificate extraction, Pro job briefings, and dispute-resolution suggestions), Google (address geocoding and static maps), AWS (cloud hosting), Cloudflare (network security, including Turnstile bot protection), Sentry (error monitoring), and Expo (push notifications and app updates);
• To the extent that we are required to do so by law;
• In connection with any legal proceedings or prospective legal proceedings;
• To establish, exercise, or defend our or a third party’s legal rights, including providing information to others for the purposes of fraud prevention;
• With any other person or entity as part of any business or asset sale, equity transaction, merger, acquisition, bankruptcy, liquidation, or similar proceeding, or in preparation for any of these events (including in connection with an assignment of our Terms of Service), and that person or entity may use your personal data for their own purposes;
• With any other person or entity where you consent to the disclosure; and
• For any other purpose disclosed by us when you provide the personal data or for any other purpose we deem necessary, including to protect the health or safety of others.

We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising. For more information on how we share personal data with third parties, see the “Your State Privacy Rights and Additional Disclosures” section below.

4. Cookies and Other Tracking Technologies

How We Use Cookies

Cookies are small files of information that are stored by your web browser software on your computer hard drive, mobile, or other devices. Our website measures visits without cookies by default, using the information described under “Personal Data as You Navigate Our Sites” above. If we turn it on, our website may set a single first-party cookie containing a random identifier so that repeat visits from the same browser can be counted as one visitor; it expires after 180 days and is not used for advertising. Our payment and security providers may use cookies that are necessary for payments and fraud prevention.

How You Can Opt Out of Cookies

You can block Cookies by changing your Internet browser settings to refuse all or some Cookies. If you choose to block all Cookies (including essential Cookies) you may not be able to access all or parts of the Sites.

You can find out more about Cookies and how to manage them by visiting www.AboutCookies.org or www.allaboutcookies.org.

5. Universal Opt-Out Mechanisms

Some internet browsers incorporate a “Do Not Track” feature that signals to websites you visit that you do not want to have your online activity tracked. Given that there is not a uniform way that browsers communicate the “Do Not Track” signal, the Sites do not currently interpret, respond to, or alter their practices when they receive “Do Not Track” signals.

6. Security

We maintain commercially reasonable security measures to protect the personal data we collect and store from loss, misuse, destruction, or unauthorized access, including encryption in transit and at rest, access controls, and monitoring. Sensitive identifiers, such as Pro taxpayer identification numbers, are encrypted at rest. However, no security measure or modality of data transmission over the Internet is completely secure. Although we strive to use commercially acceptable means to protect your personal data, we cannot guarantee absolute security.

7. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes for which we collect it, such as to provide you with the Services you have requested, and for the purpose of satisfying any legal, accounting, contractual, or reporting requirements that apply to us. For example, we retain financial and transaction records as long as needed for the purposes above and as required by law (tax and payment records for at least 7 years) to meet tax and accounting obligations.

If you delete your account, your account is closed and your personal data is deleted or de-identified immediately; a deleted account cannot be restored. We retain the following records after deletion, for the purposes described in this Policy and as required by law: tax records (including Form W-9 information), payment and payout records (including records held by Stripe), dispute records, messages written by Pros, and job photos.

8. Third Party Links

The Sites may contain links that will let you leave the Sites and access another website. Linked websites are not under our control. We accept no responsibility or liability for these other websites.

9. Children’s Privacy

The Sites and Services are not intended for children under 18 years of age. We do not knowingly collect, use, or disclose personal data from children under 18.

10. Notice to Nevada Residents

Nevada law allows Nevada residents to opt out of the sale of certain types of personal information. Subject to several exceptions, Nevada law defines “sale” to mean the exchange of certain types of personal information for monetary consideration to another person. We do not currently sell personal information as defined in the Nevada law. However, if you are a Nevada resident, you still may submit a verified request to opt out of sales, and we will record your instructions and incorporate them in the future if our policy changes. You may send opt-out requests to privacy@tryforeleaf.com.

11. Your State Privacy Rights and Additional Disclosures

Depending on the state in which you reside, you may have certain privacy rights regarding your personal data. For example, California, Colorado, Connecticut, Virginia, Utah, and other states have passed comprehensive privacy laws, and ForeLeaf’s stated compliance scope covers CCPA/CPRA and Virginia, Colorado, Connecticut, and Utah, expanding as additional state laws take effect. If you are a California resident, please see the “Notice to California Residents” section below. For other state residents, your privacy rights may include (if applicable):

• The right to confirm whether or not we are processing your personal data and to access such personal data;
• The right to obtain a copy of your personal data that we collected from and/or about you in a portable format;
• The right to obtain a list of categories of third parties to which we have disclosed your personal data;
• The right to delete personal data that we collected from and/or about you, subject to certain exceptions;
• The right to correct inaccurate personal data that we maintain about you, subject to certain exceptions;
• The right, if applicable, to opt out of the processing of your personal data for purposes of (1) targeted advertising; (2) the “sale” of your personal data; and (3) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you;
• If we are required by applicable law to obtain your consent to process sensitive personal data, the right to withdraw your consent; and
• The right not to receive discriminatory treatment by us for the exercise of your privacy rights.

We do not sell or share personal data to or with third parties, and we do not use cookies or other tracking technologies to display advertisements about our products on nonaffiliated websites, applications, or online services.

To exercise your rights, please email privacy@tryforeleaf.com or contact us as described in the “How to Contact Us” section below. If legally required, we will comply with your request upon verification of your identity. If you are submitting a request on behalf of another individual, please use the same contact methods described above; we will process authorized-agent requests in accordance with applicable law. If we refuse to take action regarding your request, you may appeal our decision by emailing privacy@tryforeleaf.com with the subject line “Privacy Appeal.”

12. Notice to California Residents

The California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), requires that we provide California residents with a privacy policy describing our practices regarding the collection, use, disclosure, sale, sharing, and retention of personal information, and the rights of California residents. This section is intended solely for, and applicable only to, California residents.

The CCPA defines “personal information” broadly to mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household. For purposes of this section, we refer to this information as “Personal Information.”

Notice at Collection of Personal Information

We currently collect, and in the 12 months prior to the effective date of this Privacy Policy have collected, the following categories of Personal Information: identifiers (name, email address, phone number, and taxpayer identification number for Pros); personal information described in California’s Customer Records statute (bank account information, financial information); internet or electronic network activity information; geolocation data (precise location of Pros while the Pro app is in use, and of homeowners who choose to share their location); commercial information (booking and transaction history); professional information (Pro licensing, insurance, and background-check results); sensitive Personal Information (precise geolocation and Pro taxpayer identification numbers); and inferences drawn from the foregoing.

We collect Personal Information directly from you and from our vendors, including our background-check vendor and payment processors, and from public records.

Sale, Sharing, and Disclosure of Personal Information

We have not sold or shared Personal Information in the twelve (12) months preceding the effective date of this Privacy Policy. We do not knowingly collect or sell the Personal Information of consumers under 16 years of age. We do not use sensitive Personal Information for purposes other than those allowed by the CCPA and its regulations.

Your Rights

If you are a California resident, you have the right to know what Personal Information we have collected about you; the right to delete Personal Information we collected from you, subject to certain exceptions; the right to correct inaccurate Personal Information we maintain about you; if applicable, the right to opt out of the sale or sharing of Personal Information; if applicable, the right to limit our use or disclosure of sensitive Personal Information; and the right not to receive discriminatory treatment for exercising these rights.

You may submit a request to know, delete, and/or correct by emailing privacy@tryforeleaf.com or by contacting us as described in the “How to Contact Us” section below. We will comply with your request upon verification of your identity, to a reasonable or reasonably high degree of certainty depending on the sensitivity of the Personal Information at issue.

Shine the Light Law

We do not disclose personal information obtained through our Sites or Services to third parties for the third parties’ direct marketing purposes. Accordingly, we have no obligations under California Civil Code § 1798.83.

13. Accessibility

We are committed to ensuring this Privacy Policy is accessible to individuals with disabilities. If you wish to access this Privacy Policy in an alternative format, please contact us as described below.

14. How to Contact Us

To contact us for questions or concerns about our privacy policies or practices, please email us at privacy@tryforeleaf.com or write to us at ForeLeaf LLC, 211 NW Executive Way, Suite H, Lee’s Summit, MO 64064.