Privacy Policy

1. Introduction

Welcome to AI Botflow (“we,” “our,” or “us”), accessible via https://dash.aibotflow.in and https://aibotflow.in. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you access and use our WhatsApp Business API, Facebook Messenger, and Instagram DM CRM services.

2. Information We Collect

We collect information necessary to provide and optimize our multi-channel CRM services:

• Account Registration Information: Your name, business name, email address, phone number, and password credentials.
• Meta & WhatsApp Channel Information: WhatsApp Business Account (WABA) IDs, Phone Number IDs, Facebook Page IDs, and Instagram Business Account details when connected via Meta OAuth.
• Customer Communications Data: Message texts, media attachments, sender identifiers (phone numbers, Facebook PSIDs, Instagram scoped IDs), and timestamps processed through connected webhooks.
• Billing & Payment Information: Transaction IDs, subscription plans, and order details. All credit/debit card, UPI, and net banking payments are securely processed by our authorized payment gateway partner, Razorpay Software Private Limited. We do not store raw card numbers or CVVs on our servers.

3. How We Use Your Information

The collected information is used strictly to:

• Deliver CRM inbox features, message syncing, and two-way conversations across WhatsApp, Facebook Messenger, and Instagram DMs.
• Execute automated flows, auto-replies, and broadcast campaigns authorized by your account.
• Process billing and subscription renewals via Razorpay.
• Ensure security, fraud prevention, and compliance with Meta Platform Terms and WhatsApp Business Messaging Policies.

4. Payment Processing (Razorpay)

We use Razorpay for processing online subscription payments. Razorpay complies with the Payment Card Industry Data Security Standard (PCI-DSS) and follows standard encryption protocols. Your purchase transaction data is stored only as long as necessary to complete your purchase transaction.

5. Data Security & Storage

We implement rigorous technical and organizational security measures:

• Sensitive access tokens (Facebook Page tokens, WhatsApp system tokens) are encrypted in the database using industry-standard AES-256-GCM encryption.
• All communication between your browser and our servers, as well as with Meta Graph APIs and Razorpay APIs, is encrypted in transit using TLS 1.3 / SSL.
• Access control is strictly partitioned using multi-tenant Row Level Security (RLS).

6. Third-Party Services & Meta Compliance

Our services integrate directly with Meta Platforms, Inc. (WhatsApp Cloud API, Facebook Graph API, Instagram Graph API). Your usage is subject to the respective Meta Terms and WhatsApp Business Messaging Policy. We do not sell, rent, or trade your personal data to any third-party advertisers.

7. User Rights & Data Deletion

You have the right to request access to, update, or delete your personal data stored within AI Botflow at any time. You can disconnect social channels directly from your CRM settings, or submit a formal data deletion request via our Data Deletion page or by emailing support@aibotflow.in.

8. Contact Us

If you have any questions or concerns regarding this Privacy Policy, please reach out to us: