Privacy Policy
Effective Date & Last Updated: October 11, 2026
Operated by Mafikeng Digital Innovation Hub (Pty) Ltd ("LeadFlow", "LeadFlow Pro", "we", "our", or "us").
Platform Compliance Summary
This Privacy Policy explains how LeadFlow Pro collects, uses, shares, and protects personal data and platform information obtained through our software, including our integrations with Meta Platforms (Facebook & Instagram) and TikTok. If you are seeking instructions on deleting your data or revoking connected access, please jump to our Data Deletion & Revocation Instructions or visit our dedicated Data Deletion Page.
1. Introduction & Scope
LeadFlow Pro is a cloud-based lead management and customer relationship management (CRM) software that enables organizations and businesses to ingest, organize, qualify, score, and track inbound customer inquiries originating from digital advertising and social media channels.
This Privacy Policy applies to all users of our platform, visitors to our website (https://lead-flow-nine-eta.vercel.app), and prospective leads whose form submissions or inquiries are processed by our system on behalf of our business clients.
2. Information We Collect
Depending on how you interact with LeadFlow Pro, we collect personal information in several categories:
A. Account & Profile Information
When business operators register for an account, we collect names, company/workspace names, email addresses, encrypted passwords, phone numbers, and profile photos. When signing in using Google OAuth, we receive basic authentication tokens, user email addresses, and names strictly to verify identity and enable dashboard access.
B. Leads & Customer Inquiries
When end-users interact with advertising forms or contact touchpoints set up by our registered business clients, we collect information submitted in those forms. This may include full names, email addresses, phone numbers, location data, company names, budget interests, and answers to custom lead questionnaire fields.
C. System Usage & Analytics Data
Log data such as IP addresses, browser types, session timestamps, and dashboard feature engagement, gathered to ensure system security, error diagnosis, and optimal server performance.
3. Platform Integrations & Social API Data
LeadFlow Pro allows business clients to connect verified social platform channels via official OAuth 2.0 protocols. We only request permissions necessary to provide lead capture and marketing analytics:
Meta Platforms (Facebook & Instagram)
When connecting Facebook and Instagram through the Meta Graph API, our application receives:
- Page Information: Page ID, Page name, category, and access tokens needed to manage lead hooks.
- Facebook Lead Ads Data: Real-time webhook notifications and lead data (full name, email, phone number, and custom ad form fields submitted by prospective leads).
- Instagram Business Insights: Connected Instagram Business Account ID, account username, media engagement metrics (post/reel view counts, like counts, comments), and organic lead interactions.
Compliance Note: LeadFlow Pro adheres strictly to the Meta Platform Terms and Developer Policies. We never use Meta user data to build advertising profiles or conduct surveillance.
TikTok For Business & Login Kit
When integrating TikTok accounts via TikTok Open API and Login Kit, our service captures:
- TikTok Account Identity: Open ID, display name, avatar URL, and authorized scope tokens.
- TikTok Instant Form Leads: Inbound lead payloads delivered via TikTok Lead Generation webhooks (applicant contact details, campaign ID, ad creative ID).
Compliance Note: We process TikTok user information exclusively in accordance with the TikTok Commercial Terms of Service and TikTok Developer Terms.
Google Identity Services
Google OAuth 2.0 is used solely for identity authentication and dashboard login. We do not extract leads or advertising records from Google Workspace, and access is limited to verifying your authenticated email address.
4. How We Use Collected Data
We process data for the following legitimate business purposes:
- Lead Management & Pipeline Organization: Displaying, categorizing, tagging, and organizing inbound prospect data inside the client's authenticated workspace.
- Automated Notifications: Alerting sales representatives when a new lead submission occurs via Meta or TikTok webhooks.
- AI Lead Scoring with PII Sanitization: Evaluating lead quality using automated algorithmic rules and Google Gemini AI. Strict Privacy Guarantee: All Personally Identifiable Information (PII) including individual names, phone numbers, and email addresses is redacted and sanitized prior to submitting lead content to AI evaluation models.
- Performance Analytics: Providing aggregated metrics on marketing engagement (total views, conversions, response times) across connected platforms.
- Security & Abuse Prevention: Verifying HMAC webhook signatures (Meta SHA-256 and TikTok signatures) to ensure authentic data transmission.
5. Data Sharing & Third Parties
We do not sell, rent, lease, or trade personal data or lead information to third parties or data brokers under any circumstances.
