Mobile app privacy

Your records and choices.

SHOPPED SHIPPED SAVED LLC provides the Top Lead Recovery mobile app. This page describes the native audit app and its optional owner-authorized features.

Local analysis

The app stores imported lead records, calculator values, readiness selections, lead decisions, message drafts and locally recorded outcomes on your device so your work remains available when you reopen the app. These records are not uploaded merely because you import or analyze them. Local analysis requires no account.

Owner access and CRM connections

Signing in to an existing workspace uses Supabase authentication and the account and workspace identifiers needed for access control. The saved session is held in the device secure store. Owner-authorized Jobber connection actions use the connected backend and Jobber to authorize and manage that business’s connection and reviewed imports.

Optional controlled email

If an authorized owner requests a server preview or live send, the app transmits the selected recipient names and email addresses, local record identifiers, sender and reply addresses, physical mailing address, subject and message, audience source, stated consent or relationship basis, and safety approvals needed for the campaign. Supabase handles authentication, workspace access, suppression, approval fingerprints, campaign records, delivery state and audit events. Resend processes recipient and sender details, message content, unsubscribe headers and delivery metadata to transmit and monitor the email.

Live email requires a verified sender, a batch of no more than 25 unique addresses, server suppression and recent-contact checks, and approval of the exact server fingerprint. Every email includes a no-login unsubscribe link and the sender’s physical mailing address. Campaign records may include accepted, delivered, delayed, opened, clicked, bounced, complained, failed, suppressed and unsubscribed events supplied by the provider.

Replies and human review

When reply capture is configured, Resend and Supabase process matched incoming email content and related sender, recipient, subject and message identifiers. Authorized workspace members can review that text in the Reply Command Center. Replies place the contact on hold. Saving a review or draft stores its classification, subject, message and related identifiers. Sending a response requires a separate preview and human approval.

Error reporting and technical records

If optional JavaScript error reporting is configured, the app can send a generic error event, event identifier, time and app release label to Sentry. The reporting code omits customer details and disables native crash reporting, performance traces, breadcrumbs and session recording. Hosting and service providers may process ordinary technical request records needed to deliver and secure their services.

How information is used

We use information to provide requested analysis and owner-approved campaigns, protect recipients through suppression and frequency controls, measure delivery, secure and operate our systems, prevent misuse, meet legal obligations and improve reliability. We do not sell customer or lead records or use them for third-party advertising. The native app does not scan an entire personal mailbox or use advertising identifiers, third-party ads, cross-app tracking or data brokers.

Support and feedback

Contacting support voluntarily shares the information you include through your email or telephone service. Include only the details needed to explain the problem. Avoid sending passwords, verification codes, payment details or customer records. An optional Google Play rating or review is handled by Google Play. No app records are attached automatically to support or review links.

Retention and deletion

Communications, campaign approvals, send attempts, delivery events and project records are retained only as reasonably needed for service delivery, security, deliverability, recordkeeping, disputes and legal obligations. Unsubscribe, complaint, invalid-address and hard-bounce suppressions may be retained to prevent unwanted or unsafe future sending. Contact us to review or delete eligible server information. Some suppression, financial, audit or legal records may need to be retained.

Select Reset my local entries on the Send screen to erase local imported leads, calculator values, decisions, drafts, outcomes and audit selections. Use Sign out separately to remove the saved account session. Reset and sign out before uninstalling; operating-system secure storage can remain after uninstalling. If reset reports an error, retry or contact support. A local reset or uninstall does not erase server campaign, connection, delivery, audit or suppression records.

Email choices and complaints

Recipients may use the unsubscribe link in a recovery email without signing in or reply to its monitored sender address. Unsubscribes, spam complaints, hard bounces and invalid-address suppressions block later controlled sends from that workspace. Questions or complaints may also be sent to the contact below.

Security and children

Workspace actions are access-controlled and audited. Provider credentials remain on the server. No internet transmission or storage system can be guaranteed completely secure. The app is a business utility for home-service contractors and is not directed to children.

Account deletion

In app version 2.1.1 and later, or in the browser app preview, open Account, then Account deletion, to request deletion of your account and associated personal data. Your private request shows a reference and estimated completion date, normally within 30 days. You do not need to email or call to initiate deletion. We keep your contact email while processing the request, send confirmation when complete, and clear that contact email from the request record.

The request does not immediately cancel a subscription, erase a shared business workspace or clear device-only entries. Billing and business ownership are reviewed during processing; required financial, security, consent and suppression records may be retained. Use Reset my local entries to clear device-only records.

Contact and updates

For older app versions, request account deletion by email below. Send questions to contact@topleadrecovery.com or call (978) 606-9208. If app data practices change, this information must be updated for the affected release.