Privacy policy

This route exists so the lead form's consent text has a real destination and so the URL is in the sitemap from day one. The policy text itself is legal copy and must come from the client, not from the build.

It needs to cover, at minimum: what the lead form collects, the attribution and session data captured on arrival, the IP-based city and postcode lookup performed server-side, the third parties data is shared with (GoHighLevel, Google Sheets, Slack), retention, and the rights California residents have under the CCPA/CPRA.

Placeholder — replace before launch.