Privacy Policy

Effective Date: January 1st 2025
Controller: Lead Stack Media, Inc (“Cmatcher,” “we,” “us,” “our”)
Contact: privacy@cmatcher.com | 7345 W Sand Lake Rd, Ste 210 Office 1192, Orlando, FL 32819

This Privacy Policy explains how we collect, use, disclose, and protect personal information, and how U.S. residents can exercise their privacy rights.

1) What We Collect

We collect the following categories of information (examples are illustrative):

  • Identifiers: name, email, phone, postal address, IP address, cookie IDs, device IDs.
  • Commercial/Account Data: application history, saved preferences, services viewed or requested.
  • Internet/Network Activity: pages viewed, clicks, time on page, referrer, advertising identifiers, crash logs.
  • Geolocation Data: approximate location from IP or (if you enable it) precise location.
  • Financial & Government IDs (if you apply for services we facilitate): income, bank account details, SSN, driver’s license or other ID for identity verification, underwriting or fraud prevention.
  • Sensitive Personal Information (SPI): SSN, financial account credentials, precise geolocation, government IDs.
  • Inferences: interests, likelihood to engage with offers, or risk indicators derived from the above.
  • User-Generated Content & Communications: messages, support chats, survey responses.
  • From Third Parties: affiliates, advertising partners, analytics providers, data brokers, fraud-prevention services, and (where applicable) partners/lenders who evaluate your application.

We do not knowingly collect information from children under 13 (see Children’s Privacy below).

2) How We Use Information

We use personal information to:

  • Provide the service: operate our sites/apps; match you with relevant services; process requests; provide customer support.
  • Fraud & Security: verify identity; detect/prevent fraud and abuse; secure our systems.
  • Optimize & Analytics: measure and improve performance and UX; debug; develop new features.
  • Marketing & Personalization: show or measure ads and offers (including cross-context behavioral advertising/“targeted advertising” where permitted).
  • Compliance & Recordkeeping: meet legal, tax, audit, and reporting obligations.
  • With Your Direction or Consent: for any other purpose you request or clearly consent to.

3) How We Disclose Information

We disclose personal information with:

  • Service Providers/Processors (hosting, analytics, security, communications, payment/fraud tools) under contracts limiting their use.
  • Partners/Advertisers/Affiliates to deliver, measure, and optimize ads and referral programs (including “sharing” for targeted advertising where applicable).
  • Matching/Underwriting Partners or Lenders (if you apply or request a match) to evaluate eligibility, verify identity, prevent fraud, and service your request.
  • Corporate Transactions (merger, acquisition, asset sale).
  • Legal/Safety (lawful requests; to protect rights, safety, or comply with law).
  • With Your Direction or Consent.

“Sale” / “Share” of data: Some states define “sell” or “share” broadly to include disclosing identifiers or online activity to advertising/analytics partners. Where such activity is considered a sale/share, you may opt out (see Your Privacy Rights).

We do not sell or share Sensitive Personal Information (like SSN) for cross-context advertising.

4) Cookies, Analytics & Advertising

We and our partners use cookies, SDKs, pixels, and similar technologies to:

  • remember preferences, keep you signed in, analyze traffic and usage, and
  • deliver/measure ads and personalize content.

Your controls

  • Use browser/device settings to delete/reject cookies.
  • Use platform opt-out tools (e.g., NAI/DAA) for interest-based ads.
  • Global Privacy Control (GPC) / Universal Opt-Out Mechanisms: where law requires, we honor browser/device opt-out signals such as GPC (and Colorado’s recognized UOOM) for sale/sharing/targeted advertising. See Your Privacy Rights.

5) SMS/Email Communications (TCPA/CAN-SPAM)

If you provide a phone number and consent to receive SMS, we may send informational or marketing texts.

  • Message/data rates may apply.
  • Reply STOP to cancel; HELP for help.
  • Consent is not a condition of purchase.
  • For email, use the unsubscribe link or contact us. We may still send important transactional/service messages.

