Privacy Policy

1. Introduction

UpGo Web AI Agency ("we", "our", "us") operates LeadFlow AI. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using LeadFlow AI, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Personal Information You Provide

Data Type	Purpose	Required?
Email address	Account creation, notifications, support	Yes
Payment information	Billing (processed by Stripe)	Yes (paid plans)
Company name	Personalization, reporting	No
Phone number	Support, urgent notifications	No
Lead preferences	Keyword targeting, industry filters	Yes

2.2 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent, clicks
• Device Information: Browser type, operating system, IP address
• Cookies: Session cookies for authentication, analytics cookies for improvement
• Lead Interactions: Which leads you viewed, contacted, or marked as irrelevant

2.3 Third-Party Data

We collect publicly available data from platforms like Reddit, LinkedIn, and Twitter. This data is:

• Already publicly accessible (not private or scraped)
• Obtained through official APIs or public RSS feeds
• Used solely to identify business opportunities matching your criteria
• Not stored permanently (only leads matching your filters are saved)

3. How We Use Your Information

3.1 Service Delivery

• Monitor platforms for leads matching your criteria
• Score and rank leads based on AI algorithms
• Send real-time notifications of high-quality opportunities
• Provide response templates and engagement suggestions

3.2 Account Management

• Create and maintain your account
• Process payments and send billing notifications
• Provide customer support
• Send important service updates

3.3 Service Improvement

• Analyze usage patterns to improve features
• Train AI models for better lead scoring
• Debug technical issues
• Develop new features based on user behavior

3.4 Marketing (with consent)

• Send product updates and tips (you can unsubscribe)
• Share case studies and success stories (anonymized)
• Offer promotions for beta customers

4. How We Share Your Information

4.1 Service Providers

We share data with trusted third parties who help us operate:

• Stripe: Payment processing (PCI-DSS compliant)
• AWS: Cloud hosting and data storage
• SendGrid: Email delivery
• Slack: Customer support and notifications (Agency tier)

4.2 Legal Requirements

We may disclose information if required by law, court order, or to:

• Comply with legal obligations
• Protect our rights, property, or safety
• Prevent fraud or abuse
• Cooperate with law enforcement

4.3 Business Transfers

In the event of a merger, acquisition, or sale, your information may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.

4.4 Aggregated Data

We may share anonymized, aggregated statistics (e.g., "LeadFlow AI users see an average of 25 leads/week"). This data cannot identify you personally.

5. Data Security

5.1 Security Measures

• Encryption: TLS/SSL for data in transit, AES-256 for data at rest
• Access Controls: Role-based permissions, multi-factor authentication
• Regular Audits: Quarterly security reviews and penetration testing
• Secure Infrastructure: AWS with SOC 2 Type II compliance

5.2 Your Responsibility

• Keep your password secure (use a password manager)
• Enable two-factor authentication (2FA)
• Report suspicious activity immediately
• Log out from shared devices

6. Your Privacy Rights

6.1 Access and Portability

You have the right to:

• View all data we have about you
• Export your data in JSON or CSV format
• Request a copy of your lead history

6.2 Correction and Update

You can update your information anytime through account settings or by contacting support.

6.3 Deletion ("Right to be Forgotten")

You can request account deletion anytime. We will:

• Delete your personal information within 30 days
• Retain anonymized analytics for up to 90 days
• Keep financial records for 7 years (legal requirement)

6.4 Opt-Out of Marketing

• Click "Unsubscribe" in any marketing email
• Adjust notification preferences in account settings
• Email us at banmart@gmail.com

6.5 California Residents (CCPA)

California users have additional rights:

• Know what personal information is collected
• Know if we sell or share data (we don't)
• Request deletion of personal information
• Opt-out of data sales (not applicable - we don't sell data)
• Non-discrimination for exercising rights

6.6 EU Residents (GDPR)

EU users have rights under GDPR:

• Right to access
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right to data portability
• Right to object
• Rights related to automated decision-making

7. Data Retention

Data Type	Retention Period	Reason
Account information	Until deletion requested	Service delivery
Payment records	7 years	Legal requirement
Lead data	90 days	User access, analysis
Usage analytics	2 years (anonymized)	Service improvement
Support tickets	3 years	Quality assurance

8. Cookies and Tracking

8.1 Types of Cookies

• Essential: Authentication, security (cannot be disabled)
• Analytics: Google Analytics, usage tracking (can opt-out)
• Preferences: Language, timezone, UI settings

8.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling essential cookies may break core functionality.

9. Third-Party Links

LeadFlow AI may contain links to third-party websites (Reddit, LinkedIn, etc.). We are not responsible for their privacy practices. Review their privacy policies before providing information.

10. Children's Privacy

LeadFlow AI is not intended for users under 18. We do not knowingly collect information from children. If you believe we have data from a minor, contact us immediately for deletion.

11. International Data Transfers

Your data may be transferred to and processed in the United States or other countries. We use:

• Standard Contractual Clauses (SCCs) for EU data
• Adequacy decisions where applicable
• Privacy Shield principles (where still valid)

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Material changes will be communicated via email.

Continued use after changes constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related questions, requests, or concerns:

UpGo Web AI Agency
Email: banmart@gmail.com
Website: leadsflowbot.com

Data Protection Officer: Steve Martin (banmart@gmail.com)

Response Time: We respond to privacy requests within 30 days (GDPR/CCPA requirement).

14. Compliance

LeadFlow AI complies with:

• General Data Protection Regulation (GDPR) - EU
• California Consumer Privacy Act (CCPA) - California, USA
• CAN-SPAM Act - Email marketing
• PCI-DSS - Payment card data (via Stripe)

← Back to LeadFlow AI