Privacy Policy

Last updated: 27 March 2026

1. Who We Are

This privacy policy explains how ClickSync Media SRL, trading as GridLead Media ("we", "us", "our"), collects, uses, stores, and shares your personal data when you interact with our services.

Our registered address is: Aleea Timisul de Sus nr 1, bl D16, sc A, et 2, ap 6, Sector 6, Bucharest, Romania.

We operate an AI-powered lead generation platform that connects homeowners seeking home improvement services with qualified local contractors. This policy applies to homeowners who interact with our WhatsApp-based qualification service and to contractors who use our platform.

2. Data We Collect

From Homeowners

When you interact with our service via WhatsApp, we may collect:

  • Contact information: phone number (from WhatsApp), name (as provided by you)
  • Project details: postcode, type of work required, project size, materials preference, timeline, whether you have previous quotes
  • Photos: images of your property that you voluntarily share via WhatsApp
  • Conversation data: the content of your WhatsApp messages with our service
  • Advertising data: Click-to-WhatsApp click identifier (ctwa_clid) when you reach us via a Meta (Facebook/Instagram) advertisement

From Contractors

  • Business information: business name, contact phone number, email address
  • Service details: postcodes covered, services offered, availability
  • Billing information: processed securely via Stripe (we do not store card details)

3. How We Collect Data

  • WhatsApp Business API (via Twilio): when you send messages, photos, or interact with our WhatsApp service
  • Meta Click-to-WhatsApp Ads: when you click one of our advertisements on Facebook or Instagram, Meta provides a click identifier for attribution purposes
  • Direct communication: when you contact us via email, phone, or our contact page

4. How We Use Your Data

We use your personal data for the following purposes:

  • Lead qualification: to understand your project requirements and match you with a suitable local contractor
  • Contractor matching: to share your project details with a matched contractor so they can provide you with a quote
  • Appointment booking: to schedule a convenient site visit between you and the contractor
  • Advertising optimisation: to report conversion events (e.g., "lead qualified", "appointment booked") to Meta via the Conversions API, using your click identifier and hashed contact data, so we can improve ad targeting and reduce costs
  • Service improvement: to improve our AI qualification process and overall service quality

5. Legal Basis for Processing

We process your data under the following legal bases (GDPR Article 6):

  • Consent: by initiating a WhatsApp conversation with us (e.g., clicking our ad), you consent to the collection and processing of your data for the purpose of receiving a quote from a contractor
  • Legitimate interest: for advertising optimisation and service improvement, where this does not override your fundamental rights
  • Contractual necessity: for contractor accounts, to fulfil our service agreement

6. Who We Share Your Data With

  • Matched contractor: when we match you with a contractor, they receive your name, phone number, postcode, project details, and any photos you shared — so they can contact you and provide a quote. Each lead is shared with one contractor only.
  • Twilio Inc. (data processor): provides the WhatsApp Business API infrastructure that delivers messages between you and our service.
  • Supabase Inc. (data processor): provides the database and file storage infrastructure where your data is securely stored.
  • Meta Platforms Inc.: we send limited conversion event data via the Meta Conversions API (CAPI) for advertising optimisation. This includes: event type (e.g., "Lead"), click identifier, and hashed phone number. We do not share your project details, photos, or conversation content with Meta.
  • Stripe Inc. (data processor): processes contractor payments. No homeowner data is shared with Stripe.

We never sell your personal data to third parties.

7. Data Storage & Security

  • Your data is stored on Supabase infrastructure with encryption at rest and in transit
  • Photos are stored in Supabase Storage with encrypted access and time-limited signed URLs
  • We retain conversation data and project details for up to 90 days after your last interaction, after which it is anonymised
  • Photos are retained for 30 days after lead delivery, then permanently deleted
  • Access to personal data is restricted to authorised personnel only

8. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the right to:

  • Access: request a copy of the personal data we hold about you
  • Rectification: ask us to correct inaccurate data
  • Erasure: ask us to delete your personal data
  • Portability: receive your data in a machine-readable format
  • Withdraw consent: stop us from processing your data at any time
  • Object: object to processing based on legitimate interest

To exercise any of these rights:

We will respond to your request within 30 days.

9. Cookies & Tracking

Our marketing website (gridleadmedia.com) does not use cookies and does not include any client-side tracking scripts (no Meta Pixel, no Google Analytics). All advertising attribution is handled server-side via the Meta Conversions API.

10. Children's Data

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

11. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. The "last updated" date at the top of this page indicates when this policy was most recently revised. We encourage you to review this policy periodically.

12. Contact Us

If you have questions about this privacy policy or how we handle your data, please contact us: