This policy is published by Praxion agentic CRM solutions, the company behind Praxion Exterior Edition™, a business of James Donsing in the United States. It covers the homeowners whose jobs the app helps manage, the sales representatives who use it, and visitors to this site's public pages. There is one contact for everything in it: [email protected].
Mobile information is never shared. No mobile information, phone number, or SMS opt-in consent will be sold, rented, or shared with any third parties or affiliates for marketing or promotional purposes. Information obtained as part of the SMS consent process is not shared with third parties.
We're not here to harvest data. We're here to help people make more money and make everybody's job easier, smoother, and keep the company growing like it always has.
A note from the founder. Praxion Exterior Edition™ was built by a rep who worked in the field — someone who knows the ins and outs of Leaf Home and LeafFilter, and the struggles that everyday reps, management and install departments deal with. He wanted nothing more than smooth, clean business. Happy customers, happy reps, happy Leaf Home.
Praxion Exterior Edition™ is software published by Praxion agentic CRM solutions. Praxion agentic CRM solutions is not LeafFilter or Leaf Home, and is not owned, operated, sponsored or endorsed by Leaf Home, LeafFilter, or any of their parent companies, subsidiaries or affiliates. LeafFilter® and LeafHome® are trademarks of their respective owners and are named here only to identify the product sold. This policy covers information handled by Praxion agentic CRM solutions only; Leaf Home's own handling of your information is governed by its own privacy policy.
To quote, schedule, install and service your gutter protection, to communicate with you about your own job, and to help your representative get the paperwork right. We do not use it for advertising.
Most customer messages are drafts a representative approves first. These
are sent automatically, and only when they are switched on: an install-day
reminder and a “crew on the way” note (each representative's own
choice, by email or text), your cover sheet by email once it is filed, and a
thank-you email with a review request after your installation is complete and
paid, with a one-year check-in, and review requests at set points after the
sale where the office has switched them on. Customer emails are sent between 7 AM and
9 PM Central. Reply STOP to any text, or email us, to stop
messages.
Only the parties needed to complete your job — the installation crew and the LeafFilter order and warranty systems your sales representative submits your order through — and the service providers listed below, which handle it only to run the app. It is not sold. It is not shared for anyone else's marketing. Mobile numbers and SMS consent are excluded from all sharing.
Sales scoreboards posted to the representatives' own team chats show the representative's first name and last initial, the product line, the amount and sometimes the city. They never include your name, phone, email, street address or job number.
Rankings, the office job board and team scoreboards show other reps your sales counts and amounts and job status. They never show your commission, credentials or pay statements.
Some features send the specific content they work on to third-party AI processing services, which return the result to the app: for example a customer's email to draft a reply, a photo of a paperwork sheet or of the house to read it, or a presentation transcript to grade it. We send only what that feature needs, and use the result only to provide it.
Voice dictation and voice search use your browser's built-in speech recognition. In some browsers (Chrome, for example) the audio is sent to the browser maker's servers to be turned into text; the app receives only the text. If you'd rather not, type instead.
Sharing graded presentation transcripts with the shared Sale Coach model is opt-in, and you can switch it off at any time in Settings.
These providers handle information only to run the app, each under its own terms:
We may also disclose information if the law requires it, to protect our rights or someone's safety, or as part of a sale or reorganization of the business, in which case this policy continues to apply.
The app keeps your sign-in tokens and display preferences in your browser's own storage on your device, not in advertising cookies. Signing out removes the tokens. The app uses no advertising or cross-site tracking cookies and no third-party analytics scripts. Our network provider may set a strictly necessary security cookie. The sign-in page loads its typefaces from Google Fonts, which receives your IP address and browser details.
Public pages: the Features page counts unique visitors. It stores a one-way SHA-256 hash of your IP address, not the address itself, with an approximate location (country, state, city). The location comes from our network provider; if it isn't available, your IP address is sent once to an IP-location service to look it up.
