🔒

Privacy Policy

On Point Leads

Last Updated: July 9, 2026

Service

On Point Leads Website & Discord Bot

Platforms

Web, Discord, Stripe

Operator

On Point Leads

Effective Date

July 9, 2026

1. Introduction

On Point Leads ("we," "us," or "our") operates a website and Discord bot that provides internet lead generation services, order processing, and payment workflow automation for insurance agents. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website, Discord bot, or related services (collectively, the "Service").

By accessing our website, using our lead request forms, interacting with our Discord bot, or completing a Stripe checkout, you consent to the data practices described in this Privacy Policy.

Important: This Privacy Policy should be read alongside our Terms of Service, which governs your use of the Service.

2. Information We Collect

2.1 Information You Provide Directly

When you submit a lead request form, create an account, or interact with our Service, we collect the following types of information:

CategoryExamplesPurpose
Identity & ContactFull name, email address, phone numberAccount creation, communication, order processing
Professional DetailsAgency name, NPN number, license number, resident stateVerification, lead distribution, compliance
Business ConfigurationLicensed states, lead type preferences, weekly budgetCampaign setup, lead targeting, billing calculation
CRM InformationGoHighLevel subaccount name, A2P approval statusCRM integration, SMS compliance verification
Payment InformationStripe customer ID, subscription ID (no card details)Billing, recurring payments, subscription management
CommunicationsNotes, special requests, support messagesOrder fulfillment, customer service

2.2 Information Collected Automatically

When you visit our website or interact with our Discord bot, we automatically collect certain technical information:

  • Device & browser information: Browser type, operating system, screen resolution.
  • Usage data: Pages visited, time spent, click patterns, referral source.
  • IP address: Used for security, fraud prevention, and approximate location.
  • Discord user data: Discord user ID, username, server membership, and interaction data (when using the Discord bot).
  • Authentication data: Login session tokens (managed by the Base44 platform).

3. How We Use Your Information

3.1 Service Delivery

  • Processing lead requests and distributing leads to your specified target states.
  • Setting up and managing recurring weekly billing through Stripe.
  • Creating and managing aged lead marketplace purchases.
  • Configuring CRM integrations and lead delivery systems.

3.2 Communication

  • Sending order confirmations, campaign building emails, and follow-up communications.
  • Providing onboarding resources, including access to follow-up scripts.
  • Notifying staff of new orders via Discord notifications and webhooks.
  • Responding to your inquiries and support requests.

3.3 Operations & Analytics

  • Tracking order processing statistics, staff performance, and average processing times.
  • Monitoring system health, detecting errors, and troubleshooting issues.
  • Analyzing lead pricing trends and cost-per-lead data.

3.4 Security & Compliance

  • Verifying agent licensing and A2P (Application-to-Person) messaging approval.
  • Preventing fraud, unauthorized access, and abuse of the Service.
  • Maintaining audit trails for all payment and order processing activities.
  • Complying with legal obligations and regulatory requirements.

4. Discord Bot Data

4.1 Discord User Data

Our Discord bot processes the following Discord user data when staff interact with order threads:

  • Discord user ID: Unique identifier for staff members who claim or complete orders.
  • Discord username / global name: Display name for staff assignment records.
  • Server membership & permissions: Used to determine staff authorization levels.
  • Interaction data: Button clicks (Claim, Complete, Needs Review) and timestamps.
  • Message content: All messages posted within order processing threads.

4.2 Order Thread Data

Each Stripe payment creates a dedicated Discord forum thread. The following data is stored both in Discord and in our internal database:

  • Stripe payment ID
  • Customer name and email
  • Payment amount and product purchased
  • Discord thread ID and message ID
  • Assigned staff member (Discord user ID and username)
  • Claim and completion timestamps
  • Current order status (New, Processing, Completed, Needs Review)

4.3 Discord Privacy

Discord user data is processed in accordance with Discord's Privacy Policy. We only access Discord data that is necessary for order processing and workflow management. We do not access private messages, voice channels, or data unrelated to the order processing function.

5. Stripe Payment Data

5.1 What We Store

When you complete a Stripe checkout, we receive and store the following payment-related data:

  • Stripe customer ID
  • Stripe subscription ID (for recurring billing)
  • Stripe payment intent ID (for payment authorization and capture)
  • Checkout session ID
  • Payment amount and product details
  • Billing reason (subscription creation, recurring cycle, etc.)

5.2 What We Do Not Store

Important: We do not store, process, or transmit payment card numbers, bank account numbers, CVV codes, or any other sensitive payment credentials. All payment card data is handled exclusively by Stripe, which is certified as a PCI DSS Level 1 service provider.

5.3 Stripe's Role

Stripe is the payment processor for all transactions on our Service. Stripe's handling of your payment data is governed by Stripe's Privacy Policy and Terms of Service. We recommend reviewing Stripe's policies to understand how your payment information is handled.

