Privacy Policy

Last updated: July 30, 2026

Solutions Leapflow (16633749 Canada Inc.) (“Leapflow”, “we”, “us”, or “our”) operates the website leapflow.io, the client portal at console.leapflow.io, and provides business automation services, including automated workflows, custom APIs, and system integrations (collectively, the “Services”).

This Privacy Policy explains what information we collect, how we use it, and the choices you have. We are based in Québec, Canada, and we handle personal information in accordance with applicable privacy laws, including Québec’s Act respecting the protection of personal information in the private sector (Law 25) and Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Information we collect

We collect only the information we need to provide and improve the Services:

• Contact information — such as your name, email address, company name, and phone number, when you contact us or become a client.
• Account information — credentials and profile details used to access the client portal.
• Business data processed by workflows — data from the systems you connect to your automated workflows (for example, orders, invoices, documents, or emails). This data passes through our infrastructure only as needed to run your workflows.
• Technical information — logs, usage metrics, and diagnostic data generated when the Services run, used for monitoring, billing, and support.

2. How we use information

We use the information we collect to:

• Provide, operate, monitor, and support the Services;
• Set up and run the automated workflows and integrations you request;
• Communicate with you about your projects, support requests, and billing;
• Measure usage for billing purposes;
• Improve the reliability and security of the Services; and
• Comply with legal obligations.

We do not sell your personal information, and we do not use it for third-party advertising.

3. Google user data

Some of our Services connect to Google services (such as Gmail, Google Drive, Google Sheets, or Google Calendar) through Google OAuth, with your explicit consent, in order to run the workflows you configure or request.

• What we access: only the Google account data required by the specific workflow you have authorized (for example, reading spreadsheet rows, sending an email, or saving a file to a folder). The exact scopes are shown on the Google consent screen when you connect your account.
• How we use it: Google user data is used solely to provide the functionality of the workflow you authorized. It is processed transiently by our infrastructure and is not used for any other purpose.
• Storage: we do not retain copies of your Google user data beyond what is strictly necessary to execute the workflow. OAuth tokens are stored encrypted and are used only to run your authorized workflows.
• Sharing: we do not sell Google user data, and we do not share it with third parties except as necessary to operate the workflow you configured (for example, sending data to another system you have connected) or as required by law.
• No AI training: we do not use Google user data to develop, improve, or train generalized artificial intelligence or machine learning models.

Leapflow’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke Leapflow’s access to your Google account at any time from your Google Account security settings.

4. Data retention

Business data processed by your workflows passes through our infrastructure temporarily; we retain nothing beyond what is needed to execute and troubleshoot your workflows. Contact, account, and billing information is kept for as long as needed to provide the Services and to meet our legal and accounting obligations, after which it is deleted or anonymized.

5. Sharing and service providers

We share information only with the service providers we rely on to operate the Services (such as cloud hosting, authentication, payment processing, and workflow infrastructure providers), and only to the extent necessary. These providers are bound by contractual obligations to protect your information. Some providers may store or process data outside Québec or Canada; where required, we assess these transfers in accordance with applicable law.

We may also disclose information if required by law or to protect our rights, safety, or property.

6. Security

We apply industry-standard safeguards to protect your information, including encryption in transit, encrypted storage of credentials and tokens, access controls, and tenant isolation between clients. No method of transmission or storage is completely secure, but we work to protect your information against unauthorized access, loss, or misuse.

7. Your rights

Subject to applicable law, you have the right to access the personal information we hold about you, request corrections, withdraw consent, and request deletion. To exercise these rights, contact us at the address below. You may also file a complaint with the Commission d’accès à l’information du Québec or the Office of the Privacy Commissioner of Canada.

8. Children’s privacy

The Services are intended for businesses and are not directed at individuals under 14. We do not knowingly collect personal information from children.

9. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page indicates when it was last revised. Material changes will be communicated through the website or by email.

10. Contact us

For any questions about this Privacy Policy or to exercise your rights, contact our privacy officer:

Solutions Leapflow · 16633749 Canada Inc.
Email: contact@leapflow.io