Privacy Policy

1. Introduction

Welcome to FlowzenAI ("we," "our," or "us"). We operate the website https://flowzenai.in and provide Instagram direct message automation services for ecommerce businesses.

This Privacy Policy explains how we collect, use, store, and protect information when you use our services or visit our website. We are committed to protecting your privacy and complying with applicable data protection laws and Meta's Platform Terms.

2. Information We Collect

2.1 Business Client Information

When you sign up for our services, we collect:

• Business name and contact information
• Email address and phone number
• Instagram Business account information
• Payment and billing information
• Business website and industry information

2.2 Instagram End-User Message Data

When your customers send messages to your Instagram Business account, we process:

• Message content (text, images, emojis)
• Instagram username and profile information
• Timestamp of messages
• Conversation context necessary for automated responses

Important: We only process messages that are initiated by Instagram users who voluntarily contact your business account. We do not access or process messages from accounts that have not contacted your business first.

2.3 Technical Information

• Access tokens from Meta Business Manager (encrypted and securely stored)
• API interaction logs for service functionality
• Website usage data (cookies, IP address, browser type)

3. How We Use Your Information

We use the collected information solely for:

• Providing Instagram DM automation services to your business
• Automatically responding to product inquiries and FAQs on your behalf
• Analyzing conversation patterns to improve automated responses
• Managing your account and billing
• Providing customer support
• Improving our service quality and features
• Complying with legal obligations

4. Data Sharing and Disclosure

We only share information in these limited circumstances:

• With Meta/Instagram: We use Meta's official Instagram Graph API to access and send messages on your behalf, in accordance with their Platform Terms
• Service Providers: Trusted third-party services for hosting, database management, and payment processing (all under strict confidentiality agreements)
• Legal Requirements: When required by law, court order, or governmental regulation
• Business Transfers: In the event of a merger or acquisition (with continued privacy protection)

5. Data Security

We implement industry-standard security measures to protect your data:

• All data transmission uses HTTPS encryption (TLS/SSL)
• Access tokens are encrypted at rest using strong encryption algorithms
• Strict access controls - only authorized personnel can access data
• Regular security audits and updates
• Secure cloud infrastructure with backup systems
• Multi-factor authentication for admin access

While we implement robust security measures, no system is completely secure. We continuously monitor and improve our security practices.

6. Data Retention

We retain data according to the following policies:

• Active Accounts: Message data is retained for up to 90 days to maintain conversation context and service quality
• Business Client Data: Retained for the duration of your account plus 30 days after cancellation
• Access Tokens: Immediately revoked and deleted upon service termination
• Billing Records: Retained for 7 years as required by accounting regulations

After the retention period, data is permanently and securely deleted from our systems.

7. Your Rights and Choices

You have the following rights regarding your data:

• Access: Request a copy of your data we hold
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Export: Request data portability in a machine-readable format
• Opt-out: Unsubscribe from marketing communications
• Revoke Access: Disconnect your Instagram account at any time

For Instagram End-Users: If you are an end-user who has messaged a business using our service and wish to request data deletion, please contact us at support@flowzenai.in with your Instagram username and the business you contacted.

For detailed instructions on how to request data deletion, please visit our Data Deletion Instructions page.

8. Meta Platform Compliance

Our service operates in full compliance with Meta's Platform Terms and Policies:

• We only use the instagram_business_manage_messages permission for its intended purpose
• We respect Meta's 24-hour messaging window for user-initiated conversations
• We do not send unsolicited promotional messages
• We comply with Instagram's Community Guidelines and Commerce Policies
• Access is granted only via official Meta Business Manager authentication

9. Cookies and Tracking

Our website uses cookies for:

• Essential site functionality and security
• Remembering your preferences
• Analytics to improve our website (aggregate data only)

You can control cookies through your browser settings. Note that disabling cookies may affect website functionality.

10. Children's Privacy

Our services are intended for businesses and users aged 18 and above. We do not knowingly collect information from individuals under 18. If we become aware of such data collection, we will promptly delete it.

11. International Data Transfers

Your data may be stored and processed in secure cloud facilities that may be located outside your country. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The "Last Updated" date at the top indicates when changes were last made. We will notify you of significant changes via email or prominent notice on our website.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:

We will respond to your inquiry within 7 business days.

14. Acknowledgment

By using FlowzenAI's services, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you do not agree with this policy, please do not use our services.