Privacy Policy

Questions about this policy: joshua@webpro360.com.

1. Who we are

LASSO is a field sales app for companies that sell to commercial buildings. It is built and run by WebPro360.com, LLC, a South Carolina limited liability company. In this policy, "we", "us" and "WebPro360" mean WebPro360.com, LLC, and "LASSO" means the app, the website at lassoreps.com, and the Android and iPhone apps (which are in testing).

A "Customer" is a company that uses LASSO under an agreement with us. "Users" are the people a Customer lets use LASSO, such as its sales reps and managers. "Customer Data" is the information a Customer and its Users put into LASSO or create with it.

You can reach us at joshua@webpro360.com or (800) 360-9882.

2. Two roles: the website and the app

We handle information in two different roles, and this policy covers both.

• On the website (lassoreps.com). When you visit, ask for a demo or try a sample lookup, we collect information directly from you and decide how it is used. Section 3 explains what we collect.
• Inside the app. Each Customer uses LASSO at its own address under lassoreps.com. There we process Customer Data on behalf of that Customer. The Customer controls its data and decides who can use LASSO. We act as its service provider and use Customer Data only to provide, support, secure and bill for LASSO, as this policy and our agreement with the Customer describe. Sections 4 through 7 explain what the app stores.

If you are a rep or manager, your employer is the Customer, and its own policies also apply to how it uses LASSO. If a company's rep gave you a QR code, or entered your details into LASSO, that company is the Customer that controls your information.

3. Information we collect on lassoreps.com

Demo requests

When you ask for a demo, we collect your name, company and work email, and, if you give them, your phone number, how many reps you have, your trade, a note and the page you sent it from. The request is delivered to us through Formspree, a form service, which keeps a copy in our Formspree account and records the time and your IP address to filter spam.

Formspree emails each request to WebPro360 staff so that someone follows up. We use it to reply to you, set up a walk-through and follow up with you about LASSO.

Try it with your area

When you type a city or ZIP code and pick a trade, we record what you typed, the trade, the map position of that area (not your own location), the time, how many results came back, what the lookup cost and your IP address. We use the IP address to limit each visitor to three live lookups a day. We use the rest to run the lookup and to see which areas and trades people try.

To run the lookup, we send the area you typed to the US Census geocoder and to OpenStreetMap-based geocoding services to find it on the map. We then send the map position and a list of building types to DataForSEO, which returns public Google business listings. None of these services receives your IP address from us. The results show business names, types, towns, scores and reasons, and never a phone number, street address or website.

Finding your company's sign-in page

If you type your company's name to find its LASSO address, we use what you type only to look up the address. We do not save it.

Cookies, analytics and outside services

The website does not set cookies and does not use analytics, advertising or tracking tools. Signing in to the app sets one cookie, described in section 14.

To show the pages, your browser loads fonts from Google Fonts. Google receives your IP address and basic browser information when your browser asks for those files, and handles it under its own privacy policy. Our host, Cloudflare, also receives your IP address and browser information to deliver the pages and protect the site.

Because the website does not track you across other sites, there is nothing for a browser's Do Not Track signal to switch off.

4. Information stored in the LASSO app

Who controls it

Customer Data belongs to the Customer. The Customer decides who its Users are, and we set up Users and their roles (rep or manager) at the Customer's request. What each User can see depends on their role and the Customer's settings. For example, managers see their team's work.

What the app stores

• User accounts. Name, work email, role, a hashed password (never the password itself), time zone and working hours for bookings, and settings.
• Sales records. Accounts, contacts (such as names, titles, emails and phone numbers), leads, deals, activity (calls, visits, meetings, notes and logged emails), follow-ups, meetings, stop lists and door outcomes, canvassing pins with their notes and photos, territories, saved searches, email templates, and the contents of spreadsheets a User imports.
• Voice notes. The audio recording, its transcript, and the summary and suggested updates made from it.
• Business cards. The photo and the details read from it.
• QR forms and bookings. When someone scans a rep's QR code and fills in the form: their company, name, email or phone, what they need, where, how soon, and any meeting time they pick.
• Leads sent in from other tools. Leads a Customer sends into LASSO from its own web forms, call tracking or other services.
• Location points, only when a rep turns location sharing on. See section 5.
• Email and calendar details, only when a rep connects Outlook or Google, and never the body of an email. See section 6.
• Salesforce records, only when a Customer uses the optional Salesforce sync and a rep connects. Accounts, contacts and opportunities sync both ways; leads and activity are sent to Salesforce.
• Technical and security records. Sign-in attempts (email address, IP address, time and whether it worked), sign-in sessions with the browser type, push alert subscriptions for devices that turn alerts on, webhook settings, and records of lead lookup and AI use with their cost. Personal API keys and incoming lead keys are stored only as hashes. Connection tokens for Salesforce, Microsoft and Google are stored encrypted.

