Security & Trust

This page is maintained by LifeFlow to answer common security and privacy questions about our service. It describes our current practices and is not a certification or independent audit.

Hosting & infrastructure

LifeFlow runs on modern managed cloud infrastructure with reputable providers. Data in transit is protected using TLS, and data at rest is stored on encrypted managed databases.

Access controls

• Least-privilege access to production systems.
• Strong authentication for internal tools.
• Row-level security policies on customer data.

Data handling

• We use lead and conversation data to operate the service for the customer that owns it.
• We do not sell personal information.
• Customers can request export or deletion of their data — see the Privacy Policy.

Messaging compliance

LifeFlow can be configured to support consent-based messaging, sender identification, and opt-out handling. Customers remain responsible for ensuring their lead sources, forms, and campaigns collect the permissions required for their use case. We help configure the workflow, but LifeFlow does not provide legal advice.

Responsible AI

• Automations disclose that they are automated when appropriate and hand off to a human when the conversation warrants it.
• We do not impersonate a specific person or misrepresent the nature of our messages.
• AI systems can make mistakes; LifeFlow is a tool to help agents respond faster, not a guarantee of a specific lead or outcome.

Incident response

If we become aware of a security incident that affects customer data, we will investigate promptly, take reasonable steps to contain and remediate, and notify affected customers as required by applicable law.

Reporting a vulnerability

If you believe you've found a security issue, please email greg@yourlifeflow.com with details. We appreciate responsible disclosure and will work with you in good faith.

Shared responsibility

Security is a shared responsibility. Customers are responsible for keeping their own accounts, integration credentials, devices, and messaging practices secure and compliant with the law.