Legal
Privacy policy
Plain-language summary first, details after. Last updated October 25, 2026.
The short version
- From installers we collect business contact details to run your account and trial.
- Our alerts contain public records and entity-level business contacts only: the association or owner of record, the management company and public business lines.
- Owner quote requests reach installers only when the owner asked for quotes and was told the request goes to up to 3 vetted installers who serve their area.
- We never send text messages to building owners and never cold-call them.
- Anyone can ask us to stop contacting them, or to remove a record, on the opt-out page.
Who we are
WhenLeads is a division of DV8 WEB LLC, 1335 Old Dixie Hwy Ste 27, Lake Park, FL 33403. We run whenleads.com and the reference sites ERRCSCheck.com and BDACheck.com. Reach us through the contact form.
What we collect from installers
- Signup details: company, your name, title, work email, phone, website, trades, states and counties served, license number and anything you write to us.
- Account and billing records: the counties you subscribe to, your plan, invoices and refunds. Card payments are handled by our payment processor; we do not store card numbers.
- Technical data: a one-way salted hash of your IP address (not the address itself), your browser type and the time of each form you send, used to stop spam and to record what you agreed to.
- Consent record: the exact consent text you saw, its version and when you agreed.
What alerts contain
Public records (citations, violation notices, permit filings, board agendas) and the business contacts of the entity responsible for the building: the association or owner of record, the management company and public business lines. We do not put personal cell numbers or personal email addresses in alerts.
What owner requests contain
When an owner or manager asks for quotes on ERRCSCheck, the installers we send it to receive the building details and the contact details the owner chose to give, plus how they want to be contacted (email, or phone if they asked for calls). The owner saw, before sending, that the request goes to up to 3 vetted installers who serve their area and that installers pay us for the introduction.
Where data is stored
Form submissions and account records are stored in a Cloudflare D1 database operated for us by Cloudflare, Inc. Our websites are hosted on Cloudflare Pages. When we send email, we use an email delivery service that processes addresses only to deliver our messages.
Analytics
If enabled, Google Analytics and Cloudflare Web Analytics measure page visits in aggregate. Form answers are never sent to analytics.
How long we keep it
- Installer accounts: while active and for 3 years after, for billing records.
- Messages sent through the contact form: up to 3 years.
- Consent records: 5 years.
- Public record entries: while they are useful to installers, and removed on request where the law allows.
- Opt-outs: kept as a one-way hash of the email address, permanently, so we never contact that address again by mistake.
Your choices
You can ask us to show, correct or delete what we hold about you, or to stop contacting you, on the opt-out page or through the contact form. We answer within 30 days. Every marketing email we send has an unsubscribe link.
Changes
If we change this policy, we update the date above and log the change in the changelog.