Privacy Policy

1. Who we are and what this covers

MaxSun Media LLC, doing business as LeadFlow Cure ("we," "us," "our"), sells Front Desk AI — an AI receptionist that answers, qualifies and follows up on inbound calls, chats and texts for contractors and other small service businesses.

This policy covers the personal information we handle:

• on our websites, including frontdesk.leadflowcure.com and the demo request form at /demo-ai-voice;
• when our AI places a demo call to you, or answers a call, chat or text on behalf of a customer;
• when you email, text or call us; and
• when you buy, use or are billed for Front Desk AI.

If you are a caller to one of our customers, that customer decides why they use Front Desk AI and how long they keep what it captures. We handle that information on their instructions. Contact the business you called first; if you contact us, we will route your request to them and help them answer it.

2. Information we collect

2.1 Information you give us

• Demo request: first name, phone number, email address, company name, company type and company website.
• Consent record: which consent boxes you checked, the exact wording shown to you when you checked them, and the date, time and IP address of the submission.
• Messages: anything you write to us by email, text or web chat.
• Customer account and billing: business details, the contact people you designate, your service configuration, and invoice records.

2.2 Calls, recordings and transcripts

Covered in full in section 3. In short: calls to and from our AI receptionist may be recorded and transcribed, and both the audio and the text are personal information under this policy.

2.3 Information collected automatically

• Website and device data: IP address, approximate location derived from IP (city or region level, not precise geolocation), browser and device type, referring URL, pages viewed, timestamps and error logs.
• Cookies, pixels and similar technologies: see section 5.

2.4 What we do not collect

We do not knowingly collect Social Security numbers, driver's licence numbers, financial account credentials, precise geolocation, biometric identifiers, health information, or information about race, religion, union membership, sexual orientation, immigration status or genetic data. We do not ask for it and our forms do not have fields for it. If you volunteer it on a call anyway, we do not use it to infer anything about you and we will delete it on request.

3. Calls, recordings and transcripts

This is the section our SMS & Calling Terms points to, and it is the part of this policy most people care about.

3.1 What gets recorded

• Demo calls we place to you. When you request a demo, our AI receptionist calls the number you gave us. That call is placed with an artificial, prerecorded or AI-generated voice, and it may be recorded and transcribed. Both consent checkboxes on the demo form say this, word for word, before you check them.
• Calls our AI answers for a customer. When Front Desk AI answers a business line we operate for a customer, the call may be recorded and transcribed for that customer.
• Text and chat threads with our AI or with us are stored as written.

3.2 Notice and consent

We tell you a call may be recorded before the recording is used for anything: on the demo form you check a box that says so, and on the call the assistant identifies itself as an AI assistant. If you do not want a call recorded, say so on the call and we will stop. You can also reply STOP to any text message, or email [email protected], and we will stop calling that number.

3.3 What we use recordings and transcripts for

• Delivering the demo and showing you what the assistant actually did on your call.
• Quality-checking and correcting the assistant's behaviour — the single most common reason we open a recording.
• Handing a customer the lead detail their assistant captured (name, job type, callback number).
• Resolving a dispute about what was said, and meeting a legal or carrier obligation.

We do not sell recordings or transcripts, and we do not use them to build advertising audiences.

3.4 Where they are stored and who can access them

Call audio and transcripts are stored in the United States by our AI voice provider (Retell AI, Inc.) and, for calls that route through a customer's CRM, in that customer's GoHighLevel sub-account. Access is limited to:

• LeadFlow Cure staff who need the recording for quality control, support or billing — today that is the owner-operator of LeadFlow Cure and anyone he explicitly authorises;
• the customer whose business line the call came in on, for their own calls only; and
• the vendors listed in section 7, acting under contract on our instructions.

Nobody else. We do not give one customer access to another customer's calls.

3.5 How long we keep them

Call recordings and transcripts are retained for 24 months from the date of the call, then deleted. Twenty-four months is the longest any copy is kept, not a guarantee that a recording stays available to you for that long. Our AI voice provider holds the copy of record for that period; the copy stored in a customer's GoHighLevel sub-account is deleted after 180 days. We will delete them sooner on request — see section 10 — unless we are required to keep a specific recording to resolve an open dispute or to meet a legal obligation, in which case we keep only that recording and only for as long as the obligation lasts.

4. How we use information

• Run the demo you requested and follow up on it.
• Operate, support, secure and improve Front Desk AI.
• Answer, qualify and route calls, texts and chats for customers.
• Send you transactional messages — demo links, appointment confirmations, account and billing notices.
• Send marketing messages, calls or emails only to people who opted in, and only until they opt out.
• Measure our own marketing, including which pages lead to a demo request.
• Detect and prevent fraud, abuse and technical failure.
• Meet legal, tax and telecom-carrier obligations.

5. Cookies, pixels and analytics

Our pages use cookies and similar technologies to keep the site working, to remember preferences, and to measure and target advertising. The advertising ones are the Meta pixel (Meta Platforms, Inc.) and Meta's Conversions API, which tell Meta that a browser or a lead reached a given page or submitted a form. Our demo form also loads Google reCAPTCHA to block bots; Google receives the data reCAPTCHA needs to score the submission.

You can block or delete cookies in your browser. Blocking the strictly necessary ones may stop parts of the site from working. To opt out of the advertising ones specifically, see section 9.5.

6. Text messages and phone calls

Our messaging and calling program — what we send, how often, the cost, and how to stop — is described in full in our SMS & Calling Terms.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

7. Who we share information with

We do not sell personal information. We disclose it to the service providers below, each under a contract that limits them to processing it for us, and to authorities or an acquirer when the law or a business transfer requires it.

