FlowXperia

Privacy Policy

Effective date: 22 May 2026 · Last updated: 22 May 2026

FlowXperia ("FlowXperia", "we", "us") provides a multi-tenant WhatsApp Business automation platform. This policy explains what we collect, how we use it, and the rights you have as a business customer and as an end-user (a person who messages a FlowXperia-powered business on WhatsApp).

1. Who we are

FlowXperia is operated from Kochi, Kerala, India. Contact: support@flowxperia.com. Our service is exposed at clients.flowxperia.com(business customer console) and integrates with Meta's WhatsApp Business Cloud API on behalf of each business customer.

2. Information we collect

From business customers (account holders)

  • Account identifiers: name, email, company name, role.
  • Authentication metadata managed by Supabase Auth.
  • Billing details (managed by Razorpay; we store only transaction IDs and amounts).
  • WhatsApp Business Account ID, phone number ID, and access tokens captured during Embedded Signup.
  • AI agent configuration, knowledge base content, sales team roster you upload.

From end-users messaging your business on WhatsApp

  • WhatsApp display name and phone number (received from Meta).
  • The text, media, and timestamps of messages exchanged with the business.
  • Lead qualification data the end-user voluntarily provides in the conversation.

Automatically

  • Webhook event payloads from Meta (raw events are retained for 30 days for debugging, then purged).
  • Application logs (request paths, timestamps, error traces) — no message bodies.

3. How we use the information

  • To operate the conversational AI agent on behalf of the business customer.
  • To route and persist conversations so that authorised business customer staff can view, reply, and follow up.
  • To deliver scheduled notifications (e.g., meeting bookings) to sales staff via email and WhatsApp.
  • To process payments and maintain the prepaid wallet balance for each business customer.
  • To detect and prevent abuse, fraud, and policy violations.

4. AI processing

Inbound messages may be sent to OpenAI's API to generate reply suggestions. Per OpenAI's API data usage policy, content sent through their API is not used to train OpenAI models. We do not enable any opt-in data sharing with OpenAI for model improvement.

5. Sharing & sub-processors

  • Meta Platforms, Inc. — message delivery via WhatsApp Business Cloud API.
  • Supabase — Postgres database, authentication, and file storage (Singapore region).
  • OpenAI — language model inference for AI replies (US region, API path only).
  • Razorpay — payment processing for wallet top-ups.
  • Vercel — application hosting (Mumbai region).
  • Resend — transactional email delivery (when enabled).

We do not sell or rent personal information to third parties.

6. Data retention

  • Conversations, leads, and message history: retained until the business customer deletes them or closes their account.
  • Raw Meta webhook events: 30 days, then automatically purged.
  • Account billing records: retained for 7 years to meet Indian tax compliance.
  • Authentication logs: 90 days.

7. Your rights

End-users can request access to or deletion of their personal information by writing to support@flowxperia.com or replying STOP in WhatsApp (handled by the operating business). Business customers can export or delete their tenant data from the dashboard or by contacting support.

8. Security

We encrypt data in transit using TLS 1.2+ and at rest using AES-256. Access tokens are stored encrypted at the database column level. Access to production data is restricted to authorised personnel with two-factor authentication.

9. Children

FlowXperia is a business-to-business tool and is not directed at children under 13. End-users messaging a FlowXperia-powered business should be 13 or older per WhatsApp's Terms.

10. Cross-border transfers

Data may be processed outside India (e.g., OpenAI in the US, Supabase in Singapore). Such transfers are made under contractual safeguards consistent with the Digital Personal Data Protection Act, 2023.

11. Changes

We will post material changes to this policy on this page with a new effective date. Continued use of FlowXperia after a change constitutes acceptance.

12. Contact

Questions, requests, or concerns: support@flowxperia.com.