Privacy Policy

Who We Are

Pounce On It (pounceonit.co) is a B2B SaaS platform that helps home-service businesses automatically recover missed calls through SMS text-back automation. We are the data controller for information collected through our platform.

Contact us: support@pounceonit.co

What Data We Collect

We collect information to provide and improve our SMS lead capture service. This includes:

• Account information: Business name, your name, email address, phone number, and password (hashed)
• Business information: Business name, industry, and service address / zip code
• Twilio credentials: Twilio Account SID, Auth Token, and phone number you configure for lead capture
• Payment information: Stripe payment method on file — we do not store card details; Stripe handles payment data
• Call and SMS logs: Phone numbers of inbound callers, message content, timestamps, and opt-out status
• Lead data: Phone number, service type, zip code, urgency level, and conversation history for each lead captured
• Usage data: Page views, sign-up date, subscription tier, and trial status

How We Use Your Data

We use collected data to:

• Send automated SMS follow-up messages to callers who miss a business call
• Qualify leads through conversational SMS (service type, zip code, urgency)
• Deliver qualified leads to the business owner's dashboard
• Send lead notification emails to the business owner
• Process subscription billing via Stripe ($149/month after 14-day free trial)
• Send transactional emails: onboarding instructions, billing receipts, account notifications
• Provide account management: password resets, profile updates, subscription changes
• Detect and prevent fraud, abuse, and unauthorized access
• Comply with legal obligations (Twilio A2P 10DLC compliance, lawful business purposes)

Third-Party Services

We use trusted third-party providers to run our service. Each provider receives only the data necessary for its specific function:

• Twilio — SMS messaging infrastructure. Twilio's data processing agreement applies to all message data. Twilio Privacy Policy
• Stripe — Payment processing. Card data is handled exclusively by Stripe; we store only a payment method token. Stripe Privacy Policy
• Postmark — Transactional email delivery (lead alerts, billing receipts). Postmark Privacy Policy
• Neon (PostgreSQL) — Database hosting for lead data and account records. Data stored in U.S. regions. Neon Privacy Policy
• Render — Cloud hosting provider that runs the Pounce On It web application and worker services. Render Privacy Policy
• Polsia (platform analytics) — The Pounce On It platform is built on the Polsia infrastructure. On public-facing pages (home, pricing, contact, blog), a lightweight pixel beacon sends an anonymized visitor ID and the page slug to Polsia's analytics service (polsia.com/api/beacon/pixel). No personal data (name, email, phone) is transmitted. The visitor ID is generated locally and stored in localStorage under the key polsia_vid. This data is used by Polsia for platform usage analytics only and is not used for advertising. Polsia Privacy Policy
• Google Fonts — We load fonts (Space Grotesk, DM Sans) from Google Fonts CDN. Your browser makes a request to Google's servers to fetch these fonts. Google Privacy Policy

We do not sell, rent, or trade your personal data or your customers' phone numbers to advertisers or data brokers. We do not use Google Analytics, Meta Pixel, or any advertising-network trackers.

Data Retention & Deletion

We retain data only as long as necessary to provide the service and comply with legal obligations:

• Account data: Retained while your account is active and for 90 days after deletion
• Lead data (callers): Retained for up to 12 months from the date of capture, unless you request earlier deletion
• SMS message content: Retained for up to 12 months
• Billing records: Retained for a minimum of 7 years per IRS requirements
• Support correspondence: Retained for 2 years after resolution

After account deletion, all personal data is permanently deleted within 90 days, except billing records (7-year IRS retention) and any data we are legally required to keep.

To request deletion of your data or your lead data: email support@pounceonit.co. We will confirm deletion within 30 days.

Your Privacy Rights (U.S. State Laws)

If you are a resident of California, Virginia, Colorado, Connecticut, or another state with applicable privacy law, you may have the following rights:

• Right to Know: Request a copy of the personal data we have collected about you
• Right to Delete: Request deletion of your personal data (subject to legal exceptions)
• Right to Correct: Request correction of inaccurate personal data
• Right to Data Portability: Request a machine-readable copy of your data
• Right to Opt-Out: Opt out of the sale of personal data (we do not sell data)

We do not sell personal information. We do not use your data for profiling or automated decisions that produce legal effects.

To exercise any of these rights, contact us at: support@pounceonit.co. We will respond within 45 days.

Data Security

We take security seriously and implement the following measures:

• All passwords hashed with scrypt — raw passwords are never stored
• OAuth tokens encrypted with AES-256-GCM before storage
• Twilio credentials stored encrypted in database metadata fields
• HTTPS/TLS enforced on all connections
• IP addresses hashed (SHA-256 with User-Agent salt) before logging — no raw IPs persisted
• Database access restricted to application layer with parameterized queries only

No security measure is 100% impenetrable. In the event of a data breach, we will notify affected users within 72 hours of discovery, as required by applicable law.

Cookies & Tracking

We use session cookies to keep you logged in to your account. These are essential for authentication and are not used for advertising or cross-site tracking.

• Session cookie (necessary): Required to maintain your logged-in state. Set on login; deleted when you log out or your session expires
• First-party page view tracking (necessary/analytics): Our server records page views on select pages (home, login, signup, dashboard, SMS terms) to measure usage. Your IP address is SHA-256 hashed with a User-Agent salt before storage — no raw IPs are persisted. Bot traffic is filtered out
• Platform analytics visitor ID (analytics): On public pages (home, pricing, contact, blog), we store a randomly generated visitor ID in your browser's localStorage under the key polsia_vid. This ID is sent to Polsia's analytics service alongside the page you visited. It contains no personal data. It persists across sessions to measure return visits and is used for platform-level analytics only — not for advertising or profiling

We do not use Google Analytics, Meta Pixel, advertising cookies, or any cross-site tracking technology. We do not track you across other websites.

SMS Messaging & TCPA Compliance

Pounce On It sends automated SMS messages to callers who miss a business's phone call, using a system operated by the business owner. The following disclosures apply to that messaging:

• Consent: SMS messages are sent to callers who dialed the business's Twilio phone number. By calling that number, callers may receive an automated text follow-up. Business owners agree to our SMS Terms & Consent Policy before activating text-back messaging
• Message frequency: Varies by the volume of inbound missed calls. Typically 1–5 messages per lead interaction
• Message and data rates may apply. Standard carrier messaging rates apply to all SMS messages
• Opt-out: Reply STOP or UNSUBSCRIBE at any time to stop receiving messages from a business's Pounce On It number. You will receive one final confirmation message, then no further messages
• Help: Reply HELP for assistance
• TCPA compliance: All messaging complies with the Telephone Consumer Protection Act (TCPA) and applicable A2P 10DLC carrier regulations administered by Twilio

For full SMS terms, see our SMS Terms & Consent Policy.

Children's Privacy

Our service is designed for business owners and home-service professionals. We do not knowingly collect personal information from children under 13 years of age. If we become aware that a child's data has been collected, we will delete it immediately. If you believe a child's data has been collected, contact us at support@pounceonit.co.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or third-party services. If we make material changes, we will update the "Last Updated" date above and, for significant changes, notify you via email or a notice in your account dashboard at least 30 days before the new policy takes effect.

The current effective date is shown at the top of this page.

Contact & Privacy Inquiries

For any privacy-related questions, data deletion requests, or concerns:

• Email: support@pounceonit.co
• Response time: within 1 business day

We take privacy seriously. If you are not satisfied with our response, you may file a complaint with the applicable state attorney general or data protection authority in your jurisdiction.