Public business information

The lead finder gathers public information about businesses near a search area. That includes Google business listings (such as name, category, phone, website, address, hours, rating and review count), text from public Google reviews, public job postings, the business's own public website, website registration dates, and public government lists loaded for the Customer's states when we set up its company (such as state facility licensing lists, federal nursing home and HUD multifamily data, and county property records).

Some of this names people, such as a facility administrator, a license holder or a property's management contact. When a rep keeps a business, it becomes a lead in the Customer's LASSO.

What the app does not collect

• It does not read or store the body of any email in a connected mailbox.
• It does not record location while sharing is off or outside the hours a rep sets.
• It does not take or store payment card details. LASSO does not process payments.
• It is not designed for sensitive information such as health records, Social Security numbers or financial account numbers, and Customers agree not to put that kind of information into LASSO.

5. Location sharing

Location sharing is off unless a rep turns it on. These are the rules:

• Each rep decides whether to turn on "Share my location during the workday" in Settings, and sets the hours it applies.
• While it is on, a banner shows in the app with a button to turn it off.
• Nothing is recorded while sharing is off or outside the rep's hours. The phone does not send location then, and our server discards any that arrives.
• Each point holds a position, its accuracy, speed, direction and the time.
• Points are used to show the rep's last position and day trail to managers, to mark when a rep has arrived at a planned stop, and to estimate miles driven (a straight-line estimate between points, not road miles).
• Managers see only reps who have sharing on. When a rep turns sharing off, managers no longer see that rep's position or trails. WebPro360 staff who run LASSO can also see this information (see section 13).
• Points are deleted automatically after 90 days. Points recorded before a rep turned sharing off stay until they reach 90 days.
• In a web browser, the app records only while it is open. In the Android and iPhone apps, which are in testing, it can also record with the screen off, under the same rules.

Separately, when a rep asks for results near where they are (for example, Near me now, or a lead search from their position), the app uses the phone's position for that request, and a lead search saves its area as the rep's search area. The phone keeps its last position on the device for up to 30 minutes so it does not have to ask again. That position is not sent to us unless the rep asks for nearby results or has sharing on.

6. Email and calendar connections

A Customer can let its reps connect a Microsoft 365 or Outlook account, or a Google account (Gmail and Google Calendar). These connections are rolling out. They are used only when the Customer turns them on and a rep connects their own account. A rep can disconnect at any time, which deletes the stored connection. Activity already saved stays in LASSO.

• Mail we read. LASSO reads only message details (sender, recipients, subject and date) of messages in the rep's inbox and sent mail, never the body. For a message to or from a contact or lead already in LASSO, it saves an activity with the subject (up to 200 characters), the time and the matching record. Internal company mail, and mail with people who are not in LASSO, is not saved.
• Mail we send. When a rep sends an email from LASSO, it goes out through the rep's own mailbox. LASSO saves the subject and a note that it was sent, not the body.
• Calendar. LASSO reads only the times a rep is busy, not the details of other events, so that bookings from QR codes avoid conflicts. It adds meetings booked through a QR code or a voice note to the rep's calendar.

LASSO's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use mail or calendar information for advertising, we do not sell it, and we do not use it to train AI models.

7. AI features

Some LASSO features use AI. This is what each one sends and where it is processed.

The daily brief, lead scoring, next best action and smart fill do not use AI. They follow fixed rules.

Anthropic processes this information as our service provider under its commercial terms. We do not use Customer Data to train AI models. AI can be wrong, so LASSO shows the results of card reading and voice notes to the rep to review, change or reject before anything is saved.

8. How we use information

• To provide, run and support LASSO for each Customer, as that Customer directs.
• To keep LASSO secure, for example by limiting sign-in attempts, protecting public forms from abuse and looking into problems.
• To bill Customers, using records of lead lookups and AI use.
• To send service emails, such as invitations and password resets, from noreply@lassoreps.com.
• To answer demo requests and questions, and to follow up with people who asked about LASSO.
• To fix problems and improve LASSO.
• To meet legal obligations and enforce our agreements.

We do not use Customer Data to advertise to anyone, and we do not use it to train AI models.

9. Who we share information with

We share information with the services below, and only what each one needs for its job. Each handles information under its own terms and privacy policy.

