1. Who We Are and What This Policy Covers
X5 Ventures LLC, doing business as REI Leads (“REI Leads,” “we,” “us,” or “our”), operates reileads.com and the REI Leads platform, including the client dashboard, lead delivery tools, integrations, and related services (together, the “Platform”). This Privacy Policy explains how we collect, use, share, and protect personal information from the people who use the Platform on behalf of a business.
This policy applies to:
- Real estate investors, investment companies, and other businesses that purchase leads or subscribe to services from REI Leads (“Clients”);
- Employees, owners, agents, and other individuals who act on behalf of a Client or a prospective Client;
- Anyone who visits reileads.com, requests information, attends a demo, or communicates with us about our services.
This policy does not cover consumer data. REI Leads generates leads from homeowners and property sellers through separate consumer-facing websites and marketing channels. The collection, use, and sharing of that information is governed by our Consumer Privacy Policy. Nothing in this document describes or limits how consumer lead data is handled.
This policy is part of, and incorporated into, our Terms of Service and any Client agreement you have with us. Capitalized terms not defined here have the meaning given in those documents.
2. Our Commitments to Clients
Before the details, here is what we want every Client to know:
- We never sell Client information.
We do not sell, rent, or trade the personal information of our Clients or their personnel to anyone, for money or for anything else of value.
- We never store payment card numbers.
Card payments are handled by PCI-DSS compliant third-party payment processors. Full card numbers never touch our servers.
- This is a business relationship.
We collect only the information needed to run your account, deliver leads, bill you, support you, and comply with the law. We do not collect sensitive personal information such as government ID numbers, health information, biometrics, or precise geolocation from Clients.
The rest of this policy explains how we live up to those commitments.
3. Information We Collect
3.1 Information you give us
We collect information you provide when you create an account, complete onboarding, buy leads, set up integrations, contact support, respond to surveys, or sign up for communications. This may include:
- Name, job title, business email address, and business phone number, including mobile number if you opt in to text messages;
- Business name, entity type, business address, website, and markets you buy in;
- Account credentials;
- Lead buying preferences, budgets, target areas, and routing rules you set in the dashboard;
- Billing address, payment method type, and the last four digits and expiration date of a card on file (see Section 3.3);
- Tax and business verification documents where required for payouts or compliance, such as a W-9;
- The content of your communications with us, including emails, chat, support tickets, and call recordings where we tell you a call is being recorded.
3.2 Information you contribute about lead performance
Clients may report back to us on the leads they purchase, including disposition, appointment set, offer made, contract signed, closed, or returned, and may request credits for leads that do not meet our quality standards. We call this “Performance Data.” Performance Data is about the lead and the transaction, not about you personally, but we treat it as confidential Client information. Section 6 explains how we use it.
3.3 Transaction and payment information
We use third-party payment processors to handle card payments, ACH, and wire transfers. When you add a payment method, your card details are entered directly into the processor's secure form and transmitted to the processor. We receive and store only a payment token, the card brand, the last four digits, and the expiration date so you can identify the card in your dashboard. We never receive, store, or have access to full card numbers or security codes.
We do keep records of your transactions with us, including amounts, dates, invoices, credits, refunds, disputes, and account balance history. Our payment processors handle your data under their own privacy policies.
3.4 Integration and API credentials
If you connect REI Leads to your CRM, dialer, or other system, we may hold API keys, webhook URLs, OAuth tokens, or similar credentials needed to deliver leads into that system. We use these credentials only to deliver leads and account notifications as you have configured.
3.5 Information collected automatically
When you use the Platform, we and our service providers automatically collect:
- IP address, browser type, device type, operating system, and language settings;
- Pages viewed, features used, clicks, session length, referring URLs, and dashboard activity;
- Login times, lead delivery events, and other activity logs we keep for security and support;
- Information collected through cookies, pixels, and similar technologies as described in Section 8.
3.6 Information from other sources
We may receive limited information about you or your business from other sources, including business verification services, public business registries, our payment processors, referral partners who introduce you to us, and publicly available professional profiles. We use this information to verify that you are a legitimate business, prevent fraud, and keep our records accurate. We do not buy marketing lists of investors or append demographic profiles to Client records.
4. How We Use Information
We use the information described above to:
- Create and manage your account and verify your identity and business status;
- Deliver purchased leads to you through the dashboard, email, text, or your connected systems;
- Route and price leads according to your preferences, budget, and markets;
- Bill you, process payments, apply credits and refunds, and maintain accounting records;
- Provide customer support and respond to your questions and requests;
- Send transactional messages about your account, lead deliveries, billing, and service changes;
- Send marketing communications about REI Leads products, features, and offers, which you can opt out of at any time;
- Improve the Platform, lead quality, routing, and the client experience, including through aggregate analysis of Performance Data;
- Detect and prevent fraud, abuse, security incidents, and violations of our Terms;
- Comply with legal obligations, enforce our agreements, and protect our rights and the rights of others.
