Privacy Policy

This Privacy Policy explains how LeadFlow(“we”, “us”) collects, uses, and protects information when you use LeadFlow, a service that finds people who are hiring video editors and drafts personalised outreach for you to send yourself. By using LeadFlow, you agree to this policy.

1. Who we are

LeadFlow is operated from India. For any privacy question or request, contact us at tushar@getleadflow.co.

2. Information we collect

Information you give us

• Account details: your name, email address, and a securely hashed password.
• Settings and content you create: your targeting (niches, keywords, and a description of your ideal client), your positioning (offer line, portfolio link, and tone), and any drafts or templates you edit. If sending features are enabled for your account, this also includes your sending preferences and the physical mailing address used in email footers.
• Messages you send to us, such as feedback or support requests.

Free lead board and waitlist emails

If you unlock the free lead board, join the waitlist, or opt into the lead digest, we collect your email address to send you those emails, even if you never create an account. Every digest includes an unsubscribe link, and you can also email us at tushar@getleadflow.co to be removed.

Information from accounts you connect

If you choose to connect your Google account to send email (an optional feature, not currently enabled), we receive limited Google data. See section 4 for the full Gmail disclosure.

Lead information from public sources

To build your lead board, we collect information that people and businesses have made publicly available on the following sources: Reddit, YTJobs, YouTube. This can include a public post or job listing, a name or channel name, a public profile link, and, where a business email is publicly listed or returned by an enrichment provider, an email address. We use this only to surface relevant leads to you. See section 8 for how this affects the people we contact on your behalf.

Payment information

Payments are handled by Dodo Payments as our Merchant of Record. We do not collect or store your full card or bank details. We receive a record of your subscription status and the limited billing information needed to manage your account.

Usage and technical data

We collect basic technical data such as log records, error reports, and aggregate usage analytics to keep the service running and to improve it. We use essential cookies to keep you signed in; we do not use advertising cookies.

3. How we use information

• To provide, operate, and maintain the service.
• To find and score leads and to draft outreach that you send yourself.
• To process your subscription, send service notices, and respond to your requests.
• To secure the service, prevent abuse, and meet legal obligations.

To draft a message, we send the lead’s public post and the positioning you provide to Anthropic’s Claude API. Anthropic does not use this data to train its models. We do not sell your personal information, and we do not use Google user data to train generalised artificial intelligence or machine learning models.

4. Google user data and Limited Use

LeadFlow never reads your inbox, and today it does not send email on your behalf: you send every message yourself. If we enable the optional Gmail connection and you choose to connect, you authorise LeadFlowthrough Google’s secure OAuth flow and we request only the access we need:

• Send email on your behalf(the Gmail “send” scope). This lets us send your approved outreach from your address. We do not read, modify, delete, or download your inbox or any of your existing emails.
• Your basic Google account identity(the “openid” and “email” scopes). We use this only to show which Google account is connected and to send from the correct address.

Your Google authorisation tokens are stored encrypted and are used only to send the messages you approve. You can disconnect Gmail at any time from your settings, which revokes our access and deletes the stored tokens.

LeadFlow’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. How we share information

We share information only with the service providers (subprocessors) that help us run LeadFlow, and only as needed to provide the service. We require each of them to protect your information. We may also disclose information where required by law, or to protect the rights, safety, and property of LeadFlow, our users, or others.

6. International data transfers

We are based in India and several of our providers are located in other countries, including the United States and the European Union. Where information is transferred across borders, we rely on the protections offered by those providers and on appropriate safeguards where required by law.

7. Data retention and security

We keep your account information and content for as long as your account is active. After you close your account, we delete or anonymise your personal information within 30 days, except where we must keep records to meet legal, tax, or accounting obligations.

We protect your information with industry standard measures. Sensitive credentials, such as connected email tokens and any API keys, are encrypted at rest using AES-256-GCM encryption. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Leads and the people you contact

LeadFlow processes the publicly available information of people and businesses who may be hiring video editors so that you can reach out to them. Our lawful basis for this is our and your legitimate interest in connecting editors with relevant clients, using information that is already public.

When you send outreach, you act as the sender of that message and are responsible for its content and for complying with applicable anti-spam and data protection laws. Any person we hold information about can ask us to access or delete that information by contacting tushar@getleadflow.co. Emails we send ourselves, such as the lead digest, always include an unsubscribe link.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. These rights are recognised under laws such as the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and India’s Digital Personal Data Protection Act (DPDP). To exercise any right, email tushar@getleadflow.co. We will respond within the time required by applicable law.

10. Children

LeadFlow is not intended for anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above and, for significant changes, give notice through the service or by email.

12. Contact us

Questions about this policy or your information? Email tushar@getleadflow.co.