ReadyKnock Privacy Policy

Version 1.0 · Effective date: [LAUNCH DATE] · Last updated: [LAUNCH DATE]

Operator details (edit here only). "ReadyKnock," "we," "us" and "our" mean: Thoroclean Auto Appearance LLC, a New Jersey limited liability company, doing business as ReadyKnock, 865 NJ 33 Business, Ste 3 #157, Freehold, NJ 07728. Privacy contact: privacy@readyknock.com. To change the operator later (for example to the new ReadyKnock LLC), edit this box and publish a new version under Section 17.

Start here: which part is about you?

This policy covers two very different groups of people. Please read the part that fits you. Sections 9 to 18 apply to everyone.

What we never collect: Social Security numbers, driver's license or government ID numbers, financial account or card numbers (our payment processor handles cards), health data, biometric data, precise geolocation of a person's device, race or ethnicity, religion, sexual orientation, citizenship or immigration status, union membership, or data about children.

What our leads may never be used for: decisions about anyone's credit, insurance, employment, housing or tenancy. ReadyKnock is not a consumer reporting agency.

PART A: People and businesses whose public-record information appears in leads

1. What we collect about you, and where it comes from

We use legal sources only: public records, data licensed from vendors whose licenses allow this use, official government data and APIs, and information people chose to give our clients. We do not scrape websites against their terms. We do not get around logins, CAPTCHAs or rate limits. Every record keeps its source, the date we pulled it, and the license it came under.

What we keep from New Jersey deed records for our free Market Snapshot: only the county, recorded date, property class and price. We do not store names, addresses or lot numbers from that file for the Snapshot. The Snapshot shows counts only.

We do not collect the sensitive data listed at the top of this policy. We do not fill in information that a government source removed or redacted (for example protected officials' records in Florida).

2. How we use it

• To find and score signs that a property owner or business may need a service soon.
• To write the "why now" reason and a suggested first message for the client.
• To deliver the lead to one client in the matching service and area.
• To remove duplicates, check quality, and apply opt-outs, suppressions and Daniel's Law requests.
• To keep records that show where data came from and that we honored requests.
• To create de-identified, aggregate statistics (for example "120 homes sold in this county last month").
• To protect our rights and follow the law.

Profiling. Scoring is a form of automated profiling. We use it only to decide which leads to show a business for marketing. We do not use it to make decisions that produce legal or similarly significant effects about you, such as decisions about credit, housing, insurance, employment, education or health care, and our clients may not either. You can opt out of profiling (Section 4).

3. Who receives it

• One client. Each lead is delivered to one business client that sells the matching service in that area (for example a roofer, an HVAC company, a cleaning company or a hotel-furnishings supplier). We do not resell or share a lead with a second client. Our clients must use leads only for their own marketing, must follow calling, texting, email and door-to-door laws, and must stop contacting you when we tell them you opted out.
• How clients may contact you. Our terms tell clients that homeowners and other consumers found through public records should be contacted by mail and ads, not cold calls or texts, and that no automated, prerecorded or AI-voice call or text may be made without your prior express written consent. Business leads may get business emails and manually dialed business calls, subject to do-not-call rules.
• Service providers that help us run ReadyKnock (Section 10), under contracts that limit their use.
• Legal and safety: when the law requires it, or to protect rights, safety or property.
• A business transfer: to a company formed to own ReadyKnock, or in a merger, acquisition or sale of assets. This policy (or one at least as protective) will keep applying.

4. "Sale," "sharing," and data broker status: the honest version

We may be "selling" your information under some state laws. Several state privacy laws define a "sale" broadly, to include giving personal information to another business for money or other value. When we deliver a lead that includes a person's name or home address to a paying client, that may be a "sale" (or a similar "disclosure") under laws such as the California Consumer Privacy Act (CCPA), the New Jersey Data Privacy Act and other state laws, even where the source is a public record. Some of these laws exclude public-record information; others treat it differently once combined or scored. We don't rely on those exclusions to deny anyone a choice. We treat every lead delivery as a sale for opt-out purposes.

We do not "share" personal information for cross-context behavioral advertising. We don't place ad-tracking cookies or pixels on our website, and we don't give lead data to ad networks.

We may be a "data broker." Some states define a data broker as a business that collects and sells personal information about people it has no direct relationship with. That can describe part of what we do. Where a state's law requires it, we register as a data broker before we deliver leads about that state's residents. Our current registrations: None yet. We don't currently deliver leads about residents of states with data-broker registries (California, Texas, Oregon, Vermont). We will register before we do.

