Back to home

Privacy Policy

Controller: ADISH ESO LTD (Registration No. HE 437996) Registered address: Agias Paraskevis 101, Bell View House 7, Germasogeia 4044, Limassol, Cyprus Product: LeadFlow Pro (Android app ID com.leadflowpro.app, iOS app, and web application) Privacy contact: support@leadflowproapp.com Last updated: August 6, 2026

1. Who we are

LeadFlow Pro is a lead-management, scheduling, quoting, invoicing and payment application for contractors and field-service businesses. It is operated by ADISH ESO LTD ("ADISH ESO", "we", "us", "our"), a company registered in the Republic of Cyprus under number HE 437996, with its registered office at Agias Paraskevis 101, Bell View House 7, Germasogeia 4044, Limassol, Cyprus.

For any privacy question, access request, correction request, deletion request or legal notice relating to the service, contact support@leadflowproapp.com.

2. Our role: controller and processor

  • ADISH ESO LTD is a controller in relation to your account, your business subscription, billing, support, security, fraud prevention, product analytics and the marketing of LeadFlow Pro itself.
  • The business that uses LeadFlow Pro is normally the controller of the data it enters and generates: its own customers, employees, technicians, job records, notes, quotes, invoices, files and communications.
  • ADISH ESO LTD acts as a processor for that business data, processing it on the business's documented instructions in order to provide the service. Our Data Processing Addendum governs that relationship.

If you are a technician, employee or customer of a business that uses LeadFlow Pro, please direct access and deletion requests to that business first. We will assist them as their processor.

3. Information we collect

3.1 Account and business information

  • Full name, business name, email address and phone number
  • Business address, business logo and branding
  • Language and locale preferences, and time zone
  • User IDs, business IDs and team-member role assignments

3.2 Location information

LeadFlow Pro is a field-service product and processes location data.

  • Approximate location. Approximate location derived from IP address is inherent to internet requests and is processed by us and by the providers we use, including analytics, security, advertising-measurement and payment providers. We treat it as collected and shared.
  • Precise location. With the device permission and in-app consent, the Android and iOS apps collect the precise GPS location of owners and technicians while tracking is enabled, in order to show live team position, job routing and arrival status. Managers, dispatchers and accountants are not tracked.
  • Current technician location record. We store the current location record for each tracked user and show it to the business owner or manager on the team map. Each update replaces the previous record, so no continuous trail of past positions is kept in the app.
  • Saved home or base coordinates. A technician's or owner's stated home or base address may be geocoded and stored to calculate routes and distances.
  • Customer addresses and route data. Job addresses, service addresses and computed routes and distances are stored, and are sent to mapping providers for geocoding, autocomplete and directions.

Location tracking can be disabled by withdrawing consent in the app and revoking the operating-system permission. Disabling it limits live-map and routing features.

3.3 Business content you enter

  • Customer names, phone numbers, email addresses and service addresses
  • Leads, jobs, scheduled visits, statuses, notes and internal comments
  • Quotes, estimates, invoices, line items, taxes, discounts and processing fees
  • Payment records, refunds, payouts, and lead-provider or commission data
  • Team members, roles, time entries and compensation data

3.4 Files and media

  • Photos captured with the device camera inside the app, and photos selected from the device gallery
  • PDFs and other documents attached to jobs, quotes and invoices
  • Media attachments received with inbound messages

Camera and photo access is optional and is requested only when you capture or attach a file.

3.5 Messaging content

  • Inbound SMS and MMS message bodies and media attachments delivered to numbers connected to your business
  • Outbound SMS and email content generated by, or sent through, the service
  • Message content may be sent to an AI provider for classification, extraction and lead parsing (see sections 3.6 and 5)

3.6 AI processing, calls and recordings

  • Message and job content is sent to Google Gemini for classification, lead parsing, extraction and content suggestions. It is processed to return a result to your account and is not used by us to build advertising profiles.
  • Where the AI Receptionist feature is enabled, we process call metadata, call transcripts and call recordings, together with structured details extracted from the call such as caller name, address, requested service and urgency.
  • Call recordings are held in private storage and are accessible only through short-lived signed links.
  • AI output can be inaccurate or incomplete and is intended to assist, not replace, human review.
  • Recording calls, and using automated or AI-handled calls and messages, may require the consent of the other party in your jurisdiction. The business using the feature is responsible for obtaining that consent.

3.7 Device, technical and usage data

  • Device identifiers, push-notification tokens, app version, operating-system version and device model
  • Advertising identifier, where available and permitted, used for advertising and measurement
  • IP address and user agent
  • Feature-usage events, screens viewed and in-app actions
  • Crash logs, stack traces and performance or diagnostic data

3.8 Purchase and subscription data

  • Subscription plan, trial status, renewal and cancellation events
  • Purchase history and transaction identifiers from Stripe, the Apple App Store and Google Play
  • Partial payment-instrument metadata provided by our payment processor. We never receive full card numbers.

