Flazyn is a customer relationship management (CRM) service operated by HB&YM Pty Ltd (ABN 27 688 842 140), trading as Flazyn (“Flazyn”, “we”, “us”). Businesses use Flazyn to capture sales leads from their advertising and websites and to follow up with those leads by phone, WhatsApp, SMS and email. This policy explains what personal information we collect, how we use and share it, and your choices. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
1. Who this policy covers
- Customers: businesses and their team members who use Flazyn, and people who join our early-access programme.
- Leads: people whose details a customer receives, for example by submitting a lead form on Facebook, Instagram, LinkedIn, TikTok, Google or a customer’s website, or by messaging the customer on WhatsApp.
For lead information, the customer who collected it controls that information and Flazyn processes it on their behalf. If you are a lead, you can contact the business you submitted your details to, or contact us and we will pass on your request.
2. Information we collect
- Account information: name, email, phone, company, role, and password (stored only as a one-way hash). If you sign in with Google, we also receive your Google email and name.
- Lead information from connected platforms. When a customer connects an advertising account, we receive the answers a person submitted on that platform’s lead form. This is typically name, phone, email, city and any custom questions the advertiser added, plus form, ad and campaign identifiers. The sources are:
- Meta (Facebook and Instagram Lead Ads), via the Meta Graph API leadgen webhook and the
leads_retrievalpermission, only for the Pages the customer connects - LinkedIn Lead Gen Forms, via the LinkedIn Lead Sync API, for ad accounts the customer connects
- TikTok Lead Generation, via the TikTok API for Business, for advertiser accounts the customer connects
- website forms, WordPress, Google Forms and Zapier connections the customer installs
- Meta (Facebook and Instagram Lead Ads), via the Meta Graph API leadgen webhook and the
- Messages: WhatsApp, SMS and email messages exchanged between a customer and its leads through Flazyn, and their delivery status.
- Engagement information: when a customer shares a document or website link through Flazyn, or installs the Flazyn script on their own website, we record:
- pages viewed and time spent
- which pages of a shared document were read
- email opens and clicks
- Technical information: IP address, browser and device type, kept in server logs for security and troubleshooting.
3. How we use information
- to deliver new leads instantly to the customer that collected them and assign them to the right team member
- to let customers contact and follow up with their own leads, and to run the automations the customer configures
- to show customers reports and interest indicators about their own leads, including optional AI-generated summaries
- to send service notifications, such as new-lead alerts
- to secure the service, prevent abuse and fix problems, and to process subscription payments
Data received from Meta, LinkedIn or TikTok is used only to provide the lead-management service to the customer that connected the account. We do not sell it, use it for advertising, build profiles across customers, or share it with data brokers.
4. Who we share information with
We share information only with service providers that run parts of Flazyn for us, under contracts limiting them to that purpose:
- cloud hosting and storage (including Amazon Web Services)
- Vercel, to host the flazyn.com website
- Resend, to deliver messages sent through the contact and early-access forms on flazyn.com
- Twilio and the Meta WhatsApp Business Platform, to send and receive WhatsApp and SMS messages
- Twilio SendGrid, to send email
- Google Firebase, to deliver push notifications
- OpenAI, only when a customer uses AI features, to process the relevant text
- Stripe, for payments (we never store full card numbers)
We may also disclose information when required by law.
5. Overseas disclosure
Some of these providers store or process data outside Australia, mainly in the United States, and depending on configuration also the European Union or Singapore. We take reasonable steps, including contractual commitments, to ensure they handle it consistently with the Australian Privacy Principles.
6. Retention and security
- We keep customer and lead data while the customer’s account is active.
- Customers can delete individual leads at any time.
- When an account is deleted, its data is removed from active systems within 30 days and from backups within 90 days.
- Access tokens for connected platforms are deleted when the customer disconnects the integration.
- Data is encrypted in transit (HTTPS), passwords are hashed, and each customer’s data is isolated from every other customer’s.
7. Access, correction and deletion
You can ask for access to, correction of, or deletion of your personal information by emailing hello@flazyn.com. We respond within 30 days and do not charge for requests. Deletion instructions, including for data received via Facebook, are on our Data Deletion page.
8. Complaints
If you have a privacy concern, email hello@flazyn.com; we will investigate and reply within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au. If a data breach is likely to cause serious harm, we will notify affected people and the OAIC under the Notifiable Data Breaches scheme.
9. Children
Flazyn is a business tool and is not directed at children under 16.
10. Changes
We will post changes on this page and update the effective date; material changes will be emailed to customers.
Contact
HB&YM Pty Ltd trading as Flazyn · ABN 27 688 842 140 · 87 Eccles Cct, Macgregor ACT 2615, Australia · hello@flazyn.com