7. Data Sharing & Disclosure

We do not sell, rent, or trade your personal information for monetary compensation. We may share your information in the following circumstances:

ProviderData SharedPurpose
StripeCustomer name, email, payment metadataPayment processing, recurring billing
DiscordDiscord user IDs, usernames, message content, order dataBot operation, thread creation, staff notifications
Base44All stored entity data, authentication dataDatabase, hosting, backend infrastructure, authentication
ResendCustomer email address, email contentTransactional and onboarding email delivery
Google (Meta Ads)Lead type, pricing data (no PII)Lead generation advertising campaigns

8. Third-Party Services

Our Service integrates with several third-party platforms. Each has its own privacy policy governing how they handle data:

We are not responsible for the privacy practices of these third-party services. We encourage you to review their privacy policies.

9. Cookies & Tracking

Our website uses cookies and similar tracking technologies for the following purposes:

  • Authentication: Session tokens to keep you logged in.
  • Functionality: Storing preferences such as selected lead types or cart contents.
  • Analytics: Understanding how visitors use our website to improve the Service.
  • Security: Fraud prevention and bot detection.

You can control cookies through your browser settings. Disabling cookies may affect some functionality of the website, such as authentication and shopping cart features.

Our Discord bot does not use cookies. Discord's own cookie and tracking practices are described in Discord's privacy policy.

10. Data Retention

10.1 General Retention

We retain your personal information for as long as your account is active or as necessary to provide the Service. After account termination, we retain data for the following periods:

Data TypeRetention PeriodReason
Lead request recordsIndefiniteAudit trail, compliance, dispute resolution
Payment records (Stripe IDs)IndefiniteBilling history, tax compliance
Discord order dataIndefiniteAudit trail, staff performance tracking
Lead purchase recordsIndefiniteTransaction history, profit-sharing tracking
Email communications3 yearsCustomer service, compliance
Authentication logs1 yearSecurity, fraud prevention

10.2 Discord Thread Data

Discord threads created by the bot are subject to Discord's own retention policies. However, we retain metadata about each order (including staff assignments, timestamps, and status changes) in our internal database indefinitely, even if the Discord thread is deleted or archived.

10.3 Deletion Requests

You may request deletion of your personal data at any time. We will process deletion requests in accordance with applicable law, noting that certain data may be retained for legal, compliance, or audit purposes even after a deletion request.

11. Data Security

We implement reasonable technical and organizational measures to protect your personal information, including:

  • Encryption: Data transmitted over HTTPS/TLS encryption.
  • Access controls: Role-based access to sensitive data, limited to authorized personnel.
  • Authentication: Managed by the Base44 platform with secure token-based sessions.
  • Payment security: All payment processing handled by Stripe (PCI DSS Level 1 certified).
  • Discord verification: Bot interactions are cryptographically verified using Ed25519 signatures.
  • Webhook security: Stripe webhooks are verified using Stripe's signature validation.
  • Regular monitoring: System logs and error monitoring for anomaly detection.

Important: No method of transmission or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the security of your own accounts, passwords, and Discord credentials.

12. Your Privacy Rights

12.1 General Rights

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Erasure: Request deletion of your personal data (subject to legal exceptions).
  • Restriction: Request that we limit our processing of your data.
  • Portability: Request your data in a structured, machine-readable format.
  • Objection: Object to processing based on legitimate interests.
  • Withdrawal of consent: Withdraw consent for processing at any time.

12.2 GDPR (EEA, UK, Switzerland)

If you are located in the European Economic Area, United Kingdom, or Switzerland, you have additional rights under the GDPR, including the right to lodge a complaint with your local data protection authority. You may exercise these rights by contacting us through the information in Section 16.

12.3 CCPA (California)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including:

  • The right to know what personal information is collected and how it is used.
  • The right to request deletion of your personal information.
  • The right to opt out of the sale of personal information (we do not sell personal information).
  • The right to non-discrimination for exercising your privacy rights.

To exercise any of these rights, contact us using the information in Section 16.

13. Children's Privacy

Our Service is intended for licensed insurance professionals and is not directed to children. We do not knowingly collect personal information from children under the age of 16. If you believe we have collected information from a child, please contact us immediately, and we will take steps to delete such information.

14. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws than your jurisdiction.

By using our Service, you consent to the transfer of your information to the United States and other countries where our service providers (Stripe, Discord, Base44, Resend) operate. We take reasonable steps to ensure that your data is protected in accordance with this Privacy Policy and applicable law.

For users in the EEA, UK, or Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) for international data transfers where required.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Service features. When we make material changes, we will update the "Last Updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after any changes constitutes your acceptance of the revised policy.

Notice: If we make material changes to how we process personal data, we will provide notice via email or prominent notice on our website before the changes take effect, where required by law.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

On Point Leads
Discord: Contact via the On Point Leads Discord server
Email: Contact through the On Point Leads website
Website: On Point Leads

For privacy-related requests (access, deletion, correction, or opt-out), please include "Privacy Request" in your subject line and provide sufficient information to identify your account.

We will make reasonable efforts to respond to all privacy requests within thirty (30) days of receipt.