ConvoFlow
Back to home

Privacy Policy

Effective Date: September 27, 2026

Company: ConvoFlow.ai

Introduction

This Privacy Policy describes how ConvoFlow.ai ("we," "our," "us") collects, uses, stores, and protects personal information from users ("you," "users") of our SaaS platform that enables creating and operating AI agents integrated with third-party services such as Google Drive, databases, WhatsApp, email, and AI model providers.

1. Information We Collect

  • Personal Information: Name, email, contact information, and billing details.
  • Usage Information: Platform interaction data, IP addresses, and device/browser details.
  • Integration Data: Data from Google Drive, databases, email, Facebook, Instagram, Messenger, and WhatsApp integrations as configured and authorized by you.
  • Uploaded Data: Documents, files, and data you provide to create or operate AI agents.

2. How We Use Your Information

  • Providing and improving the ConvoFlow platform and related services.
  • Account administration, billing, and customer support.
  • Communicating with you via WhatsApp, email, or platform notifications (as configured by you).
  • Creating and operating customized AI agents based on your data and configurations.

3. Data Sharing

We do not sell your personal information. Data may be shared with third-party providers essential for platform operation, including:

Cloud storage and productivity providers (e.g., Google Drive)

We securely connect to services you authorize to access files for agent context. Data is transmitted using industry-standard authorization (e.g., OAuth 2.0 where applicable) and encrypted in transit.

AI technology providers (e.g., Gemini, Deepseek, OpenAI, Meta)

Conversations and uploaded content may be processed by selected AI models to generate responses. We transmit data securely and only share information necessary for processing.

Communication providers (e.g., WhatsApp, email services)

When you configure messaging integrations, messages are routed through those providers using their APIs. Where possible, we support encryption and only share data required for delivery.

4. Data from Meta Platforms (Facebook, Instagram, Messenger and WhatsApp)

When a business connects a Facebook Page, an Instagram professional account, Messenger, or a WhatsApp Business account to ConvoFlow, we access data through Meta's official APIs, only with the permissions that business grants. This may include:

  • Page and account information: Page or account ID, name, profile picture, and the access tokens needed to run the integration.
  • Messages and conversations: Messages, attachments, and related metadata (such as timestamps and message IDs) exchanged between the business and people who contact it through Messenger, Instagram Direct, or WhatsApp.
  • Contact profile information: The name, profile picture, and app-scoped ID (or phone number, on WhatsApp) of people who message the business.
  • Comments and mentions: Comments on the connected Facebook Page or Instagram posts, when the business turns on those automations.

We use this data only to provide the service the business has set up: receiving and replying to messages, running automated flows and AI agents, handing conversations to human agents, and showing conversation history and reports to the business. We do not sell data received from Meta, use it for advertising, or share it with data brokers. When an AI model generates a reply, we send only the information needed for that reply. Our use of information received from Meta APIs follows the Meta Platform Terms and Developer Policies.

We keep Meta Platform data while the integration is active. When a business disconnects its account or closes its ConvoFlow account, we revoke the related access tokens and delete the associated data within 30 days, unless the law requires us to keep it longer. Anyone who has interacted with a business through ConvoFlow can ask us to delete their data at any time.

See how to request data deletion

5. Data Security

We implement security measures and best practices to protect user data from unauthorized access or breaches, including access controls designed to help isolate customer data and limit access based on role and authorization.

6. Data Retention

We retain data only as long as necessary to fulfill the purposes outlined in this policy or as required by law. You may request deletion of your account and associated information at any time by following our Data Deletion Instructions (https://convoflow.ai/data-deletion), and you may request a data report by contacting us.

7. User Rights

You may have rights to access, correct, delete, or restrict the processing of your personal information, and you may withdraw consent where applicable. If you need help managing your information, contact us.

8. Third-Party Integrations

Your interactions with third-party services integrated with ConvoFlow (e.g., Google, Meta — including Facebook, Instagram, Messenger and WhatsApp — and email providers) are governed by their respective privacy policies.

9. Changes to This Privacy Policy

We may update this policy periodically. Material changes will be communicated clearly through the Service or other reasonable means.

10. Contact Information

For questions regarding privacy practices, contact us at:

Email: info@convoflow.ai