This Marketing Privacy Policy explains how Jordan Levin, an individual doing business as Levology Labs and CoatFlow ("CoatFlow," "we," "us" or "our"), handles personal information in our managed marketing services: the CRM sub-accounts and ad campaigns we run for contractor clients. Our CoatFlow Privacy Policy covers coatflow.io, the floor visualizer and the texts we send for our own business, and this policy does not change it.
We handle two kinds of personal information in these services, and treat them differently:
- Client information is about the businesses that hire us and the people who work there. We decide how it is used.
- Lead and customer information is about our clients' prospects and customers, such as a homeowner who fills in a lead form or replies to a text. The client decides how it is used, and we are the client's service provider (sometimes called a processor).
1. Client information we collect
- Contact and account details: name, title, business name, email, phone and business address.
- Billing details: Stripe collects and stores your payment details. We see only limited details, such as the card brand, the last four digits and the billing address, never the full card number.
- Texting registration details: what carriers require to register business texting (A2P 10DLC), such as your legal business name, EIN, address and website.
- Access to your accounts: to your ad accounts, business portfolio and Google Business Profile, granted through each platform's partner and user tools. Please do not send us passwords; we ask for access through those tools instead.
- Our communications: emails, texts, call notes and approvals between us.
We use client information to provide and bill for the services, to communicate with you, to register your texting, to meet legal obligations and to improve our services. We do not sell it, and we do not use it for anyone else's advertising.
2. Lead and customer information we process for clients
When we run a client's CRM and ads, we may process their leads' and customers' names, phone numbers, email addresses, property addresses, project details and photos, messages, call recordings (if the client turns them on), appointment details, ad interaction data, and consent and opt-out records.
As a service provider, we:
- process this information only to provide the services to that client, and as the client instructs;
- never sell it or share it for cross-context behavioral advertising, never combine it with another client's data, and never use one client's leads for another;
- help clients answer their customers' requests to access, correct or delete information, and to opt out of messages;
- delete or return the information when the client relationship ends, as section 9 of our Marketing Services Terms describes.
Some plans include an automated assistant that answers texts or calls for the client. It says it is automated, its replies are written by AI processing providers from the conversation and the client's business details, and the client can see every conversation.
If you are a homeowner or customer of one of our clients and want to make a privacy request, please contact that business directly. If you contact us instead, we will pass your request on to them. Reply STOP to any text to stop further texts from that business.
3. Ads, pixels and conversion tracking
To measure ad results, we may install tracking tools on client websites and lead forms, such as the Meta Pixel and Conversions API, Google tags and HighLevel tracking. These tools may collect device, browser and on-site activity information and send it to the ad platforms to measure conversions and improve targeting. Each client is responsible for disclosing these tools, and for asking for any consent the law requires, on its own website. Where we upload customer lists to an ad platform, for example to leave out existing customers, we use the platform's hashed matching tools and do so only at the client's direction.
4. Who we share information with
We share personal information only with service providers that help us deliver the services, under terms that limit how they may use it:
- HighLevel, Inc. (LeadConnector): CRM hosting, texting, phone and email delivery.
- Phone carriers and The Campaign Registry: text delivery and A2P 10DLC registration.
- Meta Platforms and Google: ad delivery and measurement.
- Stripe: payments and billing.
- Our email, document and file storage providers.
- Vetted contractors who help deliver the services and are bound to keep information confidential.
We may also disclose information when the law requires it, to protect rights and safety, or as part of a sale or transfer of our business, in which case it stays protected by this policy.
5. Texting privacy
Mobile phone numbers and text message opt-in consent are never shared with or sold to third parties or affiliates for their marketing purposes. Message frequency varies. Message and data rates may apply. Reply STOP to opt out or HELP for help.
6. How long we keep information
We keep client information while you are a client, and afterwards for as long as we need it for tax, accounting and legal purposes (generally up to 7 years for billing records). We keep lead and customer information in a client's sub-account while the client relationship lasts, then delete it or return it to the client within about 30 days after it ends, unless the client asks us to transfer the sub-account. Opt-out records may be kept longer so that opt-outs keep being honored.
7. Security
We use reasonable administrative, technical and physical safeguards for the information we handle, such as giving access only to the people who need it and working through each platform's own permission tools instead of shared passwords. No system is perfectly secure. If a breach affects your information, we will notify you as the law requires.
8. Your privacy rights
Depending on where you live, including California, you may have the right to know what personal information we hold about you, to get a copy of it, and to correct or delete it, and the right not to be treated differently for using these rights. To make a request, email jordan@coatflow.org. We confirm your identity before acting. For lead and customer information we process for a client, see section 2.
9. Children
The services are for businesses and are not directed at children under 16. We do not knowingly collect their information.
10. Changes to this policy
We post updates to this policy on this page with a new effective date. If we make a material change, we email active clients first.
11. Contact
Jordan Levin, doing business as Levology Labs and CoatFlow31881 Via Puntero, San Juan Capistrano, CA 92675
jordan@coatflow.org