Who we are and how to reach us
LeadFlow Web Studio is a U.S.-operated website and digital-growth business led by Eric Boston. For privacy questions or requests, email eric@leadflowwebstudio.com. This policy covers LeadFlow’s own operations; customer websites may have their own policies.
Information we collect
When you request a review or contact us, we collect the details you provide: name, business, email, phone, website, industry, goals, preferred contact method and correspondence. Please do not submit passwords, payment-card details, health information or other sensitive personal information through our review form.
We also research publicly available business information, such as business websites, service descriptions, business contact routes, local listings and reputation information. Authorized scouts may submit business-sign, vehicle or storefront photos and related notes through private Field Intake. Photos can incidentally contain personal information.
Our hosting providers process technical information such as IP addresses, browser/device information, requested pages, timestamps and security/error logs to deliver and protect the service.
For customer services, we keep approved business and billing contacts, orders, account/asset identifiers, authorized management permissions, subscription and payment status, invoices, and Terms acceptance evidence. Do not send full payment-card credentials, passwords or security codes through LeadFlow forms or messages. Terms acceptance records include the accepted version, effective date, immutable archive and content hash, checkout disclosure and consent/subscription timestamps. We also maintain onboarding evidence, permission changes and security/audit records for authorized administration and reconciliation.
How we use information
We use information to respond to requests, review a business’s digital presence, prepare recommendations and website concepts, discuss or deliver services, maintain records, improve operations and prevent abuse. Public business research may support a relevant business-to-business introduction; it is not permission to send marketing texts.
We may use AI-assisted services to analyze business images and public information or help prepare content and concepts. Outputs are reviewed; an AI inference is not treated as a verified business fact. The public review form is delivered to our business inbox, not automatically enrolled in an AI chat or messaging campaign.
Service providers and disclosures
We use Vercel for hosting and technical delivery; Resend and our email provider for correspondence; Supabase for operational data, authentication and private media storage; Twilio for authorized SMS/MMS intake; and OpenAI for AI-assisted business analysis and content/image preparation. Search and domain providers, including SerpAPI and Porkbun, may receive business search terms or proposed domain names for research. Not every provider receives every submission.
Providers process information needed for their function, subject to their terms and our arrangements. We may disclose information when required by law, to protect rights or security, or as part of a business transfer with applicable protections. We do not sell personal information or share it for cross-context behavioral advertising.
Stripe hosts secure payment entry and processes billing information under its Privacy Policy at https://stripe.com/privacy. LeadFlow receives customer, subscription, invoice, payment-status and limited payment-method information needed for billing and support, rather than collecting full card credentials through our own forms. Stripe may process technical interaction and fraud-prevention data under its own practices. Google processes Workspace and other selected Google-service information; we maintain authorized account/configuration and access records to manage your agreed services.
Mobile information and messaging
Mobile information, SMS/MMS opt-in data and consent records will not be sold, rented, or shared with third parties or affiliates for their marketing or promotional purposes. We may provide this information to service providers only as needed to operate messaging, comply with law or protect the service.
Submitting a phone number on our website does not subscribe you to marketing SMS. Our current Field Intake accepts voluntary inbound messages from authorized participants. See our SMS & Messaging Terms for the current program and choices.
A native Call or Text link on a customer website opens your device app addressed to that business. You decide whether to call or send. LeadFlow does not relay or automatically send that native message. The business, your device provider and carriers handle its contents under their respective practices. Avoid sensitive personal or financial information in text messages.
Cookies, browser storage and tracking
Public LeadFlow pages offer optional Google Analytics page-view measurement only after you choose Allow analytics. Declining keeps Google Analytics off. You can change your choice through Analytics preferences in the footer; withdrawing permission disables tracking and clears first-party Analytics cookies. We do not use advertising pixels or marketing cookies. Hosting and security systems may process necessary request data.
Analytics measures the page path and title. We exclude URL query parameters, referrer queries, contact-form details and text-message contents. Advertising storage, personalization and Google Signals are disabled. Google processes opted-in analytics data under its privacy and processing terms.
Private LeadFlow Admin routes use Vercel Analytics and Speed Insights for usage/performance measurement. Public Google Analytics is restricted to public website routes and is disabled on private Admin, customer Portal and payment routes. Private operator authentication uses necessary browser storage. Customer business websites have their own separately disclosed, consent-controlled analytics.
Retention and security
We keep inquiry and operational records for as long as reasonably needed for the request, business relationship, security, legal obligations or resolving disputes. We review retention needs and may keep limited suppression records to honor contact preferences. Backups and provider logs may persist for their normal retention periods after an active record is removed.
We use access controls, authenticated operator access and private storage for intake media. No system or transmission is completely secure, and we cannot guarantee absolute security.
Your choices and requests
You may request access, correction or deletion of information associated with you, or ask us to stop business outreach, by emailing eric@leadflowwebstudio.com. We may need to verify identity and may retain records where legally required or reasonably necessary. Applicable privacy rights depend on your location and the law; we will handle eligible requests accordingly.
You can decline to submit optional information. To stop email outreach, reply asking us not to contact you. We do not use cross-context advertising and do not discriminate against you for making a privacy request.
Other important information
Our services are directed to businesses and adults, not children under 13. We do not knowingly collect children’s personal information. Contact us if you believe a child has submitted information.
Information may be processed in the United States and other places where our providers operate. We may update this policy as practices change and will update the effective date. Material changes will receive any notice required by law.