This is exactly what the app does today, in plain English.
Your Praxion Exterior Edition™ password is never stored. Only a bcrypt hash of it is kept — a one-way scramble mixed with its own random salt. When you sign in, the app hashes what you type and compares the two. No one, including the app's administrator, can turn the hash back into your password; a reset simply replaces it. Once you are signed in, your device carries a signed sign-in token that expires after one hour and renews with a refresh token that lasts up to 30 days.
Passwords, API keys and access tokens for the accounts you connect — your email app password, your Leaf Home Rewards login, your Salesforce session tokens, and CompanyCam, HOVER, EagleView, Twilio and ad-account tokens — are encrypted at rest with Fernet: AES-128-CBC encryption plus an HMAC-SHA256 seal, so a stored value that has been altered is rejected instead of decrypted. The key is a server-held key. A secret is decrypted in memory only at the moment the app uses it for your work, and Settings only ever shows whether an account is connected, never the secret itself.
Salesforce connects through a sign-in you approve on your own phone, and each rep's session is kept in its own separate browser profile on the server, so two reps' sessions can never cross. If the company sign-in ever asks for your password, you type it on your own device; it is held in memory for that one sign-in only (five minutes at most), used once, and wiped. It is never written to disk or to the database.
Your customers, notes, quotes, commission and connected accounts are stored against your own rep account. Every request carries your signed sign-in token; the server reads which rep you are from it and returns that rep's records, so another rep who signs in sees their own book, not yours. Salesforce data comes in through your own connection and covers only what your own Salesforce access already shows you. Shared team views, such as the office job board, show job status only — never anyone's credentials or commission. Read-only quote links sent to homeowners, and shared board links, are stored only as a SHA-256 hash, so a copy of the database would not hand anyone a working link.
Every page and request travels over HTTPS (TLS) through an encrypted tunnel, and the server turns away traffic that did not arrive through it.
Passwords, keys and tokens are hashed or encrypted as described above. Customer job records (names, addresses, job details), photos and pay records are kept in the app's database and folders on a private server in the United States; they are not encrypted field by field the way secrets are, and are protected by the sign-in, the per-rep scoping and HTTPS described above. No Internet-facing system is perfectly secure, and we will not pretend otherwise. If a breach affects your personal information, we will tell you as the law requires.
For as long as needed to service your job and honour your warranty, or until you ask us to delete it. Rep accounts are kept while they are in use; when a rep asks us to delete an account, it is removed from the live database within 30 days.
App pages are sent with no-store headers, so browsers do not cache them. The database is backed up nightly on the server, and old backup copies rotate out automatically (the most recent 14 nightly and 8 weekly copies are kept), so deleted information leaves the backups within about two months. If cloud backup is switched on, a copy is also kept in a Google Cloud Storage bucket we control. Street-level and satellite photos of a service address are saved on the server the first time they load, so the same house is not fetched again.
STOP to any text to end SMS at any timeWe will confirm a request comes from you, usually by replying to the email or phone number we have on file, and answer within 45 days. We won't treat you differently for asking. Records Leaf Home holds in its own systems are governed by Leaf Home's policy, and some records may have to be kept where the law requires it; we will tell you if that applies.
Residents of California and several other states have rights under state privacy laws, including the right to know, access, correct and delete personal information, and to opt out of its “sale” or “sharing” for targeted advertising. We do not sell or share personal information as those laws define it, and have not in the past 12 months, so there is nothing to opt out of. You can use your rights by email or through an authorized agent, and appeal a decision by replying to our answer.
The app is for sales professionals and the homeowners they serve. It is not directed to children under 16, and we do not knowingly collect their information. If you believe a child's information was entered, email us and we will delete it.
If we change how we handle information we will update this page and its “Last updated” date, and tell reps about significant changes in the app before they take effect.
The only contact for this policy, privacy requests and customer service is email: [email protected]. Our other sites have their own policies: Praxion and Praxis EaveDrop.