Legal

Privacy Policy

Effective Date: March 12, 2026  ·  Forward Flow  ·  forward-flow.com

Forward Flow (“Forward Flow,” “we,” “us,” or “our”) operates the free CRM audit tool available at forward-flow.com (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service. Please read this policy carefully. By using the Service, you agree to the practices described here.

1. Information We Collect

1.1 Information You Provide Directly

When you use the Service, you voluntarily submit the following personal information:

  • Full name
  • Email address
  • Phone number (including mobile/cell number)
  • CRM API key (used solely during report generation — see Section 1.2 below)

1.2 CRM API Key — Special Handling

Your CRM API key is used only to make read-only requests to your CRM provider (e.g., Follow Up Boss, Lofty) for the purpose of generating your audit report. We do not store your API key on our servers. It is transmitted over an encrypted connection, used to fetch the data required for your report, and then discarded. It is never written to a database, logged in plaintext, or shared with third parties.

1.3 Report Data

The audit report generated from your CRM data — including aggregate statistics such as lead response rates, pipeline age, contact attempt counts, and estimated missed revenue — may be retained in association with your contact information for internal analysis and to improve the Service.

1.4 Automatically Collected Information

When you visit forward-flow.com, we may automatically collect certain technical information, including:

  • IP address and approximate geographic location
  • Browser type and version
  • Device type and operating system
  • Pages visited and time spent
  • Referring URL
  • Session identifiers and cookies

2. How We Use Your Information

We use the information we collect for the following purposes:

  • To generate and deliver your CRM audit report
  • To create and push your contact record to our internal Follow Up Boss CRM so that a Forward Flow team member can follow up with you about the results
  • To send you your report summary and related educational content via email
  • To contact you by phone, email, or SMS/text message about Forward Flow services, promotions, and follow-up conversations (see Section 3 for SMS-specific terms)
  • To respond to inquiries or support requests you submit
  • To analyze aggregate usage trends and improve the Service
  • To comply with legal obligations and enforce our Terms of Service

3. SMS / Text Message Communications

TCPA Consent Notice: By submitting your phone number through the Service, you expressly consent — under the Telephone Consumer Protection Act (TCPA) and applicable state laws — to receive autodialed or pre-recorded calls and/or SMS/MMS text messages from Forward Flow at the number you provide, including your mobile number if applicable. Consent is not a condition of any purchase.

3.1 Types of Messages

We may send you:

  • Your CRM audit report summary
  • Follow-up messages regarding your audit results
  • Promotional messages about Forward Flow services
  • Appointment or consultation reminders

3.2 Message Frequency

Message frequency varies. You may receive up to several messages per month related to your audit and follow-up communications.

3.3 Opt-Out

You may opt out of SMS communications at any time by replying STOP to any text message from us. After opting out, you will receive one final confirmation message and no further SMS messages will be sent. You may also opt out by contacting us at the information in Section 9.

3.4 Help

Reply HELP to any message for assistance, or contact us directly. Message and data rates may apply depending on your mobile carrier plan.

3.5 Carrier Disclaimer

Mobile carriers are not liable for delayed or undelivered messages. Forward Flow is not responsible for delays or failures in message delivery attributable to your carrier or device.

4. How We Share Your Information

4.1 Follow Up Boss CRM

When you submit your name, email, and phone number through the Service, we create a contact record in our own Follow Up Boss CRM account. This record is used by the Forward Flow team to manage follow-up communications with you. This is a first-party use of your data within our own CRM.

4.2 Service Providers

We may share your information with trusted third-party vendors who assist us in operating the Service, including:

  • Cloud hosting and infrastructure providers
  • Email delivery providers
  • SMS/communications platforms
  • Analytics services

These providers are contractually obligated to use your information only as directed by us and to maintain appropriate security measures.

4.3 Legal Requirements

We may disclose your information if required to do so by law, in response to a valid subpoena, court order, or governmental request, or to protect the rights, property, or safety of Forward Flow, our users, or others.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via the email address on file before your data becomes subject to a different privacy policy.

4.5 No Sale of Personal Data

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by law. Specifically:

  • Contact information (name, email, phone) is retained as long as you remain a contact in our CRM or until you request deletion
  • Report data is retained for up to 24 months for internal analysis
  • API keys are never stored and are immediately discarded after report generation
  • Analytics and log data may be retained for up to 12 months

6. Cookies and Analytics

The Service uses cookies and similar tracking technologies to enhance your experience and analyze usage patterns. Cookies are small data files placed on your device. We use:

  • Session cookies — to maintain your session state during an audit
  • Persistent cookies — to remember preferences across visits
  • Analytics cookies — to understand how users interact with the Service (e.g., via Google Analytics or similar)

You can control cookies through your browser settings. Disabling cookies may affect the functionality of the Service. We do not respond to Do Not Track browser signals at this time.

7. Data Security

We implement commercially reasonable technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

  • TLS/HTTPS encryption for all data in transit
  • Access controls limiting who can access stored data
  • No persistent storage of CRM API keys

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights with respect to your personal information:

  • Access — request a copy of the personal data we hold about you
  • Correction — request correction of inaccurate or incomplete data
  • Deletion — request that we delete your personal information, subject to certain legal obligations
  • Opt-out of marketing — unsubscribe from email marketing at any time via the unsubscribe link in any email, or by contacting us directly
  • Opt-out of SMS — reply STOP to any text message from us
  • Data portability — request your data in a structured, machine-readable format (where applicable)

To exercise any of these rights, please contact us using the information in Section 9. We will respond to verifiable requests within 30 days.

California residents may have additional rights under the California Consumer Privacy Act (CCPA). For more information, please contact us directly.

9. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately and we will take steps to delete such information.

10. Third-Party Links

The Service may contain links to third-party websites or services, including your CRM provider's documentation. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party services you access.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Effective Date” at the top of this page and, where appropriate, notify you by email. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Forward Flow

Website: forward-flow.com