Privacy Policy

LeadRescue OS ("LeadRescue", "we") is operated by Bendix Konsulting AS (Norwegian organisation number 932 333 546), Overlege Helsingens veg 18, 7805 Namsos, Norway. This policy describes how we handle personal information for three different groups:

• Customers — the home-service businesses that sign up for an account and their users. We decide how customer account data is handled.
• Leads — the people who call, text or submit a form to one of our customers. We process their information only as a service provider, on the customer's instructions and on the customer's behalf. The business you contacted is responsible for that data; contact them first with a request about it.
• Business prospects — US home-service businesses we email about LeadRescue, using the business email address they publish on their own website. See "Business outreach and our email assistant" below.

• What we keep about a prospect: the business name, website, trade, city and state, the business email address published on its own website and the page where it is published, and a one-sentence note about the services listed on that site. We do not buy lists, and we never guess or generate email addresses.
• Outreach emails say who we are, include our postal address and an unsubscribe link, and are limited to three emails over about eight days. Replying "no thanks" or using the link stops all outreach to that address immediately and permanently; we keep a suppression record so we never email it again. Clicks on links in these emails are counted through our own links; we use no tracking pixels.
• Automated answers: emails to our mailbox and messages sent from the in-app support form are read and answered by an automated assistant, using an AI provider (Anthropic) and only our published product information. It says it is automated when asked. Anything it cannot answer is passed on and answered by email later. Refunds follow the refund policy in our Terms.
• Retention: prospect records are kept for up to 24 months after our last email; suppression and opt-out records are kept for as long as we send email, so an opt-out stays honoured. To have a prospect record deleted, write to bendix@bjerveur.no.

• Account and configuration data: name, work email, password hash, business name, vertical, timezone, business and quiet hours, qualification questions, booking URL, handoff phone, notification email and message templates.
• Lead data submitted or generated through the service: phone number, name and email when provided, call metadata (time, direction, duration, outcome), SMS content exchanged with the lead, structured answers extracted from those messages, consent records, booking and outcome records.
• Billing data: subscription status and plan. Card details are collected and stored by Stripe, not by us.
• Technical data: sign-in session cookies, usage counters (messages, voice minutes, AI requests), error reports and server-side product events keyed to an organization identifier.

• To respond to, qualify, follow up on and book the inbound leads a customer receives.
• To show the customer what happened to each lead and what was recovered.
• To operate, secure, debug and improve the service, and to meter plan usage.
• To meet legal, carrier and messaging-compliance obligations, including opt-out records.

We do not sell personal information, we do not share it for cross-context behavioural advertising, and we do not use lead conversations to train our own models.

LeadRescue sends text messages on behalf of the business you contacted, and only after you called, texted or submitted a form to that business. We never text people who did not contact the business first.

• Message frequency varies depending on the conversation.
• Message and data rates may apply.
• Reply STOP to opt out at any time. Reply HELP for help.
• Consent to receive messages is not a condition of any purchase.
• Mobile opt-in data and consent records are not shared with third parties for marketing or promotional purposes.
• An opt-out is applied immediately and permanently for that business: pending messages are cancelled and nothing further is sent unless you explicitly reply START.
• Carriers are not liable for delayed or undelivered messages. Message delivery depends on your mobile carrier.

Message text and call summaries may be sent to our AI provider to extract structured details such as the service needed, the address and urgency. The AI does not decide who is contacted, what a job costs, or what happens next — that is decided by explicit application rules.

An automated voice callback is only placed when the lead gave express written consent to be called by an automated system. The assistant identifies itself as an automated assistant, and calls are not recorded by default. If a customer enables recording, disclosure is given before the call begins.

We share information only with providers that help us run the service:

• Hosting, database and authentication (application hosting and managed Postgres).
• Twilio — SMS and telephony.
• Retell — AI voice calls.
• Anthropic — AI extraction of structured details from message text, and the automated email assistant.
• Google Workspace — our mailbox for outreach, support and account emails.
• Stripe — payments and subscription billing.
• Resend — notification email to customers.
• Sentry — error monitoring, configured to strip request bodies and cookies.
• PostHog — server-side product analytics keyed to an organization identifier, without names, phone numbers or email addresses.

We may also disclose information when required by law or to protect the service from abuse.

Lead and conversation data is retained for as long as the customer's account is active, unless the customer asks us to delete it sooner. Opt-out and consent records are kept longer than the rest because messaging rules require us to prove that an opt-out was honoured. Deleting an organization removes its leads, messages, calls and bookings.

Each customer's data is isolated at the database level and is only reachable by that customer's members. Traffic is encrypted in transit. Application logs record event types, identifiers and masked phone numbers — never message bodies, authentication tokens or full phone numbers. Access to production data is limited to the people who operate the service.

We use strictly necessary cookies to keep you signed in. We do not use advertising or cross-site tracking cookies, and the public pages of this site set no analytics cookies.

Depending on where you live, you may have the right to access, correct, delete or obtain a copy of your personal information, and to appeal a decision we make about such a request. Customers can exercise these rights by writing to bendix@bjerveur.no. Leads should contact the business they reached out to; if they contact us, we will pass the request to that business.

The service is intended for businesses in the United States and is not directed to children under 16. We do not knowingly collect information from children.

We will update this page when the service or our practices change, and will note a new effective date. Questions: bendix@bjerveur.no. See also our Terms of Service.