Privacy
Website suppliers and subprocessors
Current version: 10 September 2026
This page explains the principal suppliers used for the LeadFlow public website and its optional Anna AI sales and information guide. It should be read with our Privacy Policy. We do not sell personal information.
Netlify
Purpose: website hosting, delivery, the LeadFlow question form and secure server-side purchase functions. Netlify may process website requests, security and access data and information that you submit through the question form. Website questions are not customer-enquiry intake.
Cloudflare Turnstile
Purpose: one-use anti-abuse verification when you deliberately start Anna. Cloudflare may process IP, browser, device and security signals. LeadFlow does not intentionally put your voice, question, email address or enquiry message into Turnstile's action or challenge data.
Google Cloud Platform
Purpose: a Cloud Run gateway in the London region transiently transports Anna's live media and session messages. The gateway is designed not to log audio or conversation content. Operational logs contain bounded, content-free status codes. A London service region does not mean that every provider support or telemetry operation is UK-only.
Google Gemini Developer API
Purpose: the paid Live API processes transient speech, approved LeadFlow instructions and knowledge, and Anna's live responses. LeadFlow does not enable session resumption, transcription, file storage, cached content, search grounding or conversation recording for the public guide. Provider security and abuse-monitoring processing may still apply under Google's current terms.
Supabase
Purpose: London-hosted authentication, database and private object-storage services hold customer account access, Command Centre enquiries and resized photos, configuration data, operational and deletion evidence, the approved Anna identity and public knowledge version, website source rules, and previously confirmed follow-up records retained under the existing retention schedule. New public website Anna chats do not save contact details or messages. Photos use authenticated access and follow the enquiry's retention and deletion rules. Database backups do not include stored photo bytes. LeadFlow does not store Anna audio or a conversation transcript.
Stripe
Purpose: hosted package checkout, recurring subscription billing, customer billing-portal sessions and approved refunds. Stripe receives card and billing details. LeadFlow receives only bounded purchase identifiers, payment status, amount, currency and the customer email needed to reconcile the order and keep onboarding dormant.
Resend
Purpose: Growth email delivery after the owner reviews and approves the exact recipient, subject and editable message. Resend processes the approved email content, sending and reply addresses and delivery or bounce events. One approval creates one send; nothing sends without the owner's approval.
Google Fonts
Purpose: delivery of the website's fonts. Your browser requests these files from Google and may send ordinary connection information such as IP address and browser details.
Email providers
Purpose: receiving and answering a written question or onboarding communication. The public website Anna chat does not send emails or forward messages. The information in an email is processed under the provider's service and security terms.
Twilio
Purpose: carrying separately configured Pro telephone calls and the approved telephone routing needed for that service. Twilio does not carry the public website Anna conversation. No analytics, advertising or marketing platform is currently active on this website.
Changes and questions
We may replace or add a supplier when reasonably necessary to operate or secure the service. We will update this page and the Privacy Policy before a material new use. Questions can be sent to hello@leadflowautomations.uk.