Privacy Notice

Mohammed Awal, trading as LeadFlows CRM ("LeadFlows CRM", "we", "us"), provides the LeadFlows CRM software at leadflowscrm.com. We are the data controller for the personal data described below, which means we decide how and why it is used. For the customer records that a business stores in its own workspace, that business is the controller and we act as its processor.

What we collect and why

• Account details — name, email address, phone number, business name, role and login credentials. Used to create and secure your account and provide the service. Legal basis: performance of our contract with you.
• Workspace content — the leads, appointments, notes, tasks and text message conversations you create, including your customers' names and phone numbers. Used to provide the service on your instructions. Legal basis: performance of our contract.
• Support messages — what you send us by email or in the app. Used to answer you. Legal basis: performance of our contract and our legitimate interest in supporting customers.
• Usage and technical data — device and browser information, IP address, pages viewed, error reports and message delivery logs. Used for security, fraud prevention, troubleshooting and improving the product. Legal basis: legitimate interests.
• Marketing preferences — if you opt in to product emails. Legal basis: consent, which you can withdraw at any time.

Card and billing details are collected and processed by our Merchant of Record, Paddle, not by us.

Who we share data with

• Service providers — hosting and database infrastructure, email delivery, text message delivery through telecommunications carriers, and error monitoring, each acting on our instructions.
• Paddle, our Merchant of Record, for the sale of our product, subscription management, payments, tax compliance and invoicing.
• Professional advisers — legal and accounting, where necessary.
• Authorities — where we are required to by law.

We do not sell personal data.

International transfers

Our providers may process data outside your country, including in Canada, the United States and the European Economic Area. Where required, transfers are protected by appropriate safeguards such as standard contractual clauses or an adequacy decision.

How long we keep it

Account and workspace data is kept while your account is active and for a reasonable period afterwards so you can reactivate or export it, then deleted or anonymised. Billing records are kept as long as tax and accounting law requires. Message delivery logs are kept for a limited period for troubleshooting and dispute handling.

Your rights

Subject to the law that applies to you, you can request access to your personal data, ask us to correct or delete it, ask us to restrict or stop certain uses, object to processing based on legitimate interests, request a copy in a portable format, and withdraw consent where we rely on it. Email leadflowscrm@gmail.com and we will respond within one month. You may also complain to your data protection authority — in Canada, the Office of the Privacy Commissioner.

Security

We use appropriate technical and organisational measures, including encryption in transit, access controls, per-business data separation and audited administrative access.

Cookies

We use essential cookies and similar local storage to keep you signed in and to keep the app secure; without them the service cannot work. We do not use advertising cookies. You can clear or block cookies in your browser, but signing in will then not work.

Contact

LeadFlowsCRM — leadflowscrm@gmail.com