We do not use Client information to make decisions about you that have legal or similarly significant effects without human involvement.
5. How We Share Information
We do not sell Client information. We share it only in the following circumstances:
- Service providers. With vendors who perform services for us, such as cloud hosting, payment processing, email and SMS delivery, customer support tools, analytics, and accounting. These providers are bound by contract to use your information only to provide services to us and to protect it appropriately.
- Payment processors. With our payment processors to complete transactions you initiate. See Section 3.3.
- At your direction. With your CRM or other systems you choose to connect, and with any other party when you ask us to share.
- Legal and compliance. When required by law, subpoena, court order, or government request, or when we believe disclosure is necessary to comply with law or protect the rights, property, or safety of REI Leads, our Clients, or the public.
- Security and fraud. As needed to investigate or prevent fraud, abuse, security incidents, or violations of our Terms.
- Business transfers. In connection with a merger, acquisition, financing, reorganization, or sale of all or part of our business. If that happens, your information will remain subject to this policy until it is updated with notice to you.
- Affiliates. With companies under common ownership with REI Leads, who will handle your information consistent with this policy.
We may share aggregated or de-identified information that cannot reasonably be used to identify you or your business, such as market-level lead volume and conversion benchmarks, with partners, in marketing materials, or publicly. We will not attempt to re-identify de-identified data.
Advertising cookies are a separate matter. If you visit reileads.com, third-party advertising and analytics providers may collect information through cookies and pixels as described in Section 8. Some U.S. state laws treat that kind of disclosure as “sharing” or a “sale,” even though no money changes hands and no account or lead data is involved. Section 8 explains how to opt out.
6. How We Handle Your Performance Data
- We use Performance Data to evaluate lead quality, process credit requests, improve our lead sources, and improve how leads are scored and routed across the Platform.
- We do not disclose your individual Performance Data to any other Client. Another Client will never see which leads you bought, what you did with them, or what you closed.
- We may use Performance Data in aggregate, combined with data from many Clients, to publish benchmarks or improve our models. Aggregate data does not identify you, your business, or your specific transactions.
- We do not sell Performance Data or use it to market our leads to any party other than you.
7. CRM Integrations and Connected Systems
When you connect a third-party system to REI Leads, two things happen: we push lead data into that system on your behalf, and we hold the credentials that make that possible. We protect those credentials as described in Section 3.4. Once a lead is delivered into your system, that system's provider handles the data under its own terms and privacy policy, not ours. You are responsible for the security of your own connected systems and for any access you grant to others within them.
You can review and disconnect any integration from your dashboard at any time. Disconnecting stops future deliveries and triggers deletion of the associated credentials.
8. Cookies, Analytics, and Advertising
8.1 What we use
We use cookies, pixels, and similar technologies (“Cookies”) on reileads.com and in the dashboard for the following purposes:
- Strictly necessary: Keeping you logged in, remembering session settings, and protecting against fraud. These cannot be turned off.
- Analytics: Understanding how visitors use our site and dashboard so we can improve it, using tools such as Google Analytics.
- Advertising: Measuring our marketing campaigns and showing ads for REI Leads to people who have visited our site, using tools from providers such as Google, Meta, and LinkedIn.
Analytics and advertising providers may set their own Cookies and receive information about your visit, such as your IP address, pages viewed, and device identifiers. They may combine that information with data from other sites. We do not send account data, lead data, or Performance Data to advertising providers.
8.2 Your choices
- Cookie banner: where required by law, we present a cookie preference tool when you first visit. You can change your choices at any time using the Cookie Settings link in the site footer.
- Global Privacy Control: we honor Global Privacy Control (GPC) browser signals as a valid request to opt out of the sharing of personal information for targeted advertising, as required by applicable state law.
- Browser settings: you can block or delete Cookies through your browser. Doing so may affect dashboard functionality.
- Industry opt-outs: you can opt out of interest-based advertising from participating companies at optout.aboutads.info and optout.networkadvertising.org.
9. Text Messages
If you provide a mobile number and opt in, we may send you text messages about lead deliveries, account activity, and, with separate consent, marketing offers. Message frequency varies. Message and data rates may apply. Reply STOP to stop and HELP for help.
We do not sell, rent, or share mobile phone numbers, text message opt-in data, or text message content with any third party for their own marketing or promotional purposes. We share mobile numbers only with the SMS delivery providers we use to send messages, and they are contractually prohibited from using that information for any other purpose. You may remove your numbers at any time via the portal.
10. Security
We maintain administrative, technical, and physical safeguards designed to protect Client information, including:
- Encryption of data in transit (TLS) and at rest;
- Role-based access controls and least-privilege access for our staff;
- Hashed password storage and support for multi-factor authentication;
- Encrypted storage of integration credentials;
- Logging and monitoring of access to production systems;
- Use of PCI-DSS compliant payment processors so that card numbers never enter our environment.
