Privacy Policy

1. About this policy

This Privacy Policy explains how LeadFlow collects, uses, stores, and shares personal information when you visit the LeadFlow website or submit the early-access form.

LeadFlow is an early-stage product concept operated by Rivka Goldshtein, a sole proprietor (“LeadFlow,” “we,” “us,” or “our”).

For privacy questions or requests, contact:

privacy@useleadflow.app

2. Information we collect

Information you provide

When you submit the early-access form, we may collect:

• your name;
• business name;
• business type;
• email address;
• optional phone or WhatsApp number;
• preferred messaging channel;
• information included in any free-text message; and
• any other information you voluntarily submit.

Please do not include sensitive personal information in the free-text field.

Website and analytics information

When analytics is enabled with your permission, Google Analytics may collect information such as:

• pages viewed and interactions with the website;
• browser and device information;
• approximate location derived from technical information;
• referral source;
• session and usage information; and
• technical identifiers associated with analytics cookies.

We do not currently use the website to process payments, create user accounts, or provide the LeadFlow product itself.

3. How we use information

We use submitted information to:

• evaluate interest in LeadFlow;
• review and validate the product concept;
• respond to questions;
• contact you about your early-access request;
• improve the website and proposed product; and
• maintain the security and reliability of the website.

We use analytics information to understand website usage and improve the website.

We do not sell personal information.

We do not use early-access submissions for unrelated newsletters or promotional campaigns unless we later ask for separate permission where required.

4. Legal bases

Where the GDPR, UK GDPR, or similar laws apply, we rely on the following legal bases:

• Consent: for optional analytics cookies and similar technologies.
• Steps requested by you and legitimate interests: to receive, review, and respond to an early-access submission, evaluate interest in the proposed product, maintain the website, and prevent abuse.
• Legal obligations: where processing is necessary to comply with applicable law.

You may withdraw analytics consent at any time through the website’s privacy or cookie settings. Withdrawal does not affect processing that occurred before withdrawal.

5. Cookies and similar technologies

The website uses necessary storage to remember your privacy choice.

Google Analytics is optional. Analytics must not load or store analytics identifiers until you select Accept analytics.

If you select Decline, Google Analytics must remain disabled. You can change your choice later using the Privacy settings link in the website footer.

The analytics cookies that may be used after consent include cookies such as `_ga` and a property-specific `_ga_*` cookie. Cookie names and durations may change when Google changes its services.

6. Service providers

We currently use the following providers:

• Netlify: website hosting, deployment, and form processing. Form submissions are stored in Netlify’s systems and may be forwarded by email.
• Google Analytics / Google Tag: optional website analytics, only after analytics consent.
• Google Fonts: delivery of website fonts from Google-hosted domains.

These providers may process technical or submitted information on our behalf or under their own applicable terms and privacy policies.

7. International data transfers

Our service providers may process information in countries other than the country where you live. Where required, providers may rely on legal transfer mechanisms and safeguards recognized under applicable data-protection law.

8. Data retention

Early-access submissions are retained for up to 12 months from the date of submission, unless:

• the information is no longer needed and is deleted earlier;
• you request deletion;
• a longer period is required by law; or
• limited information must be retained to establish, exercise, or defend legal claims.

Analytics information is retained according to the settings configured in Google Analytics and applicable provider controls.

9. Your rights

Depending on where you live, you may have rights to:

• request access to personal information;
• request correction;
• request deletion;
• object to or restrict certain processing;
• withdraw consent;
• request a portable copy of certain information; and
• complain to a competent data-protection authority.

To exercise a privacy right, email privacy@useleadflow.app. We may need to verify your identity before completing a request.

10. Security

We use reasonable technical and organizational measures designed to protect information. However, no website, transmission method, or storage system can be guaranteed to be completely secure.

11. Children

The website is intended for business users and is not directed to children. We do not knowingly collect personal information from children.

12. Third-party links

The website may contain links to third-party websites. Their privacy practices are governed by their own policies, not this Privacy Policy.

13. Changes to this policy

We may update this Privacy Policy when the website, providers, or legal requirements change. The updated version will be posted on this page with a revised effective date.