Privacy Policy

Leadflow by REGOS connects CRM systems, messaging services and advertising platforms. This policy describes the data processed to provide these services, including the amoCRM integration.

Legal name of the service provider processing personal data: Individual Entrepreneur Regos, Kazakhstan

Registered and office address: Almaty Towers Business Center, 280 Baizakov Street, Almaty, Kazakhstan.

Email: support@leadflow.kz.

The data processed depends on the integrations enabled in your workspace:

• Account and profile details, including name, email, password hash and profile image where provided.
• amoCRM account identifiers and domain, contacts (including names, phone numbers and email addresses), leads, deal values, pipelines, stages, custom fields and stage changes.
• Attribution data, including source information, UTM parameters, advertising click identifiers and identifiers used to match contacts to deals.
• Messaging metadata, including channel identifiers, timestamps, direction and advertising referral information. Incoming provider webhook records may also contain message text, names or email addresses included by the provider.
• Meta business, Page, advertising account and Dataset/Pixel identifiers and details, plus campaign, advertisement, performance and spending data used for reporting.
• Conversion event names, times, values, matching identifiers, delivery status and API responses.
• OAuth access and refresh tokens, API keys, integration settings, workspace identifiers and technical diagnostic records.

Leadflow does not request or store end users’ bank card details.

We receive data from the integrations you connect: amoCRM through OAuth 2.0 and its API/webhooks; Meta and connected advertising reporting services; WhatsApp through Wazzup or the WhatsApp Cloud API; and your configured universal webhook sources.

You authorize amoCRM access on the amoCRM consent screen. Leadflow does not ask for your amoCRM password. Tokens allow the service to synchronize the authorized account with your workspace.

We use data to operate your account, synchronize CRM records, identify lead sources, match leads to deals, report advertising performance, track selected deal stages and send configured conversion events to Meta Conversions API. We also use technical records to diagnose errors and maintain the service.

You are responsible for having the necessary rights, notices and permissions for the customer data you connect and for the conversion events you choose to share.

Configured conversion events are sent to Meta. Phone numbers, email addresses and names used for conversion matching are normalized and SHA-256 hashed before transmission. Event details and other supported matching identifiers are sent in the format required by the API; hashing does not make all event data anonymous.

Hosting, database and other infrastructure providers process data needed to operate Leadflow. Connected CRM, messaging and advertising reporting providers process data needed for their enabled functions.

We do not sell personal data or share it for unrelated third-party marketing.

Integration records and historical CRM, attribution and event data are stored for use by your workspace. Disconnecting an integration does not automatically erase previously stored records.

Security measures include encrypted HTTPS connections, password hashing and workspace-based access controls. Integration credentials are used on the server to communicate with connected services.

To disconnect amoCRM, open Integrations → amoCRM in Leadflow and select Disconnect. Historical records remain until deletion is requested. You may also revoke authorization in the connected provider’s settings.

For complete removal of workspace data and integration credentials, email us from your registered account, using the subject “Leadflow data deletion” and include your workspace name. We may verify ownership before processing the request. The request covers stored profile, CRM, attribution and event records and integration credentials, except records required by law.

Support confirms completion. Backup copies expire according to their rotation schedule. See the data deletion instructions.

You can contact support to request information about your data, correction or deletion. Profile details can also be managed in your account settings.

We update this page when our data processing practices change. The date above identifies this version.

See our Terms of Service and Support page.