If you become a paying customer, our payment processor is identified on your order form and invoice; it receives your billing contact details and card information directly, and we do not store full card numbers. We update this table when we change vendors.

8. How long we keep things

When a retention period ends we delete the record or strip it of anything that identifies you. If you ask us to delete something sooner, we do — see section 10.

Website server and security logs. We do not operate the web server behind this site. frontdesk.leadflowcure.com is hosted on HighLevel's website platform and served through the content delivery network HighLevel places in front of it (Cloudflare). Any server access log or security log created when you visit this site is created and held by those providers, not by us: we hold no copy of them and we cannot set how long they are kept. HighLevel publishes that it "retains certain data like logs and related metadata in order to address security, compliance, or statutory needs," that "the retention period of logs depends on the nature of the data logged," and that it "does not currently provide customers with the ability to define custom data retention policies." Those needs — security, compliance and statutory obligation, judged against the kind of log — are therefore the criteria that determine how long these logs are kept. If HighLevel states a specific period, we will publish it here. The information about your visit that we do hold ourselves — your contact record, your form submission, your IP address and advertising identifiers — is covered by the other rows of this table.

9. Your privacy rights

9.1 California (CCPA/CPRA) — what we collect, why, and who gets it

In the 12 months before the date at the top of this page, we collected the categories of personal information below. The purposes and retention in this table are the same ones described elsewhere in this policy.

We collect this information from you directly, from your device when you use our site, from the call itself, and from our own service records. We do not buy personal information from data brokers.

Sensitive personal information: we do not collect the categories the CCPA defines as sensitive, and we therefore do not use or disclose sensitive personal information for any purpose that would give you a right to limit that use.

Selling and sharing: we do not sell personal information, and we have not sold any in the last 12 months. We do share — as the CCPA defines "share," meaning disclose for cross-context behavioral advertising — website activity and, when you submit a form, hashed contact identifiers, with Meta Platforms. You can stop that: see section 9.5. We do not sell or share the personal information of anyone we know to be under 16.

9.2 Your rights

If you are a California resident you have the right to:

• Know what personal information we have collected about you, where it came from, why we collected it, who we disclosed it to, and to get a copy of it (including for the period beyond 12 months, where it is not impossible or disproportionate for us to produce);
• Delete the personal information we hold about you;
• Correct inaccurate personal information;
• Opt out of sharing for cross-context behavioral advertising;
• Not be discriminated against for exercising any of these — we do not charge you more, give you less, or refuse service because you made a request.

Residents of Colorado, Connecticut, Delaware, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah and Virginia have substantially the same rights under their own state laws, plus a right to appeal a refused request. We handle all of these requests the same way, whichever state you are in.

9.3 How to submit a request — our designated methods

Use either of these. Both reach a monitored inbox and phone line:

• Email: [email protected] — put the request in the subject line ("Know," "Delete," "Correct," or "Do Not Sell or Share").
• Phone: (888) 579-4717 (toll-free).

Tell us the phone number or email address you gave us, so we can find your record.

9.4 How we verify and respond

• We confirm we received your request within 10 business days and tell you how we will handle it.
• We verify you by matching at least two pieces of information you give us against what we already hold — typically the phone number or email you submitted, plus the company name or the approximate date of your demo. For a request to delete a call recording we may also send a confirmation to the number on the recording. We use what you give us for verification only, and then delete it.
• We respond substantively within 45 calendar days, and tell you if we need up to 45 more.
• Authorised agents: an agent may submit for you with written permission signed by you; we may still ask you to confirm directly.
• If we refuse, we tell you why in writing. You may appeal by replying to that decision with "Appeal" in the subject line; a different person reviews it and answers within 45 days. If we deny the appeal we will tell you how to complain to your state attorney general or, in California, to the California Privacy Protection Agency.

9.5 Do Not Sell or Share My Personal Information

10. Deleting your data

Email [email protected] with "Delete my data" in the subject line, or call (888) 579-4717 (toll-free). Say whether you want everything deleted or just your call recordings and transcripts.

We acknowledge within 10 business days, verify you as described in 9.4, and complete the deletion within 45 days — usually much sooner. We will tell you what we deleted and what, if anything, we had to keep and why. What we may have to keep: invoices and tax records, and your consent and opt-out record, because deleting the record that you asked us to stop contacting you is how people get contacted again by mistake.

11. Security

Data is encrypted in transit and at rest by the platforms listed in section 7. Access to recordings, transcripts and CRM records is limited to the people named in section 3.4, on accounts protected by multi-factor login where the vendor offers it. We review vendor access when a vendor changes. No system is perfectly secure and we do not claim ours is.

12. Where we operate

We are a United States business, our customers are United States businesses, and the data described here is stored in the United States. Front Desk AI is not offered to people in the EEA or the UK and our forms are not directed there.

13. Children

Front Desk AI is a business tool. It is not directed to children, we do not knowingly collect information from anyone under 18, and we do not sell or share the personal information of anyone we know to be under 16. If you believe a child's information reached us, email us and we will delete it.

14. Changes to this policy

We will post any change on this page and update the date at the top. If a change materially affects how we use information we already hold, we will give notice by email or on the site before it takes effect.

15. Contact us

MaxSun Media LLC, d/b/a LeadFlow Cure
1843 W Flower Ave, Fullerton, CA 92833
Email: [email protected]
Phone: (888) 579-4717 (toll-free)

---

See also our SMS & Calling Terms and our Terms of Service.