California Delete Request and Opt-Out Platform (DROP). If you live in California, you can ask every registered data broker to delete your information at once through the California Privacy Protection Agency's DROP system. Once we are registered in California, we check DROP at least every 45 days and process every matching request, as California law requires.

Your opt-out choices (no account and no fee needed):

1. Opt out of sale and sharing: we stop delivering your information to clients in new leads, and we tell any client that already received it to stop using it.
2. Opt out of profiling: we stop scoring you.
3. Delete: see Section 11.
4. Suppress: we add a protected marker (for example a one-way scrambled "hash" of your address) to our suppression list so that you are not added back the next time a public record is pulled.

How: go to readyknock.com/do-not-sell ("Do Not Sell or Share My Personal Information"), or email privacy@readyknock.com with the subject "Opt out." Browser signals such as Global Privacy Control (GPC) are honored as described in Section 12.

5. New Jersey Daniel's Law

If you are a "covered person" under New Jersey's Daniel's Law (for example an active or retired judge, prosecutor, law enforcement officer or child protective investigator, or an eligible family member living with one), you, or an authorized person acting for you, may ask us not to disclose or re-disclose your home address or unpublished home telephone number.

• How: send a written notice to privacy@readyknock.com (subject "Daniel's Law request"), use the "Daniel's Law request" option at readyknock.com/do-not-sell, or mail us at the address above. Include the home address (and phone number, if any) to protect. We may ask for information to confirm the request is genuine, but we start protecting the address as soon as we receive the notice.
• What we do: within 10 business days of receiving the notice, we stop disclosing that address and phone number in any lead, report or Snapshot, add them to a platform-wide suppression list, and tell any client that received them to stop using them and delete them.
• We confirm in writing when it is done.
• These requests never expire unless you withdraw them.

PART B: Website visitors and business clients

6. What we collect

Our hosting and security providers may briefly process IP addresses and similar technical data to deliver web pages and block attacks. We don't use that data for analytics or advertising.

7. How we use it

• To give you a Market Snapshot, run a trial, set up and run your account, and deliver leads.
• To keep the Service secure (including two-step sign-in and fraud and abuse checks, such as one trial per company).
• To bill you and keep financial records.
• To answer questions and give support.
• To send service messages (for example renewal reminders, price-change notices and security alerts). These are not optional while you have an account.
• To send marketing emails only if you agreed to receive them. Every marketing email has an unsubscribe link, and we honor it within 10 business days.
• To improve the Service using aggregate, de-identified data.
• To enforce our Terms and follow the law.

We do not sell or share website visitor or client account information, and we don't use it for targeted advertising.

8. Data our clients give us (we act as their service provider)

When a client uploads or connects its own customer data, we process it only on that client's behalf and instructions, as its "processor" or "service provider" under a written Data Processing Addendum. The client controls that data. We don't sell it, share it, use it for anyone else, or combine it with other clients' data.

If you are a client's customer and want to use your privacy rights for that data, please contact that business. If you contact us, we will forward your request to the client within 5 business days and help it respond.

Sections for everyone

9. How long we keep information

10. Service providers (sub-processors) by category

We use service providers for: cloud hosting and databases (US data centers); file storage; email delivery; error monitoring; uptime monitoring; payment processing and billing; printing and mailing (only for client-ordered mail); email address verification; web search through official search APIs; AI language models (to draft "why now" reasons and first messages, only under terms that bar them from training on our data); and licensed data vendors. Each is bound by a contract that limits how it may use the data. A current list is available to clients on request and in our Data Processing Addendum.

11. Your privacy rights

Depending on where you live, state law may give you some or all of these rights. We offer all of them to everyone in the United States, whatever state you live in.

• Know and access: what personal information we hold about you, where it came from, why we use it, and the categories of businesses we gave it to; and a copy of it.
• Correct inaccurate information.
• Delete your information. We delete it and keep only a suppression marker so you aren't added back from a public source. We will also tell clients that received it to delete it.
• Opt out of sale, sharing, targeted advertising and profiling (Section 4).
• Limit use of sensitive personal information. We don't collect it, so there is nothing to limit.
• Portability: get your information in a usable format.
• List of recipients: in some states (for example Oregon and Minnesota), a list of the specific third parties or categories we disclosed your data to.
• Appeal a decision we made about your request (Section 13).
• No discrimination or retaliation for using any of these rights.

