Privacy Policy

2. Information We Collect

We may collect the following categories of information:

• Account information — such as name, email address, and login credentials.
• Contact information — such as phone number.
• Business information — such as company name, role, and organization details.
• User-submitted information — any data you voluntarily provide through the platform.
• Technical and device data — such as IP address, browser type, operating system, and device identifiers.
• Usage and analytics data — such as pages viewed, features used, and interaction patterns.
• Integration-related data — information associated with third-party accounts you choose to connect.
• Lead and reporting data — data processed through the platform in connection with your use of dashboards, reports, and related functionality.

3. How We Use Information

We may use the information we collect to:

• Provide and operate the LC Flow platform.
• Authenticate users and manage access.
• Manage accounts, organizations, and user permissions.
• Support connected integrations authorized by users.
• Provide dashboards, reports, and related functionality.
• Improve reliability, performance, and security of the platform.
• Communicate with users regarding their accounts or the platform.
• Comply with applicable legal obligations.

4. Connected Accounts and Third-Party Services

Users may choose to connect third-party platforms to LC Flow, including Google Ads, Meta Ads, and other external providers. When you authorize a connection, LC Flow accesses only the data and permissions necessary to provide the platform functionality you have requested.

We do not access connected accounts beyond the scope authorized by the user. Third-party integrations may be managed or removed through available platform controls or by contacting support.

How LC Flow handles data received from Google is described in the next section.

5. Google User Data

If you choose to connect a Google Ads account, LC Flow requests access through Google's OAuth consent flow. Access is granted only after you explicitly authorize it, and only for the scope shown on the Google consent screen. You can decline, and LC Flow works without a Google connection.

What we access. When you connect Google Ads, LC Flow may access:

• Google Ads account information — the accounts your Google login can access, including account identifiers (customer IDs), account names, currency and manager-account relationships, so you can choose which account to connect.
• Google Ads reporting data — account-level performance data for the connected account, such as impressions, clicks, cost and conversions.
• OAuth credentials — the access and refresh tokens Google issues for the connection, together with the granted scope.

How we use it. LC Flow uses this data to connect your Google Ads account, to show advertising performance alongside your leads in dashboards and reports, and to help attribute leads and their recorded outcomes to the advertising that produced them. Where you enable conversion tracking for a connected account, LC Flow may also send eligible lead outcomes recorded in the platform — such as a lead being contacted, quoted or won — to Google Ads as conversion events. Each event contains the ad click identifier associated with the lead, the conversion action, the time of the outcome and, where configured, a value and currency. Nothing is sent to Google unless you have connected the account and enabled the feature.

Storage and security. OAuth tokens are encrypted at rest and are used only by LC Flow's servers to call Google's APIs on your behalf; they are never exposed in the browser. Connected-account identifiers and reporting data are stored within your workspace and protected by the safeguards described in the Data Storage and Security section.

Sharing. LC Flow does not sell Google user data, does not use it to serve advertisements, does not use it to build or train generalized artificial-intelligence or machine-learning models, and does not transfer it to third parties except to the infrastructure providers that host and operate the platform, where required by law, or as you direct through the features you have enabled. LC Flow personnel do not read Google user data except with your permission (for example, to resolve a support request you have raised), for security or abuse investigations, to comply with applicable law, or where the data has been aggregated for internal operations.

Disconnecting and deletion. You can disconnect a Google Ads account from the integration settings in your LC Flow workspace, which stops LC Flow from using the connection, and you can revoke LC Flow's access at any time from your Google Account permissions page. You may request deletion of stored Google connection data by contacting support@lcflow.app; retention otherwise follows the Data Retention section below.

LC Flow's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• Google API Services User Data Policy
• Manage third-party access in your Google Account

6. Data Sharing

LC Flow does not sell personal information. We do not use data obtained from Google APIs or Meta platform integrations for unrelated purposes, and we do not sell or transfer such data to third parties except as necessary to operate the features you have authorized.

We may share information only in the following circumstances:

• With infrastructure and technical service providers that help us operate the platform.
• With legal authorities when required by law, regulation, or valid legal process.
• With other parties specifically authorized by the user.

7. Data Storage and Security

LC Flow uses reasonable administrative, technical, and organizational safeguards to protect stored data and connected-account information. Authentication credentials and OAuth tokens associated with connected third-party accounts are encrypted at rest.

No method of electronic storage or transmission is completely secure. While we take reasonable measures to protect your information, we cannot guarantee absolute security.

8. Data Retention

We retain data only as long as reasonably necessary for platform operations, user support, legal compliance, dispute resolution, and other legitimate business purposes. When data is no longer needed, we take reasonable steps to delete or de-identify it.

9. User Rights

You may request access to, correction of, or deletion of certain personal information we hold about you. Such requests are subject to applicable legal and operational requirements.

To submit a request, please contact us at support@lcflow.app.

10. International Processing

Your data may be processed in countries where our service providers and infrastructure providers operate. These countries may have data protection laws that differ from those in your jurisdiction.

11. Changes to This Policy

LC Flow may update this Privacy Policy from time to time. When we make changes, we will update the effective date at the top of this page. The latest version of this Privacy Policy will always be available on this page.

12. Contact

If you have questions about this Privacy Policy or how your information is handled, please contact us at:

support@lcflow.app