S
WiFlow™Privacy & Data Security
GDPR, DPDP & CCPA Compliant • Version 2.4

Privacy Policy & Data Protection

At WiFlow™, we believe enterprise messaging demands the highest standard of data privacy, multi-tenant isolation, and transparent data processing.

1Information We Collect

When you register, configure, and use WiFlow, we collect the following categories of data:

  • Account & Organization Information: Your name, business email address, company name, phone number, billing address, and account credentials.
  • WhatsApp Integration Credentials: Meta WhatsApp Business Account (WABA) IDs, Phone Number IDs, and system user tokens necessary to establish API webhooks.
  • Customer CRM & Transaction Records: End-user phone numbers, customer names, conversation tags, appointment booking history, and custom workflow attributes.
  • Technical Telemetry: IP addresses, browser types, session activity logs, and performance metrics utilized solely for service health and anti-abuse safeguards.

2How We Process & Use Customer WhatsApp Messages

We process incoming and outgoing WhatsApp messages exclusively to deliver your configured visual workflows, AI chatbot replies, appointment confirmations, and shared inbox chats.

🛡️ Zero Data Selling Guarantee: WiFlow never sells, rents, monetizes, or shares your customer phone numbers or conversation transcripts with advertising brokers or third-party data aggregators.

3Enterprise AI Training & Privacy Policy

We adhere to strict enterprise AI privacy standards. Your private business conversations and customer chats are NEVER used to train public foundation AI models.

When you upload business PDF catalogs or knowledge base documents to power your autonomous AI chatbots, that data is indexed inside an isolated, encrypted vector database dedicated exclusively to your workspace tenant.

4Data Security, Encryption & Storage

We implement comprehensive technical and organizational safeguards to protect customer data:

  • Encryption in Transit: All HTTP API traffic, webhook payloads, and browser sessions utilize TLS 1.3 encryption.
  • Encryption at Rest: Meta system access tokens, webhook secrets, and database volumes are encrypted using AES-256 standard encryption.
  • Multi-Tenant Data Isolation: PostgreSQL schemas and foreign keys strictly enforce tenant workspace boundaries, preventing cross-tenant access.
  • Role-Based Access Control (RBAC): Granular permissions ensure only authorized team members within your organization can inspect customer conversation records.

5Your Rights (GDPR & Data Protection)

Depending on your jurisdiction (including the EU General Data Protection Regulation and the Indian Digital Personal Data Protection Act), you have the right to:

  • Access: Request a full export copy of your account profile and customer CRM records.
  • Rectification: Correct or update any inaccurate business details.
  • Erasure ("Right to be Forgotten"): Request complete deletion of your account and associated database records upon subscription termination.
  • Data Portability: Export contacts and booking logs in standard CSV and JSON formats.

6Data Protection Officer & Privacy Inquiries

For privacy inquiries, data subject access requests, or regulatory communications, please reach out directly to our designated Data Protection Officer:

[email protected] • Data Protection Officer, WiFlow Technologies