Privacy
Service operator
MBCSOFT LLC
8 The Green, Suite A, Dover, DE 19901, United States
Support and data requests: mbcsoftllc@gmail.com
Updated: October 19, 2026Information we process
We process account email, workspace memberships, uploaded company and contact records, search preferences, consent evidence, campaigns and incoming messages to provide the service. Stripe processes payment card details; LeadFlow does not store your card number.
Infrastructure and sharing
Vercel hosts the application; Supabase provides authentication, database and storage; Upstash provides the job queue; Resend delivers account emails. When you run an AI feature, relevant content is sent through Vercel AI Gateway to the selected model provider. Connected messaging providers receive the information needed for the selected delivery. Processing may involve transfers to countries where providers operate.
Retention and access
Workspace access depends on membership and role. CSV payloads are cleared after import; export files are private and expire. Account, consent, audit and payment records have separate retention purposes. A deletion request does not immediately erase every accounting or abuse-prevention record. Contact us below for the applicable retention and deletion scope.
Optional usage measurement
Google Analytics loads only after you choose “Allow analytics”. Page visits, browser and session identifiers, and verified purchase amount, currency and transaction identifier may be shared with Google. These details are associated to understand product usage and sales.
Names, email addresses, phone numbers, company records, offer text and page URL query parameters are not included in measurement events. Ad personalization, Google Signals and advertising data consent are off. Analytics cookies expire after 30 days; active usage may renew that period.
You can use the service without allowing analytics. Use “Privacy choices” at the bottom of the page to stop measurement and change your choice. You can also delete cookies in your browser settings. A page reload asks for analytics consent again.