Privacy Policy

1. What WhatsFlow AI is

WhatsFlow AI is a platform that lets a business run its WhatsApp Business number as an AI-assisted customer support inbox. When a customer messages a business using WhatsFlow AI, their message may be answered automatically using information the business has uploaded, or handed off to a member of that business's team. This policy explains what information we collect and how it's used, for both the businesses that use WhatsFlow AI ("tenants") and the customers who message them.

2. Information we collect

From businesses using WhatsFlow AI:

• Business name, industry, and the owner's name, email address, and password (stored as a salted hash, never in plain text)
• The WhatsApp Business phone number and Meta API credentials used to send and receive messages
• Documents submitted during registration (e.g. a payment receipt or business registration document) for admin review
• FAQs, policies, and other content uploaded to build the business's AI knowledge base

From customers messaging a business through WhatsFlow AI:

• WhatsApp phone number and profile name
• The content of messages sent to and received from the business
• Basic interaction history (when a conversation started, whether it was resolved by AI or a human)

3. How we use this information

• To deliver and receive WhatsApp messages between a business and its customers
• To generate AI-drafted replies, grounded only in the business's own uploaded content - never invented or guessed
• To hand a conversation off to a human team member when the AI can't find a confident answer
• To let a business track leads and customers generated through their WhatsApp conversations
• To review and approve new business registration requests before an account goes live

4. Third parties we share data with

WhatsFlow AI relies on a small number of service providers to function. Message content and related data may pass through:

• Meta (WhatsApp Business Platform) - to send and receive WhatsApp messages
• Anthropic - to generate AI-drafted replies from conversation context and the business's knowledge base
• OpenAI - to power search over a business's uploaded knowledge base (document embeddings)
• SendGrid - to send optional one-time verification codes by email, where enabled

We do not sell personal information to anyone, and we do not share it with third parties for their own marketing purposes.

5. Data retention

Conversation and account data is retained for as long as a business's account remains active, so that conversation history stays available to the business and its customers. A business owner can request deletion of their account and associated data at any time by contacting us using the details below.

6. Security

Passwords are never stored in plain text. Access to a business's data is restricted to that business's own account and to the platform administrators who review registration requests. Communication with WhatsFlow AI is encrypted in transit (HTTPS).

7. Your rights

If you're a customer who has messaged a business using WhatsFlow AI and want to know what information is held about you, or want it deleted, you're welcome to contact that business directly, or reach us using the details below and we'll help route your request.

8. Contact

Questions about this policy or a request relating to your data can be sent to info@kcpas.in.