Privacy Policy
Last updated: April 2026
1. Introduction
LeadFlow Legal ("we," "our," or "us") provides a marketing analytics and lead management platform designed for law firms and their marketing agencies. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
2. Information We Collect
2.1 Account Information
When you create an account, we collect your name, email address, organization name, and role. Agency administrators may also provide team member information.
2.2 Google Account Data
When you connect your Google account, we access data from the following services with your explicit consent:
- Google Analytics — Website traffic and user behavior data for your clients
- Google Search Console — Organic search performance and keyword rankings
- Google Ads — Campaign performance, spend data, and conversion metrics
- Google Business Profile — Local listing performance and visibility data
- Google Contacts — Contact names and email addresses for client relationship mapping
- Gmail (read-only) — Email metadata for agency-client communication tracking
- Google Sheets — Data import/export for reporting
- YouTube Analytics — Video performance data for client channels
We only access the specific data needed to provide our analytics and reporting services. We do not read email content — only metadata (sender, recipient, timestamps) is accessed.
2.3 Third-Party Integration Data
When you connect third-party services (CallRail, Lead Docket, Juvo, Intaker, etc.), we collect and process the data those services provide through their APIs, including call logs, lead information, case data, and marketing attribution data.
2.4 Usage Data
We automatically collect information about how you interact with the platform, including pages visited, features used, and performance data.
3. How We Use Your Information
We use the collected data to:
- Provide marketing analytics dashboards and ROI reporting
- Track and attribute leads to marketing sources
- Monitor website uptime and performance
- Generate competitive intelligence reports
- Send automated alerts (e.g., website downtime notifications)
- Improve and maintain our platform
- Communicate with you about your account
4. Data Storage and Security
Your data is stored securely using industry-standard encryption. API keys and OAuth tokens are encrypted at rest. We use Supabase (built on PostgreSQL) for data storage with row-level security policies. Integration credentials are stored per-client and are never shared between accounts.
5. Data Sharing
We do not sell, trade, or rent your personal information to third parties. We may share data with:
- Service providers — Infrastructure partners (hosting, database) who process data on our behalf
- Your agency/clients — Data is shared within your organization as configured by your account settings
- Legal requirements — If required by law, regulation, or legal process
6. Google API Services
Our use and transfer of information received from Google APIs adheres to theGoogle API Services User Data Policy, including the Limited Use requirements. Specifically:
- We only use Google data for the purposes described in this policy
- We do not use Google data for advertising purposes
- We do not transfer Google data to third parties except as necessary to provide the service
- We do not use Google data to develop or improve AI/ML models unrelated to the service
- Users can revoke access at any time through the platform or Google Account settings
7. Data Retention
We retain your data for as long as your account is active. Monitoring check data is automatically pruned after 30 days. When you delete your account or disconnect an integration, associated data is removed within 30 days.
8. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your account and associated data
- Disconnect any third-party integration at any time
- Revoke Google account access through your Google Account settings
- Export your data
9. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at:
Email: [email protected]
Address: LeadFlow Legal, Inc.