We may also share information:

• with our lawyers, accountants and other professional advisers, as needed for their work for us;
• when the law requires it, or to protect the rights, safety or property of our Customers, Users, the public or WebPro360;
• with a buyer or successor if WebPro360's business is sold, merged or reorganized, in which case this policy continues to apply to the information.

10. We do not sell your information

We do not sell personal information, and we do not share it for targeted or cross-context behavioral advertising. LASSO shows no ads.

11. Security

We protect information with measures built into LASSO, including these:

• Every page and request uses an encrypted connection (https).
• Passwords are stored only as salted hashes, and invite and reset links work once and expire.
• Connection tokens for Salesforce, Microsoft and Google are encrypted when stored.
• Each company signs in at its own address. Customers share one database and file store, and every record carries its company's id so that each request returns only that company's data.
• Sign-in attempts, password resets and public forms are rate limited.

No system is perfectly secure. The Security page explains what is in place today and what is not built yet. If we learn of a breach that affects personal information, we will notify affected Customers and people as the law requires.

12. How long we keep information

LASSO deletes these automatically:

• Location points, after 90 days.
• Webhook delivery records, after 30 days.
• Offline sync records (used so a change is not saved twice), after 7 days.

Other Customer Data is kept until the Customer deletes it or asks us to delete it:

• A deleted account goes to a trash, with its contacts, deals, activity, follow-ups, voice notes and meetings, where it can be restored for 30 days. After 30 days it can no longer be restored and is cleared.
• Contacts, deals and activity deleted on their own are removed right away.
• When a User leaves, we turn off their sign-in. Their records stay with the Customer's data.
• Photos and recordings (business cards, voice notes and pin photos) are stored as files. Deleting a record in the app does not delete its file today. We delete these files when the Customer asks.
• Sign-in attempt records, and records of the system emails we send (recipient, type and time, without the message), are kept for security and support.

LASSO has no button to delete or export a whole company. When an agreement ends, or at any other time, a Customer can ask us to export or delete its data and we will do so. Users can also export some of their own records from the app as spreadsheets.

Deleted information can remain for a short time (up to 30 days) in our hosting provider's recovery copies before it is gone. We may keep information longer when the law requires it or to resolve a dispute.

On the website, we keep demo requests as long as we need them to respond to you and manage our relationship with you, and we keep sample lookup records to protect the site and understand what visitors try. You can ask us to delete yours.

13. WebPro360 staff access

WebPro360 staff who run LASSO can sign in to any Customer's LASSO and see its data. That includes Users, records, activity, usage and, for reps who share location, live positions and trails.

We use this access only to set up companies and Users, help Users who ask for support, run and fix the service, prepare bills, keep LASSO secure and meet legal obligations.

14. Cookies and storage on your device

The website sets no cookies. The app uses:

• One sign-in cookie. It keeps you signed in for 30 days and renews while you keep using LASSO. The app needs it to work.
• Device storage for conveniences. Your last position for up to 30 minutes, map pin filters, your last pin outcome, list sorting, business card scanning defaults, whether you dismissed the alerts prompt, and, in the phone apps, which company you use.
• Offline storage. Changes waiting to be sent, location points waiting to be sent, and copies of screens you already opened so you can read them with a weak signal. The saved screen copies are cleared when you sign out.

LASSO uses no advertising or analytics cookies.

15. Your choices and rights

• Website visitors and people who asked for a demo: email us to see, correct or delete the information we hold about you, or to stop follow-up emails.
• Reps, managers and anyone whose information is in a Customer's LASSO: that Customer controls the information, so contact the Customer first (for reps, that is your employer). If you contact us, we will refer your request to the Customer and help it respond.
• Reps can turn location sharing off at any time, disconnect a mail and calendar account, and turn push alerts off for each device in Settings.

Depending on where you live, privacy laws may give you more rights, such as the right to know what we hold about you, to get a copy, or to have it corrected or deleted. We will respond to requests as those laws require. We may need to confirm your identity first, and we will not treat you differently for making a request.

16. Children

LASSO is for businesses and is not meant for anyone under 18. We do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.

17. Users outside the United States

LASSO is offered to businesses in the United States. Information is stored and processed in the United States and in other countries where Cloudflare and our other service providers operate. If you use LASSO from outside the United States, your information will be handled there under this policy.

18. Changes to this policy

We may update this policy as LASSO changes. We will post the new version here and change the date at the top. If a change is material, we will also let Customers know by email before it takes effect.

19. Contact us

WebPro360.com, LLC
Email: joshua@webpro360.com
Phone: (800) 360-9882

For information a Customer holds in LASSO, you can also contact that Customer directly.