Privacy Policy

Flownexa provides software that lets businesses (“our customers”) send and receive WhatsApp messages through Meta's WhatsApp Business Platform.

• For enquiries on this website and for our customers' user accounts, we decide how data is used.
• For the contacts and messages a business keeps in Flownexa, that business decides how they are used; we process them on its behalf and only to provide the service.

• Enquiry form: name, business name, mobile number, email (optional), city, type of business, your message and the time you gave consent to be contacted.
• User accounts: name, email address, sign-in information and, if you turn it on, a 2-step sign-in factor.
• Business data our customers add: contacts (names, phone numbers, tags, consent records), WhatsApp messages and their delivery status, templates, and for car showrooms vehicle and booking details.
• Technical data: a one-way hash of the IP address used for rate limiting, the browser type, and logs needed to run and secure the service.

• To reply to your enquiry and arrange a demo, by WhatsApp, phone or email as you agreed.
• To provide the platform: sending and receiving messages, reminders, bookings, campaigns and reports for our customers.
• To keep the service secure, prevent abuse and fix problems.

• We do not sell personal data or share it for advertising.
• We do not use one business's contacts for another business or for our own marketing.
• We do not send marketing to people who opted out. Sending STOP to a business's number opts you out of its marketing.

We use these providers to run the service. They process data only on our instructions:

• Meta Platforms (WhatsApp Business Platform) to deliver WhatsApp messages.
• Supabase (database and sign-in) and Vercel (hosting). Their servers may be outside India.
• An email provider to send sign-in and notification emails.
• If a business turns on the AI assistant, Anthropic processes the customer's typed message to draft a reply.

Each organization's data is kept separate in the database. Access is limited by roles, sign-in can be protected with 2-step sign-in, connection secrets are encrypted, and important changes are written to an audit log.

Enquiries are kept while we are in touch with you and deleted on request. Business data is kept while the business uses Flownexa and deleted when it asks us to, within 30 days, unless the law requires us to keep it longer.

You can ask to see, correct or delete your information by writing to getflownexa@gmail.com. If a business contacted you through Flownexa, you can also ask that business directly. How to request deletion: Data Deletion Instructions.

We will update this page when our practices change, and change the date at the top.