This policy explains what personal information IsItLicensed collects, why, and the choices you have. It is written to meet California’s privacy laws (the CCPA/CPRA and CalOPPA). If you are a California resident, you have specific rights described below.
Information we collect
- Lead information you submit: your name, email, phone number, city, and project details when you request a quote.
- Business-monitoring information: the email and the license numbers you submit when you build a vendor-monitoring list.
- Analytics & cookies: usage data collected with PostHog (pages viewed, device/browser info). If you accept on our consent banner, we also enable PostHog session replay with all inputs masked — we mask everything you type, so keystrokes and form entries are never recorded. Replay is off until you accept; declining turns PostHog collection off entirely. Your choice is stored in your browser (a cookie and localStorage entry named “analytics-consent”) so we can honor it on return visits. We do not run third-party advertising trackers.
We share homeowner leads with contractors (this is a “sale” under California law)
When you submit a request for a quote, we share the information you provide with one or more contractors so they can contact you. Because contractors pay us for these introductions and use the information for their own business, California law treats this as a “sale” or “sharing” of personal information. You can opt out at any time — see Do Not Sell or Share My Personal Information.
Calls and texts (TCPA)
If you check the consent box on a quote form, you agree that the contractors we connect you with may call or text you at the number you provided, including with automated technology, about your project. Consent is not a condition of using the site, and you can revoke it by asking the contractor to stop or by contacting us.
Your California privacy rights
You have the right to:
- Know what personal information we collect and how we use it.
- Delete the personal information we hold about you.
- Correct inaccurate personal information.
- Opt out of the sale or sharing of your personal information — via our Do Not Sell or Share page.
- Not be discriminated against for exercising any of these rights.
To exercise any right, email privacy@isitlicensed.com.
Global Privacy Control (GPC)
We honor the Global Privacy Control browser signal as a valid request to opt out of the sale or sharing of your personal information, automatically — you do not need to do anything else. Concretely, the signal is honored in two places:
- On the site: if your browser sends GPC, we treat it as declined analytics consent — PostHog collection is turned off, session replay never starts, and we do not show you the consent banner.
- When you request a quote: we read the GPC signal (the “Sec-GPC” header your browser attaches) at the moment you submit, record the opt-out on your request, and exclude it from sale or sharing — your details are not delivered to any contractor. We tell you this on the confirmation, and if you still want the introduction you can ask us to proceed at privacy@isitlicensed.com.
Retention & “Do Not Track”
We keep lead information only as long as needed to deliver and support the introduction, then delete or de-identify it. Because there is no common standard for browser “Do Not Track” signals, we do not respond to DNT, but we do honor GPC as described above.