Privacy Policy
Effective 2026-06-28 · draft v1
1. What we collect
Account data: email, password hash (handled by our auth provider), and role. Rep profiles: display name, city, state, phone, and the applications you submit (resume text, quiz results). Company data: business name, members, offers, playbooks, and commission terms.
Work records: leads and their contact details, every logged activity (calls, texts, visits, notes, timestamps), appointments, deals, signed agreements (signature name, document hash, IP address at signing), ledger entries, disputes, and conduct records.
Prospect data: companies and reps put lead contact information (names, phone numbers, emails, addresses) on the platform. If your information appears as a lead and you ask not to be contacted, we honor it immediately and platform-wide via a suppression list kept for exactly that purpose.
2. How we use it
To run the marketplace: matching, lead management, compliance guardrails (calling hours, do-not-contact enforcement, state gating), deal attribution, commission records, payouts, tax forms when payment processing launches, and conduct enforcement. We do not sell personal data. We do not use your data to train AI models.
3. Who processes it
Supabase (database and authentication), Vercel (hosting). Payment processing and tax forms will add Stripe when automated payouts launch; the platform will state this in-product before it happens. Each processor receives only what its function needs.
4. Retention
Deal, agreement, ledger, and conduct records are retained while the platform operates because they are the system of record both sides rely on. Suppression entries are retained indefinitely by design: deleting one would risk contacting someone who said no. Account profile data is deleted on request where no legal or contractual record depends on it.
5. Your choices
You can read everything the platform holds about your own work in the product itself: that is the point of the ledger. To correct or delete profile data, or to ask what we hold, email elijah@purcell-ventures.com. If you are a prospect who wants no contact, say so to the rep who called (it is honored immediately) or email us and we will add you to the suppression list directly.
6. Security
Row-level security on every table, deny-by-default policies verified by automated checks, server-side authorization on every money and agreement path, and secrets kept out of the client. No system is perfect; if we learn of a breach affecting you, we will tell you promptly.
7. Contact and changes
middleman is operated under Purcell Ventures LLC, Acworth, Georgia. Questions or requests: elijah@purcell-ventures.com. We will post changes here with a new effective date.