4. Why we use your information

| Purpose | Examples | |---|---| | Provide the service | Accounts, leads, jobs, quotes, invoices, scheduling, mapping, attachments | | Field operations | Live technician location, routing, arrival tracking, dispatch | | Payments and billing | Subscriptions, in-app purchases, card-present and online payments, refunds | | Communications | Transactional email, SMS and push notifications about your account and work | | AI features | Lead parsing from messages, AI Receptionist call handling, content suggestions | | Analytics and product improvement | Feature usage, funnels, performance, bug fixing | | Advertising and measurement | Measuring and optimising our own marketing campaigns, including conversion events sent to Meta | | Security and fraud prevention | Abuse detection, audit logging, account protection | | Legal compliance | Tax, accounting, statutory requirements and responding to lawful requests |

We do not sell your personal information. We do use certain data — including approximate location derived from IP address, email (hashed where supported), device identifiers and app-interaction events — for our own advertising and campaign measurement through Meta.

On the website and web application, analytics and advertising tools load only after you accept them in our cookie banner, and you can change that choice at any time on our Cookie Policy page. On the mobile apps you can object to advertising use by contacting support@leadflowproapp.com, and you can limit it through your device's advertising settings.

5. Service providers and other recipients

We share data only with providers that help us operate LeadFlow Pro. Each is bound to use it only to provide services to us.

| Recipient | Purpose | Data involved | |---|---|---| | Supabase / Lovable Cloud | Database, authentication, storage, serverless functions | All application data, files, IP address | | Google Maps, Places, Geocoding and Routes | Address autocomplete, geocoding, maps, routing | Addresses, coordinates, IP address | | Stripe and Stripe Terminal | Online and card-present payment processing, subscriptions | Payment and transaction data, contact details, device and IP data, approximate location | | Apple App Store and Apple In-App Purchase | iOS subscription billing | Purchase history, account identifiers | | Google Play Billing | Android subscription billing | Purchase history, account identifiers | | RevenueCat | Subscription state management across stores | Purchase history, app user identifiers, device identifiers | | Firebase (Google) | Push notifications and app services | Push tokens, device identifiers, IP address | | Meta (Android SDK, Meta Pixel, Conversions API) | Advertising and campaign measurement | Email (hashed), app interactions, device and advertising identifiers, IP address and approximate location | | Sentry | Crash reporting and diagnostics | Crash logs, diagnostics, IP address, app version. Personal data is not intentionally sent | | PostHog (web only) | Product analytics | Usage events, IP address, device and browser data | | Twilio | Inbound and outbound SMS/MMS and telephony | Phone numbers, message bodies, media | | Google Gemini | AI classification, lead parsing, content generation | Message and job content submitted for processing | | Retell and connected voice and transcription providers | AI Receptionist calls and transcription | Call audio, transcripts, caller details |

The current list is maintained in our Subprocessor List, available from the Legal page. We may change providers, and where required we announce material changes in advance.

Data may be transferred to and processed in countries outside your own, including the United States. Where a transfer requires a safeguard, we rely on the transfer mechanism provided in the relevant provider's data processing terms.

We may also disclose information where legally required, to protect rights and safety, or in connection with a merger, acquisition or asset sale, with prior notice where required.

6. Legal bases (EEA and UK users)

  • Contract: providing the service, billing and support
  • Legitimate interests: security, fraud prevention, product improvement and measurement of our own marketing
  • Consent: precise location tracking, camera and photo access, push notifications, non-essential cookies and advertising tools, and call recording where applicable
  • Legal obligation: tax, accounting and statutory requirements

7. Retention and deletion

We retain information only for as long as reasonably necessary to provide the service, comply with legal obligations, resolve disputes and enforce our agreements. Retention periods may vary depending on the type of data and the provider involved.

In addition:

  • Active account. We keep your data while the account is active.
  • Account deletion. When deletion is requested, the account is disabled immediately and the data is removed from our active production systems within 30 days. This includes the business profile, leads, jobs, customers, quotes, invoices, payment records, attachments, team records, the stored technician location record and notification tokens.
  • Call recordings, debug logs and other operational records are deleted automatically on a rolling schedule once they are no longer needed for the purpose described above.
  • Limited records we may retain. ADISH ESO LTD may retain limited records relating to its own subscription charges to you — billing and tax records, refunds, chargebacks, fraud-prevention signals and records needed to defend legal claims — only to the extent and for as long as applicable law requires. We do not retain your customers' invoices, jobs, messages or documents for our own tax purposes.
  • Third parties. Some data may remain with providers under their own retention policies and legal obligations, in particular payment processors that are legally required to keep transaction records. You may ask us at support@leadflowproapp.com to pass a deletion request to a provider that accepts one.

Deletion is deliberate and cannot be reversed once completed. Export your data from the app before requesting deletion. See the Delete Account page for the full process.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time. You may also lodge a complaint with your supervisory authority; in Cyprus this is the Office of the Commissioner for Personal Data Protection.

To exercise any right, contact support@leadflowproapp.com. We verify ownership of the email address before acting on a request.

9. Security

We use encrypted transmission (HTTPS/TLS), encrypted cloud storage, row-level security so each account can reach only its own data, authenticated access with email verification and OAuth, private storage buckets with short-lived signed URLs for attachments and recordings, and administrative access controls protected by multi-factor authentication. No system is completely secure and we cannot guarantee absolute security.

10. Children

LeadFlow Pro is a business product and is not intended for anyone under 18. We do not knowingly collect data from minors and will delete it if we discover it.

11. Changes

We may update this policy. Material changes are posted in the app and on our website with an updated "Last updated" date, and where required we will notify you in advance.

12. Contact

ADISH ESO LTD Agias Paraskevis 101, Bell View House 7, Germasogeia 4044, Limassol, Cyprus Registration No. HE 437996 Privacy contact: support@leadflowproapp.com