Privacy Policy
Last updated: 11 May 2026
AutoFlow Labs (“we”, “our”, “us”) operates AutoFlow Chat (chat.autoflowlabs.in), a software-as-a-service product that helps small and medium businesses manage WhatsApp customer conversations. This Privacy Policy explains what data we collect, how we use it, and your rights.
If you have questions, email us at support@autoflowlabs.in.
1. Information We Collect
1.1 Account information
When you sign up, we collect:
- Your phone number (for OTP-based authentication)
- Your business name (for display in the product)
- Optional: industry, business address, operating hours, alternate contact email/phone
1.2 WhatsApp Business connection data
If you connect your WhatsApp Business number to AutoFlow Chat, Meta provides us with:
- Your WhatsApp Business Account ID and Phone Number ID
- A long-lived access token (encrypted at rest using AES-256-GCM)
- Display phone number, verified business name, message quality rating, and messaging tier
1.3 Customer conversation data
When your customers message your WhatsApp Business number, we receive and store on your behalf:
- The customer’s WhatsApp ID and display name (where shared by them)
- Message content (text, images, documents, voice notes, location, etc.)
- Message timestamps and delivery status
- Media files (images, documents) downloaded to durable storage so they remain accessible after Meta’s 5-minute expiry window
We process this data only to provide the AutoFlow Chat service to you. We do not read or analyze conversations for any other purpose.
1.4 Technical information
We automatically collect:
- IP address and approximate location
- Browser type and operating system
- Pages visited and actions taken within AutoFlow Chat
- Error logs (without sensitive content)
2. How We Use Information
We use collected information to:
- Authenticate you and keep your account secure
- Deliver your customer messages to your inbox in real time
- Send OTP verification codes via WhatsApp
- Provide product features (templates, broadcasts, analytics, AI-assisted replies)
- Improve product reliability and fix bugs
- Communicate with you about your account
- Comply with legal obligations under Indian law
We never sell your data or your customers’ data to third parties. We never use your conversation content to train shared AI models or for marketing purposes.
3. Data Sharing
We share data only with these categories of service providers, who process it solely to provide our service:
- Meta Platforms, Inc. — for WhatsApp Business Cloud API. Subject to Meta’s terms and privacy policy.
- Cloudflare, Inc. — for media file storage (images and documents from your conversations).
- Hostinger — for hosting infrastructure (servers in EU and India regions).
- AI inference providers (e.g., Anthropic, OpenAI) — for AI-assisted reply features, when enabled by you. Conversation snippets are sent to generate replies. We do not use these providers for any data not directly required to generate a reply.
- Payment processors (e.g., Razorpay) — when you subscribe to a paid plan, your payment details are processed directly by them, not stored by us.
We do not share data with advertisers or data brokers.
If required by lawful order from Indian authorities, we may disclose information to comply with applicable law. We will notify you of such disclosures unless prohibited by law.
4. Data Storage and Security
- All data is stored in PostgreSQL databases on servers in EU/India regions.
- Sensitive credentials (access tokens, passwords) are encrypted at rest using industry-standard AES-256-GCM.
- All data is transmitted over encrypted HTTPS connections.
- We log access to sensitive systems and review for anomalies.
- We follow industry-standard security practices but cannot guarantee absolute security.
5. Data Retention
- Active accounts: We retain your data for as long as your account is active.
- Deleted accounts: When you delete your account, we delete your data within 30 days. See our Data Deletion page for details.
- Conversation history: Customer conversations are retained for the lifetime of your account or until you explicitly delete them.
- Backups: Encrypted backups may persist for up to 90 days after deletion for disaster recovery, after which they are permanently destroyed.
- Legal hold: We may retain data longer if required by law (e.g., tax records).
6. Your Rights
Under the Digital Personal Data Protection Act, 2023 (India) and similar laws, you have the right to:
- Access — request a copy of the personal data we hold about you
- Correction — update or correct inaccurate data
- Deletion — request that we delete your data (see Data Deletion page)
- Portability — export your data in a machine-readable format
- Withdraw consent — disconnect WhatsApp, downgrade plan, or delete your account at any time
- Grievance redressal — contact us at support@autoflowlabs.in with any complaint. We aim to respond within 7 business days.
If you are not satisfied with our response, you may approach the Data Protection Board of India under applicable law.
7. Children
AutoFlow Chat is not intended for users under 18. We do not knowingly collect information from minors. If you believe a minor has provided us with information, contact us and we will delete it.
8. Cookies and Tracking
We use minimal cookies, limited to:
- Authentication session cookies (required for login)
- Preference cookies (e.g., remembering your language and your “Trust this device” choice)
We do not use third-party tracking, advertising cookies, or analytics that identify individuals.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified via email or an in-app notice at least 30 days before they take effect. The “Last updated” date at the top reflects the most recent version.
10. Contact
For questions, data requests, or grievances:
AutoFlow Labs
Hyderabad, Telangana, India
Email: support@autoflowlabs.in
AutoFlow Chat is a service operated by AutoFlow Labs.