We share information only with trusted service providers who assist in operating our platform:
- Cloud Database Hosting: Supabase PostgreSQL (managed database infrastructure with enterprise-grade encryption and Row Level Security).
- Application Hosting: Railway (backend execution environment) and Vercel (frontend deployment).
- AI Processing: Google Cloud / Gemini AI (exclusively for sanitized, non-PII lead text evaluation).
- Legal Obligations: When compelled by valid legal processes, court orders, or enforceable governmental requests.
6. Security & Data Protection
We implement robust technical and operational security safeguards:
- Token Encryption: All OAuth tokens, secrets, and integration credentials are encrypted at rest using industry-standard AES-256-GCM encryption.
- Row-Level Security (RLS): Our database employs database-enforced Row-Level Security policies ensuring strict multi-tenant isolation. No business user can view or access data belonging to another workspace.
- Transit Encryption: All communications between browsers, servers, and external APIs are enforced via HTTPS / TLS 1.3 encryption.
- Password Protection: Passwords are cryptographic hashes produced via bcrypt with high salt rounds.
7. Data Retention Policy
We retain personal data and lead records only for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by applicable laws (such as tax, accounting, or statutory audit requirements).
When a business workspace disconnects a platform or deletes their account, all associated OAuth tokens are immediately revoked and scheduled for permanent deletion from active database tables.
8. User Data Deletion & Access Revocation Instructions
In compliance with Meta Platform Policies and TikTok Developer Regulations, users have the right to request the deletion of their personal data or revoke application access at any time through any of the following methods:
Method A: Remove via Facebook / Meta Settings
- Log in to your Facebook account and navigate to Settings & Privacy > Settings.
- In the left sidebar, click on Business Integrations (or Apps and Websites).
- Find LeadFlow Pro in the list of active integrations.
- Click Remove and confirm. Facebook will immediately stop sending data to LeadFlow Pro.
Method B: Remove via TikTok App Settings
- Open the TikTok mobile app and go to your Profile.
- Tap the menu icon (three lines) and select Settings and privacy.
- Tap Security > Manage app permissions.
- Select LeadFlow Pro and tap Remove access.
Method C: In-Dashboard Disconnection
Authenticated workspace owners can navigate to Dashboard > Platforms, click on the connected card (Facebook, Instagram, or TikTok), and select Disconnect / Delete. This immediately purges the active credentials from our system.
Method D: Direct Data Deletion Request (Email or Phone)
You may also email our dedicated compliance team directly at privacy@leadflowpro.co.za or call +27 87 153 2141 with the subject line "Data Deletion Request". Please include your registered account email or Facebook/TikTok account identifier. We will process and permanently remove your records within 30 days and provide written confirmation.
For dedicated URL requirements in developer review forms, you can also reference our standalone Data Deletion Instructions Page.
9. Your Rights Under International Privacy Laws
We respect your privacy rights under applicable jurisdictions:
POPIA (South Africa)
In terms of the Protection of Personal Information Act 4 of 2013, data subjects have the right to request access to, correction of, or deletion of their personal information held by us, and to object to processing.
GDPR (European Union & UK)
Data subjects hold the right of access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, and the right to lodge a complaint with an official Data Protection Authority.
CCPA / CPRA (California)
California residents have the right to know what personal information is collected, request deletion, and opt out of the sale or sharing of personal data (we do not sell personal information).
10. Children's Privacy
LeadFlow Pro is a business software tool intended strictly for adult business operators and professionals. We do not knowingly collect or solicit personal information from individuals under the age of 18. If we become aware that personal data of a minor has been collected, we will take immediate steps to delete that data.
11. Changes to this Privacy Policy
We may periodically update this Privacy Policy to reflect changes in our operational practices, platform API updates from Meta or TikTok, or legal obligations. When updates occur, we will update the "Last Updated" timestamp at the top of this page. Continued use of our service after changes indicates acceptance of the revised policy.
12. Contact & Information Officer
If you have questions, feedback, or wish to exercise your rights under this Privacy Policy, please contact our Data Protection and Compliance team:
Organization: Mafikeng Digital Innovation Hub (Pty) Ltd
Product: LeadFlow Pro
Address: Mahikeng, North West Province, South Africa
Email: privacy@leadflowpro.co.za
Phone: +27 87 153 2141