Legal

Privacy Policy

Last updated: 1 June 2026

This Privacy Policy is provided as a professional template based on how the Infoflow platform handles data. Please have it reviewed by qualified legal counsel and adapted to your jurisdiction before publishing.

1. Introduction

This Privacy Policy explains how Infoflow ("Infoflow", "we", "us", "our") collects, uses, discloses and protects personal data when you use the Infoflow WhatsApp Business CRM and automation platform (the "Service"). By creating an account or using the Service, you agree to the practices described here.

2. Information we collect

  • Account data: your name, email address and password (stored hashed).
  • Business profile: your business / brand name and onboarding details.
  • WhatsApp Business credentials: access tokens, WhatsApp Business Account (WABA) and phone-number identifiers obtained when you connect via Meta.
  • Contacts you upload or import: names, phone numbers, tags, documents and notes about your customers.
  • Message content and logs: messages sent and received through your connected WhatsApp number, including delivery and read status.
  • Payment data: billing details processed by our payment provider (Razorpay). We do not store full card numbers.
  • AI prompt content: text you submit to generate templates or workflows, which is sent to our AI providers.
  • Usage and device data: analytics, log data, IP address, browser/device information and cookies.
  • Push subscription tokens: for web push notifications, where enabled.

3. How we use your information

  • To provide, operate and maintain the Service.
  • To send and receive WhatsApp messages, campaigns and automations on your behalf.
  • To process subscriptions, credits, payments and invoices.
  • To provide AI-assisted content generation.
  • To deliver support, notifications and product updates.
  • To monitor, secure and improve the Service and prevent abuse.
  • To comply with legal obligations.

4. Legal bases & consent

We process personal data on the bases of contract performance, our legitimate interests in operating and improving the Service, your consent (where required), and compliance with legal obligations. Where we rely on consent, you may withdraw it at any time.

5. Third-party sub-processors

We share data with trusted service providers strictly to operate the Service:

Provider Purpose
Meta Platforms WhatsApp Business Cloud API — sending/receiving messages
Razorpay Payment processing and billing
OpenAI AI content generation
Google Gemini AI and Google sign-in (OAuth)
OneSignal Web push notifications
Pusher Real-time messaging infrastructure

Each provider processes data under its own privacy terms. We encourage you to review their policies.

6. Data sharing & disclosure

We do not sell your personal data. We may disclose data to comply with the law, enforce our agreements, protect rights and safety, or in connection with a business transfer (e.g. merger or acquisition), subject to appropriate safeguards.

7. Data retention

We retain personal data for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes and enforce agreements. You may request deletion as described below.

8. Security

We apply technical and organisational measures including multi-tenant data isolation, role-based access control, encryption of data in transit and hashed password storage. No method of transmission or storage is 100% secure, but we work to protect your data.

9. International transfers

Your data may be processed in countries other than your own, including where our sub-processors operate. We take steps to ensure appropriate safeguards are in place for such transfers.

10. Your rights

  • Access, correct or update your personal data.
  • Request deletion or export of your data.
  • Object to or restrict certain processing.
  • Withdraw consent where processing is based on consent.

To exercise these rights, contact us at info@startupmatricks.in or visit our Data Deletion page.

11. Your responsibilities as a sender

When you use Infoflow to message your contacts, you act as the data controller for that contact data. You are responsible for obtaining lawful consent (opt-in) to message your contacts and for complying with WhatsApp's Business Messaging Policy, Meta's policies and applicable laws. See our Acceptable Use Policy.

12. Children's privacy

The Service is not directed to individuals under 18. We do not knowingly collect personal data from children.

13. Cookies

We use cookies and similar technologies as described in our Cookie Policy.

14. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or by email. Continued use after changes constitutes acceptance.

15. Contact us

For privacy questions or to reach our grievance officer, email info@startupmatricks.in.