Privacy Policy

Who we are

ChatFlow ("we", "us") operates chatflow-ai.com. Our address is 3rd Floor Suite, 207 Regent Street, London, England, W1B 3HH. For any privacy question, contact us at support@chatflow-ai.com.

For messages between a business and its customers, the business using ChatFlow is the data controller and ChatFlow processes that data on its behalf.

Data we collect

• Account data: your name, email address, password (stored only as a secure hash) or, if you sign in with Google, your Google account ID, name, email and profile picture.
• Business data: the information you add to set up your chatbot, such as business details, working hours, FAQs, products, services, prices and uploaded documents.
• WhatsApp data: when a business connects its WhatsApp number, we receive the messages its customers send to that number, the customer's phone number and WhatsApp profile name, and the replies sent back. We also store appointment requests and notes created from these conversations.
• Billing data: your plan and subscription status. Card payments are handled by Stripe; we never see or store your full card number.
• Technical data: basic logs (IP address, browser, timestamps) used to keep the service secure and working.

How we use data

• To provide the service: receive customer messages, generate AI replies and show conversations in your inbox.
• To create your account, sign you in and keep it secure.
• To process payments and manage subscriptions.
• To provide support and send important service emails.
• To prevent abuse and fix problems.

We do not sell personal data, and we do not use your customers' messages for advertising.

Service providers

We share data only with providers that help us run ChatFlow, and only as needed:

• Meta (WhatsApp Business Platform), to send and receive WhatsApp messages.
• AI providers (such as OpenAI or Anthropic), to generate chatbot replies from the conversation and your business information. Data sent through their APIs is not used to train their models.
• Stripe, for payments.
• Google Cloud, which hosts our servers and database in the European Union, and Google Sign-In if you choose it.

Security

All traffic uses HTTPS. Passwords are hashed, WhatsApp access tokens are encrypted, and each business can only access its own data.

How long we keep data

We keep account, business and conversation data while your account is active. When you delete your account or ask us to, we delete it within 30 days, except where we must keep limited records (such as invoices) by law.

Your rights

You can access, correct, export or delete your data, or object to how it is used. Customers of a business using ChatFlow can contact that business or us. See how to delete your data, or email support@chatflow-ai.com.

Children

ChatFlow is a business service and is not intended for anyone under 16.

Changes

If we change this policy, we will update the date above and, for important changes, notify account owners by email.