Privacy Policy for ConnectFlow Technology

1. Information We Collect

• Business Information: Company name, business registration details, trade license copy, and official email addresses provided during registration.
• WhatsApp Business Data: the WhatsApp Business Account identifiers and access credentials you authorise us to hold so that ConnectFlow can send and receive messages on your behalf.
• End-User Interactions: Phone numbers and incoming/outgoing message logs required for conversational automation and inbox management.
• Account Information: your name and email address, and your Google account identifier if you sign in with Google. When you apply for the Controlled Beta: business name, WhatsApp number and country, and, if you choose to give them, business category, website and business page.
• Sign-in and Security Records: for each sign-in, the time, device type, browser, operating system and IP address, and security events such as failed sign-ins. These keep your account secure and let a device be signed out. Passwords are never stored in readable form.

2. How We Use Data

• To provide conversational automation and shared inbox workflows.
• To keep your account secure, and to make sure a message or action is not duplicated.
• AI Processing: some features are assisted by artificial intelligence, and providing them may involve third-party AI service providers. These are used only to understand what a customer is asking for, so that the right reply can be suggested, and to help understand the answers a business owner gives during onboarding, which the owner confirms or corrects before they are saved. Your data is never used to train any AI provider's models.

3. Data Isolation and Protection

• Every customer's data is kept separate from every other customer's. You can reach your own organisation's data and nothing else, and that boundary is enforced automatically on every request rather than relied upon page by page.
• We do not sell, rent, or monetize your business or end-user data.

4. Data Retention and Deletion API

• Active data is stored securely in our cloud infrastructure.
• Sign-in and security records are kept as a security audit trail and are not used for marketing.
• Users may request complete data deletion at any time by contacting support at [email protected]. Upon request, all associated message logs and credentials will be permanently purged within 30 days.

5. Meta Policy Compliance

ConnectFlow Technology is a Verified Meta Tech Provider and operates through Meta's Official WhatsApp Cloud API. We follow Meta's WhatsApp Business policies and data privacy standards.