Privacy Policy

1. Introduction

FlowChat ("we", "our", or "us") operates a conversational marketing automation platform for Instagram and WhatsApp. This Privacy Policy explains how we collect, use, and protect information when you use our services at flowchat.chat.

2. Information We Collect

• Account information — name, email address, and authentication data via Clerk when you sign up.
• Instagram & WhatsApp data — comments, messages, and user IDs received via the Meta Platform when you connect your Instagram Business or WhatsApp Business account.
• Subscriber data — names, phone numbers, and Instagram IDs of people who interact with your automations.
• Usage data — automation configurations, broadcast content, chatbot knowledge bases, and interaction logs.

3. How We Use Your Information

• To provide and operate the FlowChat automation service.
• To send Instagram DMs and WhatsApp messages on your behalf as instructed by your automations and broadcasts.
• To train and improve AI chatbots you configure within the platform.
• To send transactional notifications about your account.
• To comply with Meta Platform policies and applicable laws.

4. Meta Platform Data

FlowChat uses the Meta Graph API to interact with Instagram and WhatsApp on your behalf. By connecting your accounts you agree to Meta's Privacy Policy and Platform Terms.

We only request permissions necessary to operate your automations. We do not sell Meta user data to third parties. Data received from the Meta Platform is used solely to provide the features you explicitly configure.

5. Data Sharing

We share data only with:

• Supabase — database hosting for storing your automation data securely.
• OpenAI — AI processing for comment analysis, message personalization, and chatbot responses. No personally identifiable information is retained by OpenAI beyond the request.
• Clerk — authentication and user management.
• Meta — to send messages on your behalf via Instagram and WhatsApp APIs.

We do not sell your data or your subscribers' data to any third party.

6. Data Retention

We retain your data for as long as your account is active. You may delete your account and all associated data at any time by contacting us. Subscriber data (Instagram/WhatsApp contacts) is retained only while you maintain an active subscription or until you delete it from your dashboard.

7. Security

All data is encrypted in transit (TLS) and at rest. Access tokens for Instagram and WhatsApp are stored securely and never exposed client-side. We use HMAC-SHA256 signature verification for all incoming Meta webhooks.

8. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction or deletion of your data.
• Disconnect your Instagram or WhatsApp account at any time.
• Export your subscriber and automation data.

9. Children's Privacy

FlowChat is not directed to children under 13. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via an in-app notice. Continued use of the service after changes constitutes acceptance.

11. Contact Us

For privacy questions or data requests, contact us at: ganeshitg904@gmail.com