Privacy Policy

Flownexa provides software that lets businesses (“our customers”) send and receive WhatsApp messages through Meta's WhatsApp Business Platform.

• For enquiries on this website and for our customers' user accounts, we decide how data is used.
• For the contacts and messages a business keeps in Flownexa, that business decides how they are used; we process them on its behalf and only to provide the service.

• Enquiry form: name, business name, mobile number, email (optional), city, type of business, your message and the time you gave consent to be contacted.
• User accounts: name, email address, sign-in information and, if you turn it on, a 2-step sign-in factor.
• Business data our customers add: contacts (names, phone numbers, tags, consent records), WhatsApp messages and their delivery status, templates, and for car showrooms vehicle and booking details.
• Technical data: a one-way hash of the IP address used for rate limiting, the browser type, and logs needed to run and secure the service.

• To reply to your enquiry and arrange a demo, by WhatsApp, phone or email as you agreed.
• To provide the platform: sending and receiving messages, reminders, bookings, campaigns and reports for our customers.
• To keep the service secure, prevent abuse and fix problems.

• We do not sell personal data or share it for advertising.
• We do not use one business's contacts for another business or for our own marketing.
• We do not send marketing to people who opted out. Sending STOP to a business's number opts you out of its marketing.

We use these providers to run the service. They process data only on our instructions, and their servers may be outside India:

• Vercel, to host this website and the platform.
• Supabase, for the database and sign-in.
• Netlify, for the AI assistant's backend.
• Meta Platforms (WhatsApp Business Platform), to deliver WhatsApp messages.
• Anthropic, only when a business turns on the AI assistant: it processes the customer's typed message to draft a reply.

Businesses decide what they keep in Flownexa. A clinic, for example, should keep only appointment details in messages and avoid diagnoses or medical records. Each business is responsible for the lawful use of the data it keeps in Flownexa.

Each organization's data is kept separate in the database. Access is limited by roles, sign-in can be protected with 2-step sign-in, connection secrets are encrypted, and important changes are written to an audit log.

Enquiries are kept while we are in touch with you and deleted on request. Business data is kept while the business uses Flownexa and deleted when it asks us to, within 30 days, unless the law requires us to keep it longer.

You can ask to see, correct or delete your information by writing to getflownexa@gmail.com. If a business contacted you through Flownexa, you can also ask that business directly. How to request deletion: Data Deletion Instructions.

If you have a complaint about how your information is handled, write to our grievance contact at getflownexa@gmail.com.

We acknowledge a grievance within 2 business days and resolve it within 30 days.

We will update this page when our practices change, and change the date at the top.