Legal

Privacy Policy

Last updated: May 28, 2026

This policy explains what data LeadPilot collects, how we use it, and the choices you have — including data we access on your behalf through the Thumbtack Partner API.

Who we are

LeadPilot ("LeadPilot", "we", "us") provides an assistant that helps Thumbtack service professionals respond to leads. We operate the website at leadpilot.work. For privacy questions, contact privacy@leadpilot.work.

What we collect

Information you give us

Thumbtack data (via the Partner API, with your authorization)

Information collected automatically

How we use your data

We never send a message without your approval, and we never sell your data or your customers' data.

How Thumbtack access works

LeadPilot connects to Thumbtack using OAuth through the official Thumbtack Partner API. We never receive or store your Thumbtack password. We request the minimum scopes needed to read your leads and messages and to send replies you approve. You can disconnect LeadPilot from your Thumbtack account at any time, which revokes our access.

Service providers

We share data only with vendors that help us run LeadPilot, under contracts that limit their use of it:

Cloud hosting & databaseRuns the application and stores your data, encrypted at rest.
AI model providerGenerates draft replies and lead scores from the lead context you authorize.
Payment processorHandles subscription billing. We do not store full card details.
Messaging / emailDelivers reminders and notifications to the channel you select.

Data retention

We keep your data while your account is active. When you disconnect or close your account, we delete or anonymize your Thumbtack lead and message data within 30 days, except where we must retain limited records to meet legal or accounting obligations.

Your rights

To exercise any of these, email privacy@leadpilot.work. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA.

Security

We protect your data with encryption in transit and at rest, least-privilege access, and OAuth-only connections. See our Security overview for details.

Children

LeadPilot is for businesses and is not directed at anyone under 18. We do not knowingly collect data from children.

Changes

We may update this policy as the product evolves. Material changes will be posted here with a new "last updated" date and, where appropriate, communicated by email.

Contact

Questions about this policy? Email privacy@leadpilot.work or visit our contact page.