What we collect, and why.

Last updated: 3 October 2026

Who we are

ClientFlow is a web design and local SEO studio based in Tucson, Arizona. Reach us at mbclientflow@gmail.com or (520) 910-1938 about anything on this page.

What this site collects

Only what you type into our forms. On the quote form: your name, phone, email, business name and message. When you buy the $99 plan: your name, business, type of business, city, phone, email, a password (stored encrypted) and your current website or Facebook if you give it. We use it to reply to you and to do the work you hired us for.

This site sets no advertising cookies, runs no third-party analytics and has no tracking pixels. The only cookie keeps you signed in to your dashboard.

What the ClientFlow app collects

If your website uses ClientFlow, inquiries sent through your forms are stored in your account: the visitor's details and message, which page they came from and how many pages they viewed. That data belongs to your business, not to us. Every account is isolated, so no other business can see your leads.

Who else sees it

We do not sell data and we do not share it for advertising. It is handled by:

• Our email provider, to deliver messages between you and us.
• Our hosting provider, which stores the site and application data.
• Square, if you pay us. Your card goes straight to Square's checkout and never touches our servers, so we never see or store it.

How long we keep it

Quotes that don't become clients are deleted within 24 months. Client records are kept for the length of the service plus seven years, as US tax record-keeping requires. Lead data inside a client's account is deleted within 30 days of closing it, or sooner on request.

Your choices

Email us and we will, at no charge:

• Tell you what we hold about you.
• Correct anything that's wrong.
• Delete it, unless we're legally required to keep it.
• Send you a copy of it.

We'll respond within 30 days. You don't need to cite a law to ask. If you're in California, this covers your rights under the CCPA; in the EU or UK, the equivalent rights under the GDPR.

Children

This is a service for businesses. We don't knowingly collect anything from anyone under 16. If you believe a child has sent us information, email us and we'll delete it.

Changes

If this policy changes in a way that affects your information, we'll update the date at the top and, for anything significant, tell current clients directly.