Privacy Policy

Last updated: October 26, 2026

1. Who We Are

This Privacy Policy explains how Hispanic Labs, LLC (“we,” “us,” “our”), a Florida company that operates GrowthFlow360 (growthflow360.com and clients.growthflow360.com), collects, uses, and shares personal information. Questions can be sent to sebastian@hispaniclabs.com.

2. Our Two Roles

• As a business/controller: for information about our clients, prospects, and visitors to growthflow360.com.
• As a service provider/processor: for information about visitors, leads, customers, and reviewers on websites and tools we operate for our clients (for example, ChatFlow360 conversations, form submissions, and FeedbackFlow360 review requests). In this role we process data on our client’s behalf and according to their instructions. If you are a visitor or customer of one of our clients, please contact that business about your data; we will assist them in responding.

3. Information We Collect

Account and client information

Name, business name, email address, phone number, billing details (processed by payment providers), login records (including magic-link sign-ins), and information you provide about your business.

Messages, voice, and change requests

Content of emails, SMS, WhatsApp messages, dashboard chats, and voice calls you send us, including phone numbers, attachments, voice recordings, and AI-generated transcripts and summaries, plus related metadata such as timestamps.

Client website visitor and lead data (processed for clients)

Information visitors submit through chat, forms, or review requests (such as name, email, phone, and message content), and related technical data, which may be forwarded to the client’s CRM or email. This also includes leads clients receive through Facebook/Instagram Lead Ads on Pages they connect, texts and voicemails received through call-tracking and business phone numbers, and attribution details such as the landing page, referring site, UTM campaign tags, and ad click IDs (kept for up to 90 days to credit the first visit that led to an inquiry).

Files, subscriptions, and shared documents

Images and files you upload with change requests; your email address and confirmation records if you subscribe to our articles (you can unsubscribe with one click); and, when we share a proposal link with you, a record that the link was viewed, including IP address, browser type, and time.

Cookies, analytics, and device data

IP address, browser and device type, pages viewed, referring URLs, and similar data collected through cookies, pixels, and tools such as Google Analytics, Google Tag Manager, and Meta. On some sites we use Google Consent Mode, which limits analytics and advertising storage until consent is given where that setting applies. You can also control cookies through your browser settings.

4. How We Use Information

• To provide, operate, and support the Services, including building and updating websites and processing change requests;
• To route leads, send review requests, and deliver notifications on behalf of clients;
• To communicate with you about your account, approvals, billing, and support;
• To secure the Services, verify requests, and prevent fraud and abuse;
• To analyze and improve performance and features;
• To send marketing communications where permitted (you can opt out at any time);
• To comply with legal obligations and enforce our terms.

5. AI Processing

We use AI models from third-party providers to interpret requests, draft content, transcribe and summarize voice and text (including voice input in the client dashboard, where audio is sent to the AI provider for transcription and is not stored by us), and power visitor chat. Data is sent to these providers only as needed to perform these functions. We do not sell personal information, and we do not use your data or your customers’ data to train public AI models. We select providers whose terms restrict use of submitted data for training their models when available through our account configuration. Risky changes are subject to human review.

6. How We Share Information

We share personal information only as described here:

• Subprocessors and service providers who help us operate the Services, such as Vercel (hosting), Neon (database), Twilio (SMS/WhatsApp/voice), Microsoft and Resend (email), Vercel Blob (file storage), call-tracking and phone providers (such as 800.com), WP Engine (WordPress hosting), Cloudflare (network and security), Google Analytics/Tag Manager (analytics), Meta (advertising/analytics), and AI model providers. They may use the data only to provide services to us.
• Our clients, when we process data on their behalf (for example, forwarding leads to their CRM).
• Our sister agency, Hispanic Market Advisors (HMA), where needed to deliver services you requested.
• Integrations you enable, such as CRMs, intake, and email-marketing platforms (for example, Keap, LeadDocket, Constant Contact, and Square), outgoing webhooks to systems you choose, and AI assistants you connect to your account. Once data reaches those services, their privacy policies apply.
• Directory and profile pages: some pages and ads we operate (for example, Abogacía) feature specific businesses. When you submit a form about a business, your information goes only to that business, and we do not share it with other businesses.
• Legal and safety: to comply with law, respond to lawful requests, or protect rights and safety.
• Business transfers: in connection with a merger, acquisition, or sale of assets.

7. SMS and WhatsApp Data

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with or sold to any third parties. Messaging data is shared only with providers (such as Twilio) needed to deliver messages. Reply STOP to opt out or HELP for help. Message and data rates may apply. See our Terms of Service for full messaging terms.

8. Data Retention

We keep personal information for as long as needed to provide the Services, maintain your account, comply with legal, tax, and accounting obligations, resolve disputes, and enforce agreements. Data processed for clients is retained according to client instructions and our agreement with them. When no longer needed, we delete or de-identify it within a reasonable period.

9. Security

We use reasonable administrative, technical, and physical safeguards, such as encrypted connections, access controls, and passwordless (magic-link) authentication. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your Privacy Rights (California and Other States)

Depending on where you live (for example, California under the CCPA/CPRA, and other U.S. states with privacy laws), you may have the right to:

• know or access the personal information we hold about you;
• correct inaccurate information;
• delete your information;
• receive a portable copy;
• opt out of “sale” or “sharing” for cross-context behavioral advertising, and of targeted advertising or profiling;
• not be discriminated against for exercising your rights.

We do not sell personal information. Our use of advertising and analytics cookies (such as Meta and Google) may be considered “sharing” under some laws; you can limit this through your browser or device settings, and we honor Global Privacy Control signals where required. To exercise rights, email sebastian@hispaniclabs.com. We will verify your request and respond within the time required by law. You may use an authorized agent, and you may appeal a decision by replying to our response. If your data was collected by one of our clients, we will refer your request to that client.

11. Children’s Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

12. Health Information and HIPAA

Hispanic Labs is not a HIPAA covered entity. Some of our clients are healthcare, legal, or insurance businesses. Clients should not send, and should configure their websites and chat tools not to collect, protected health information (PHI) through the Services unless we have signed a Business Associate Agreement (BAA) with them covering that use. Website visitors should avoid sharing sensitive health, legal, or financial details in chat or forms.

13. International Users

We are based in the United States and our Services are intended for U.S. businesses. If you access the Services from outside the U.S., your information will be transferred to and processed in the United States and other countries where our providers operate, which may have different data-protection laws.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will post changes here and update the “Last updated” date, and notify you of material changes where required.

15. Contact Us

Hispanic Labs, LLC (operator of GrowthFlow360)
Florida, USA
Email: sebastian@hispaniclabs.com