Which state laws. These rights come from laws including the California Consumer Privacy Act as amended by the CPRA, the New Jersey Data Privacy Act, and the comprehensive privacy laws of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky and Rhode Island, plus other states as their laws take effect. Some of these laws don't apply to information about people acting in a business or employment role. We still honor requests from business contacts.

How to make a request (free, no account needed):

• Online: readyknock.com/do-not-sell (choose opt out, access, correct, delete, or Daniel's Law), or
• Email: privacy@readyknock.com, or
• Mail: ReadyKnock, Privacy, 865 NJ 33 Business, Ste 3 #157, Freehold, NJ 07728.

Verification. For opt-outs, we don't need proof of identity, only enough detail to find your record (for example the property address). For access, correction and deletion, we confirm your identity by matching information you give us with what we hold, and may email a confirmation link. We use what you send only to handle and record your request.

Timing. We confirm receipt within 10 business days and respond within 45 days. If we need more time, we will tell you why, and may take up to 45 more days where the law allows. We act on opt-outs as soon as we can, and within 15 business days at most. Daniel's Law requests are handled within 10 business days (Section 5).

Authorized agents. Someone else (a person or a company you choose) may make a request for you. We ask the agent for your signed written permission (or a valid power of attorney), and for access, correction or deletion requests we may also ask you to confirm your identity directly with us. Parents and guardians may act for people in their care as the law allows.

12. Global Privacy Control and other browser signals

Our website treats a Global Privacy Control signal as a valid request to opt out of sale and sharing for that browser. Because our website stores no cookies or tracking identifiers, we can't link the signal to a person in our lead data on its own. If you also give us your name and address on our opt-out form while sending GPC, we apply the opt-out to your lead records too.

13. Appeals

If we deny your request in whole or in part, you can appeal by emailing privacy@readyknock.com with the subject "Appeal" within 60 days of our answer. We will respond in writing within 45 days (or the longer time a state's law allows) and explain our decision. If you are not satisfied, you can contact your state attorney general (or, in California, the California Privacy Protection Agency).

14. Security

We use reasonable safeguards for the kind of information we hold, including encryption in transit and at rest, separate walled-off workspaces for each client, row-level access controls, two-step sign-in for staff and workspace owners, logged staff access, least-privilege permissions, backups, and data minimization. No system is perfectly secure. If a breach affects your information, we will notify you and regulators as the law requires.

15. Children

ReadyKnock is a business service for adults. It is not directed to children under 18. We do not knowingly collect information about children. If you believe we have, email privacy@readyknock.com and we will delete it.

16. United States only

ReadyKnock is offered in the United States only. We store and process information in the United States. We do not target or knowingly collect information about people in the European Union, the United Kingdom or other countries.

17. Changes to this policy

We may update this policy. We will post the new version with a new version number and date, and keep older versions available on request. For material changes, we will email account holders at least 30 days before the change takes effect and post a notice on our website. We will not use personal information we already hold in a materially different way without notice and, where the law requires, your consent.

18. California-specific notices

• Notice at collection. The categories, sources, purposes and retention periods in Sections 1, 2, 6, 7 and 9 are our notice at collection. For Part A data, we collect the categories in Section 1 indirectly from the sources listed there; we disclose them to one client per lead (which may be a "sale") and to service providers. For Part B data, we disclose it only to service providers and do not sell or share it.
• Categories disclosed in the last 12 months: [MIKE TO UPDATE ON THE FIRST ANNUAL REVIEW: before ReadyKnock's first year of operation, write "Not applicable: we began operating on [LAUNCH DATE]."]
• Sensitive personal information: we do not collect it.
• Minors: we do not sell or share information of people we know are under 16.
• Request metrics. Each year by July 1, we publish here how many requests to know, delete, correct and opt out we received, complied with and denied in the previous year, and the average days to respond. [First report due July 1 of the year after ReadyKnock's first full calendar year of operation.]
• Shine the Light (Cal. Civ. Code § 1798.83). We do not share personal information with third parties for their own direct-marketing purposes in a way covered by this law, except as described in Part A, which you can stop at any time through the opt-out.

19. Contact us

Privacy questions and requests: privacy@readyknock.com Legal notices: legal@readyknock.com Mail: ReadyKnock, 865 NJ 33 Business, Ste 3 #157, Freehold, NJ 07728 Opt-out and request form: readyknock.com/do-not-sell

Version history: v1.0, effective [LAUNCH DATE]. Earlier drafts were never in force.