Privacy Policy

This Privacy Policy applies to the public website, trial and paid LeadFlow workspaces, product support, sales communications, and related services operated by JMB Business Solutions (“JMB,” “we,” “us,” or “our”).

For account, website, sales, billing, and direct support information, JMB generally determines why and how the information is processed. For personal information a business customer places in its CRM workspace about its own prospects, customers, employees, contractors, or vendors, that business customer generally controls the information and JMB processes it to provide the service.

If your information appears in a Customer’s LeadFlow workspace, direct requests about that business record to the Customer first. We will reasonably support the Customer in responding where required.

Information you provide directly

• Account details such as name, company, email, phone, role, and authentication information;
• Contact, demo, onboarding, support, and other communications;
• Subscription, transaction, and billing records;
• Configuration instructions, files, feedback, and implementation materials; and
• Customer Data entered, imported, uploaded, generated, or connected through the CRM.

Information collected automatically

• Device, browser, IP address, timestamps, requested pages, referral information, and diagnostic logs;
• Account activity, feature usage, security events, and error information; and
• Cookies and similar technologies described in our Cookie Policy.

Information from connected services

If you connect an email, payment, accounting, messaging, hosting, analytics, or other third-party service, we may receive identifiers, status information, transaction records, and other data necessary to perform the requested integration.

We use information to:

• Create, authenticate, administer, and secure accounts and workspaces;
• Provide, configure, support, maintain, troubleshoot, and improve LeadFlow;
• Process estimates, documents, invoices, payment status, messages, integrations, and other Customer-directed workflows;
• Deliver service, security, legal, billing, onboarding, and support communications;
• Prevent fraud, abuse, unauthorized access, and technical harm;
• Analyze service reliability and product usage in aggregated or de-identified form;
• Comply with law, enforce agreements, and protect rights and safety; and
• Market our services where permitted, subject to available opt-out rights.

We do not use one Customer’s confidential CRM records to market another company’s products or to build contact lists for unrelated third parties.

We may share information in the following limited circumstances:

• Service providers: hosting, database, email, messaging, payment, security, analytics, support, and professional service providers that process information for us under appropriate obligations;
• Customer-authorized integrations: services the Customer chooses to connect, such as accounting or payment providers;
• Customer administrators: workspace owners and authorized administrators who manage users and records;
• Legal and safety: when reasonably necessary to comply with law, lawful process, enforce agreements, investigate fraud, or protect rights and safety;
• Business transactions: in connection with a merger, financing, acquisition, reorganization, or sale of relevant assets, subject to customary safeguards; and
• With direction or consent: when the Customer or individual asks us to share information.

We do not sell personal information for money. We do not share personal information for cross-context behavioral advertising as those terms are commonly defined, unless this Policy is updated and legally required choices are provided.

Payment card, bank, PayPal, and similar payment details may be collected and processed directly by a payment provider. We generally receive transaction identifiers, amount, status, payer details, and fee information rather than complete card or bank credentials. The provider’s own privacy policy governs its processing.

We retain information for as long as reasonably necessary to provide the service, maintain business and security records, comply with legal and accounting obligations, resolve disputes, and enforce agreements. Retention depends on the type of information, Customer instructions, account status, legal requirements, and backup cycles.

After account termination, Customer Data may remain for a limited period to support export, recovery, fraud prevention, legal compliance, and secure backup rotation. We may retain aggregated or de-identified information that no longer reasonably identifies an individual or Customer.

We use reasonable administrative, technical, and organizational safeguards designed to protect information, including access controls, scoped user roles, secure hosting, session controls, encrypted transport, and security monitoring where appropriate.

No service can guarantee absolute security. Customers are responsible for protecting credentials, managing authorized users, securing connected services, and notifying us promptly of suspected unauthorized access.

Depending on where you live and applicable law, you may have rights to:

• Request access to, correction of, or deletion of personal information;
• Receive a portable copy of certain information;
• Object to or restrict certain processing;
• Withdraw consent where processing relies on consent; and
• Appeal or complain to an applicable privacy authority.

To exercise rights concerning information controlled directly by JMB, email contact@leadflowcrm.info. We may verify your identity and authority before responding. If the information belongs to a Customer workspace, we may direct the request to that Customer.

You may unsubscribe from nonessential marketing email using the message link or by contacting us. You will continue to receive necessary account, security, billing, and service communications.

We use cookies and similar technologies as described in our Cookie Policy. Essential cookies support authentication, security, and service operation. You can control cookies through browser settings, but blocking essential cookies may prevent login or other functions.

LeadFlow is a business service and is not directed to children under 13. We do not knowingly collect personal information directly from children under 13 through the public website. If you believe a child has provided information improperly, contact us so we can investigate.

JMB operates from the United States, and service providers may process information in the United States or other locations. Where required, appropriate contractual or legal mechanisms may be used for international transfers.

Our website and service may link to or integrate with third-party services. Their privacy policies and security practices apply to their processing. Review those policies before enabling or using an integration.

We may update this Privacy Policy as the service, technology, or law changes. We will post the revised version and update the effective date. If a change materially affects how we use personal information, we will provide additional notice where required.

Questions, requests, or concerns about this Privacy Policy may be sent to contact@leadflowcrm.info.