Privacy Policy

How National Lien & Bond LLC collects, uses, shares, and protects your information when you use the National Lien & Bond platform.

This Privacy Policy explains how National Lien & Bond LLC ("Company," "we," "us," or "our") collects, uses, shares, and protects personal information when you access or use the National Lien & Bond platform at app.mechanicliens.com (the "Platform"). It applies to users of the Platform and to visitors of our public marketing pages.

1. Information We Collect

a. Information you provide

• Account information. Name, email address, phone numbers, job title, company name, company address, and other details you provide during sign-up or in your profile.
• Project information. Project addresses, contract amounts, dates of work, lien-relevant deadlines, party names and contact details, invoices, change orders, payment history, notes, and any documents you upload (contracts, invoices, waivers, photos, correspondence).
• Communications. Help requests, action requests (Serve Notice, File Lien, File Lawsuit), and any other messages you send through the Platform.
• Terms acceptance records. When you accept our Terms and Conditions, we record the version of the Terms shown, a cryptographic hash of the document text, the time of acceptance, your IP address, your browser user agent, and the context of acceptance (sign-up vs. re-acceptance). This record is kept as a durable evidentiary log.

b. Information we collect automatically

• Technical data. IP address, browser type and version, operating system, device type, screen resolution, time zone, language, and referring URL.
• Usage data. Pages visited, features used, timestamps, and other interaction events necessary to operate and improve the Platform.
• Cookies and similar technologies. Session cookies for authentication and local storage for user preferences and offline cache. We do not use third-party advertising or behavioral-tracking cookies.
• Error and performance telemetry. When the Platform encounters a server-side error or slow request, we capture the error message, stack trace, the URL that triggered it, your IP address and user agent, and (where available) your account ID. This is used solely to diagnose and fix defects. Telemetry is processed by Sentry (see §3.a) and retained per our incident-response policy.

c. Information from third parties

• Property data. When you look up a property, we fetch records from third-party data providers including ATTOM Data Solutions (owner of record, parcel number, mailing address, year built, assessed value) and Mapbox (geocoding and address autocomplete).
• Authentication. Identity attributes (such as your email, name, and authentication events) from Clerk, our authentication provider.
• Payment processing. Transaction identifiers, amounts, and product references from Stripe. We do not collect, store, or have access to your full payment card number. Stripe handles card data under its own privacy policy.

2. How We Use Information

We use the information described above to:

• Provide, operate, and maintain the Platform, including project tracking, deadline calculations, document automation, and reminders.
• Process subscription payments and project-credit purchases through Stripe.
• Send transactional emails (deadline reminders, action confirmations, sign-up notifications, help responses) through Resend.
• Authenticate users and protect accounts through Clerk.
• Respond to your inquiries, requests for legal services, and support questions.
• Detect, prevent, and address fraud, abuse, or security incidents.
• Improve the Platform through aggregated, anonymized usage analysis.
• Comply with applicable law, legal process, and enforce our Terms.

3. How We Share Information

We do not sell your personal information. We do not share your personal information with third parties for their own marketing or advertising.

We share personal information only as described below.

a. Service providers (sub-processors)

We share information with vendors who help us operate the Platform. Each is bound to use the information only to provide services to us:

b. Legal compliance and protection

We may disclose information when we believe in good faith that disclosure is required to (i) comply with a subpoena, court order, or other legal process; (ii) enforce our Terms; (iii) protect the rights, property, or safety of National Lien & Bond LLC, our users, or others; or (iv) investigate fraud or security incidents.

c. Business transfers

If we are involved in a merger, acquisition, financing, reorganization, or sale of all or substantially all of our assets, personal information may be transferred as part of the transaction. We will notify you and give you choices to the extent required by applicable law.

d. With your consent

We may share information for other purposes with your consent.

4. Cookies and Local Storage

We use cookies and local storage for the following purposes:

• Authentication. Clerk sets cookies to maintain your signed-in session.
• Preferences. We store user preferences (e.g., sidebar collapse, recent project filters) in your browser's local storage so the Platform remembers your choices.
• Offline cache. Limited project data may be cached locally so the Platform loads quickly on return visits.

