Privacy Policy

LumberLoop USA ("we," "us," "our") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the Service you agree to the practices described here.

From contractors submitting lead requests:

• Name, company name (optional), email address, phone number
• Job-site ZIP code
• Product type, quantity, specifications, timeline, budget (optional), and notes
• City and state derived from your ZIP for routing purposes

From manufacturers and dealers using the dashboard:

• Account email, password (stored as a one-way bcrypt hash — we never see your plaintext password)
• Company name and contact name
• Product listings and dealer-network records you upload

Automatic technical data:

• Authentication cookies (httpOnly, secure, used solely to keep you signed in)
• Server logs (IP address, request timestamps, error traces)

We do not knowingly collect information from anyone under 18.

• Lead routing: we match contractor leads to dealers in matching markets and email the relevant manufacturers.
• Account access: to authenticate users and provide manufacturer dashboards.
• Notifications: to send transactional emails (lead alerts, password resets) from our verified domain.
• Service operation and security: to detect abuse, fix bugs, and improve the platform.
• Public dealer locator: dealer name, location, phone, email, and parent manufacturer are publicly displayed on the Service's dealer locator page — this is intentional and is the purpose of submitting dealer records.

We share your information only in these limited cases:

• With matched manufacturers: when a contractor's lead matches a manufacturer's dealer network by ZIP or state, that contractor's submitted contact info and request details are emailed to the matched manufacturer for follow-up.
• With service providers: we use Resend (transactional email), MongoDB (database hosting), and Emergent (application hosting). These providers process data on our behalf under their own privacy and security commitments.
• For legal reasons: if required by a valid legal process, or to protect the rights, property, or safety of LumberLoop USA, our users, or others.
• Business transfers: if LumberLoop USA is involved in a merger, acquisition, or asset sale, information may be transferred as part of that transaction with appropriate notice to affected users.

We do not sell your personal information. We do not share data with advertising networks. We do not run third-party tracking or analytics.

We retain lead and account data for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time by emailing info@lumberloopusa.com. Some records (e.g., transaction logs needed for legal or accounting purposes) may be retained longer where required by law.

We use industry-standard safeguards to protect your information, including:

• HTTPS encryption for all data in transit
• Bcrypt-hashed passwords (we never store or see your plaintext password)
• JWT-based authentication with short-lived tokens stored in secure httpOnly cookies
• Role-based access control — manufacturers can only see their own data; admin access is restricted
• Single-use, time-limited password-reset tokens

No system is 100% secure, however. If we ever experience a data breach affecting your information, we will notify affected users in accordance with applicable law.

Depending on where you live, you may have the right to:

• Access the information we hold about you
• Correct inaccurate or incomplete information
• Delete your account and associated data
• Opt out of non-essential email communications
• Object to or restrict certain processing of your information

To exercise any of these rights, email us at info@lumberloopusa.com. We'll respond within a reasonable timeframe (typically within 30 days).

We use only essential authentication cookies. These cookies keep you signed in to your account and cannot be disabled while you use logged-in features of the Service. We do not use cookies for advertising, tracking across sites, or analytics.

The Service is not intended for, or directed at, anyone under 18 years of age. We do not knowingly collect personal information from children under 18. If you believe a minor has provided information to us, please contact us and we will delete the information promptly.

The Service is operated from the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the U.S. By using the Service you consent to such transfer.

We may update this Privacy Policy from time to time. Material changes will be announced at the top of this page with an updated "Last updated" date. Continued use of the Service after changes become effective constitutes acceptance.

Questions or concerns about this Privacy Policy or how we handle your information? Email us at info@lumberloopusa.com.