No system is perfectly secure. If we learn of a security incident that affects your personal information, we will notify you without undue delay and in any event within the time required by applicable law, and we will tell you what happened, what information was involved, and what we are doing about it.
11. How Long We Keep Information
We keep Client information for as long as your account remains in our system. In general:
- Account and contact information: for the life the account remains in the system (active or canceled);
- Integration credentials: deleted when the integration is disconnected or the account is closed;
- Support communications: indefinitely;
- Security and access logs: indefinitely;
- Marketing consent and opt-out records: for as long as needed to honor your choices and demonstrate compliance.
12. Your Privacy Rights and Choices
12.1 Choices available to everyone
- Marketing emails: use the unsubscribe link in any marketing email or contact us. You will still receive transactional messages about your account.
- Text messages: remove the number from your account, or reply STOP to any message.
- Account information: log in to your dashboard to review and update your contact, business, and billing information at any time.
- Cookies: see Section 8.2.
12.2 Rights under U.S. state privacy laws
Depending on where you live, state privacy laws (including those in California, Colorado, Connecticut, Virginia, Texas, Oregon, and others) may give you the right to:
- Know whether we process your personal information and access a copy of it;
- Correct inaccurate personal information;
- Delete personal information we hold about you, subject to legal exceptions such as records we must keep for tax, accounting, security, or contract purposes;
- Receive a portable copy of the personal information you provided to us;
- Opt out of targeted advertising, the sale of personal information, and profiling that produces legal or similarly significant effects. We do not sell Client information and do not engage in that kind of profiling. You can opt out of targeted advertising Cookies as described in Section 8.2;
- Not be discriminated against for exercising your rights;
- Appeal a decision we make on your request.
Some state laws apply only to information about individuals acting in a personal or household capacity and exempt information about individuals acting in a business or employment capacity. We will honor requests as required by the law that applies to you, and we will treat any reasonable request in good faith regardless.
12.3 How to exercise your rights
Submit a request by emailing support@reileads.com, using the form at reileads.com/company/contact, or calling 817-200-8106. We will verify your identity before acting, usually by confirming the request from the email address on your account or by asking for information that matches our records. If you use an authorized agent, we will ask for written proof of the agent's authority and may still verify directly with you.
We will respond within 45 days of receiving a verifiable request. If we need more time, we will tell you why and may take up to an additional 45 days. If we deny a request in whole or in part, we will explain why and tell you how to appeal. We will respond to appeals in writing within 45 days (60 days where permitted by law). If we deny your appeal, we will tell you how to contact your state attorney general.
We do not charge a fee for handling requests unless a request is manifestly unfounded, excessive, or repetitive.
13. Clients in Canada
We serve real estate investors across Canada, and we handle Canadian Clients' personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws, including Quebec's Act respecting the protection of personal information in the private sector (Law 25).
- Consent: we collect, use, and disclose personal information with your consent, which may be express or, where reasonable, implied from the business relationship. You may withdraw consent at any time, subject to legal and contractual limits, and we will explain the consequences of doing so.
- Purpose limitation: we collect only what is needed for the purposes described in this policy and do not use it for new purposes without telling you and, where required, obtaining your consent.
- Access and correction: you may request access to the personal information we hold about you, ask how it has been used and to whom it has been disclosed, and request correction of inaccurate information. We will respond within 30 days.
- Cross-border storage: your information is stored and processed in the United States and may be accessed by U.S. authorities under U.S. law. By using the Platform you acknowledge this transfer.
- Electronic messages:we send commercial electronic messages only with consent that complies with Canada's Anti-Spam Legislation (CASL). Every message includes our identification and an unsubscribe mechanism that we honor within 10 business days.
If you are not satisfied with our response to a privacy concern, you may contact the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information.
14. Persons Under 18
The Platform is a business service and is not intended for anyone under 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us information, contact us and we will delete it.
15. Where Information Is Processed
REI Leads is based in Texas. Information is stored and processed in the United States. If you access the Platform from outside the U.S., you understand that your information will be transferred to, stored in, and processed in the United States, where privacy laws may differ from those in your jurisdiction.
16. Third-Party Websites and Services
The Platform may link to third-party websites, tools, or services, including your connected CRM and our payment processors. We are not responsible for their privacy practices. Review their policies before providing information to them.
17. Changes to This Policy
We may update this policy as our practices, technology, or the law change. When we do, we will update the “Last updated” date above. If a change materially affects how we use or share Client information, we will give you advance notice by email to the address on your account, by a notice in the dashboard, or both, before the change takes effect. Your continued use of the Platform after the effective date means you accept the updated policy.
18. Contact Us
Questions, requests, or concerns about this policy can be sent to:
3600 William D. Tate Ave, Suite 100
Grapevine, Texas 76051