We do not use third-party advertising cookies, cross-site tracking pixels, or behavioral-advertising fingerprinting. You can clear cookies and local storage at any time through your browser settings; doing so will sign you out and may reset your preferences.

5. Data Retention

• Account information. Retained while your account is active and for a reasonable period after closure to satisfy legal, accounting, and dispute-resolution requirements.
• Project data. Retained while the project is active in your account. When you delete a project it is moved to a "Deleted Projects" holding area for sixty (60) days; after that period the project and all associated data (contacts, notes, invoices, uploaded documents) are permanently purged and cannot be recovered.
• Terms acceptance records. Retained indefinitely as a legal record. These records are an audit log of your affirmative acceptance of our Terms and are required for our defense in any dispute about consent.
• Backups. Encrypted backups are retained on a rolling schedule and are eventually overwritten.

6. Your Rights and Choices

Depending on where you live, you may have the following rights with respect to your personal information.

a. All users

• Access. Request a copy of the personal information we hold about you.
• Correction. Update inaccurate information through your profile or by contacting us.
• Deletion. Self-service via your Workspace → Delete account button (signed in), or by contacting us. Self-service deletion hard-deletes all your projects, contacts, profile, uploaded documents, and credentials. Some information (such as Terms acceptance records and required financial records) may be retained where law permits or requires.
• Portability. Request an export of your project data in a structured, machine-readable format.

b. California residents (CCPA / CPRA)

If you are a California resident, you have the following additional rights:

• Right to know what personal information we have collected about you, the sources, the purposes for collection, and the categories of third parties with whom we shared it.
• Right to delete personal information we have collected, subject to legal exceptions.
• Right to correct inaccurate personal information.
• Right to opt out of "sale" or "sharing" of personal information. We do not sell or share your personal information for cross-context behavioral advertising.
• Right to limit use of sensitive personal information. We do not use sensitive personal information for any purpose beyond providing the Platform.
• Right to non-discrimination for exercising these rights.

c. Virginia, Colorado, Connecticut, Utah, and similar state residents

You have rights analogous to the California rights above, including access, deletion, correction, and portability, and the right to opt out of targeted advertising and the sale of personal data (neither of which we engage in).

d. How to exercise your rights

To exercise any of these rights, contact us at [email protected] with your name, account email, and a description of your request. We will verify your identity through your account email before acting on the request. We will respond within the time required by applicable law (generally 45 days for U.S. state-law requests). You may authorize an agent to make a request on your behalf with reasonable proof of authorization.

7. Security

We use industry-standard administrative, technical, and organizational measures to protect personal information, including:

• Transport-layer encryption (HTTPS / TLS) for all data in transit between your device and the Platform.
• Encryption at rest for database storage at our hosting providers.
• Row-level security policies and a service-role-gated server layer so that the database is never directly accessible from the browser.
• Authentication and session management through Clerk with multi-factor authentication available.
• Limited internal access on a need-to-know basis.

No security system is perfect. We cannot guarantee that unauthorized access, hardware failure, or other events will never occur. You are responsible for keeping your login credentials confidential. If you suspect unauthorized access to your account, contact us at [email protected] immediately.

8. Children

The Platform is intended for use by businesses and is not directed to individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact us and we will delete it.

9. International Users

The Platform is operated from the United States. If you access the Platform from outside the United States, your information will be transferred to, stored, and processed in the United States. By using the Platform you consent to that transfer. The Platform is not currently targeted to users outside the United States and is not designed to comply with the EU/UK GDPR for European data subjects; users outside the United States access the Platform at their own discretion.

10. Third-Party Links

The Platform may contain links to third-party websites or services. Those third parties have their own privacy practices. We are not responsible for their content or practices, and this Privacy Policy does not apply to them.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Effective Date" at the top reflects the most recent revision. For material changes, we will provide notice by email or in-app notification before the change takes effect. Your continued use of the Platform after a change becomes effective constitutes acceptance of the revised Policy, except where additional consent is required by law.

12. Contact Us

Questions or concerns about this Privacy Policy, or requests to exercise your rights, may be directed to:

National Lien & Bond LLC
PO Box 2011, Northbrook, IL 60062
Email: [email protected]
Phone: (800) 432-7799