6) Data Retention (Notice at Collection)

We retain information only as long as needed for the purposes above, to comply with law, and to protect our rights, then we delete or de-identify it. Intended retention by category (subject to change based on legal, audit, or fraud-prevention requirements):

  • Identifiers & Account Data: for life of your account/relationship + up to 3 years.
  • Internet/Network Activity: up to 24 months (shorter where feasible).
  • Geolocation: up to 12 months.
  • Financial & Government IDs (if provided): up to 7 years (compliance, fraud, audit).
  • Inferences: up to 24 months.
  • Support Records/Communications: up to 3 years.

7) Your Privacy Rights (U.S.)

Depending on your state, you may have the right to access, correct, delete, confirm processing, portability, and to opt out of: sale, sharing, targeted advertising, and certain profiling. You may also have the right to appeal our decisions.

  • How to submit a request:
  • Verification: We will verify your identity (e.g., email/SMS code or other reasonable steps).
  • Authorized Agents (CA): You may designate an agent; we may require proof and your verification.
  • Appeals (e.g., VA/CO/CT/NJ/OR/TX, etc.): If we deny your request, you may appeal within 45 days at appeals@cmatcher.com (or via the same request channel). We will respond in writing and inform you how to contact your state AG if you remain unsatisfied.

Opt-Out of Sale/Sharing/Targeted Advertising

  • “Do Not Sell or Share My Personal Information” link: [Insert link in footer]
  • We honor recognized opt-out preference signals (e.g., Global Privacy Control) for applicable browsers/devices and known accounts, and Colorado UOOM where required.
  • Separate “Limit the Use of My Sensitive Personal Information” (CA) link: [Insert link] (if you use SPI beyond permitted purposes).

Nevada Residents

Nevada residents may submit a “do not sell” request to privacy@cmatcher.com with “Nevada Opt-Out” in the subject.

California “Shine the Light”

California Civil Code §1798.83 may allow you to request a list of third parties we shared personal information with for their direct marketing in the last calendar year, and the categories disclosed. Submit to privacy@cmatcher.com (subject: “Shine the Light”), once per year.

8) Children’s Privacy (COPPA)

Our services are not intended for children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 provided info, contact us to delete it.

9) Sensitive & Financial Information; GLBA

If we facilitate financial services, some data may be “nonpublic personal information” governed by the Gramm-Leach-Bliley Act (GLBA). To the extent GLBA applies, such data is handled under GLBA (and may be exempt from certain state privacy laws). Where state laws still apply, we will follow them. We do not use or disclose Sensitive Personal Information for purposes other than those permitted by law without your consent (in states requiring opt-in for sensitive data).

10) Security

We implement administrative, technical, and physical safeguards proportional to the sensitivity of the information (e.g., encryption in transit, access controls, monitoring). No method is 100% secure; please use strong passwords and protect your devices.

11) Cross-Border Transfers

We may transfer, store, and process information in the United States and other countries with different data-protection laws. When we transfer data, we use appropriate safeguards permitted by applicable law.

12) Third-Party Sites and Services

Our sites may contain links or integrations to third-party sites, SDKs, or services. Their privacy practices are governed by their own policies.

13) Changes to this Policy

We may update this Policy from time to time. If changes are material, we will post an updated notice and revise the Effective Date. Your continued use after changes means you accept the updated Policy.

14) Contact Us

Lead Stack Media, Inc
7345 W Sand Lake Rd, Ste 210 Office 1192, Orlando, FL 32819
Email: privacy@cmatcher.com
Phone: (800) 370-2069

California-Specific “Notice at Collection”

Categories Collected: Identifiers; Commercial/Account Data; Internet/Network Activity; Geolocation; Financial/Govt IDs (if you apply); Sensitive Personal Information; Inferences; Communications.
Sources: You, your devices/browsers, our service providers and partners, affiliates, data brokers.
Purposes: As described in Sections 2–3.
Use/Disclosure of SPI: Only for permitted, necessary purposes (e.g., to provide services, prevent fraud, verify identity, ensure security, comply with law).
Retention: See Section 6 above.
Selling/Sharing: We may “sell” or “share” online identifiers and internet activity to deliver/measure ads where allowed—you can opt-out via our Do Not Sell/Share link and via GPC signals.
Financial Incentives: We currently do not offer programs that provide price or service differences related to your data.
Your Rights: Access, deletion, correction, portability, opt-out of sale/sharing, limit SPI (where applicable), and non-discrimination for exercising rights.
How to Exercise: See Section 7.