Privacy Policy

1. Introduction

FLOWTI S.A.S. ("Flowti", "we", "our" or "the Platform"), identified with Colombian NIT 902.097.440-6 and domiciled in Medellín, Antioquia, Colombia, is committed to protecting the privacy of users and the individuals whose data is processed through our WhatsApp automation platform powered by Artificial Intelligence. This Privacy Policy explains what data we collect, how we use it, who we share it with and what rights you have.

2. Data We Collect

2.1 Registration data

• Full name, email address and contact phone number.
• Company or organization name.
• Identity or tax identification document (depending on the plan).
• Access credentials (encrypted password).

2.2 Platform usage data

• Conversational flows created, chatbot configurations and interaction history.
• Messages sent and received through the WhatsApp Business API integration.
• Activity logs, IP address, browser type and device information.

2.3 Third-party data

Data from WhatsApp contacts you interact with through Flowti (phone numbers, profile names and message content) is processed exclusively to provide the contracted service.

3. Purpose of Processing

• Provide and maintain the WhatsApp automation platform.
• Process payments and billing.
• Train and improve the Artificial Intelligence models that power our chatbots (only with anonymized and aggregated data, unless explicit consent is given).
• Send service communications, product updates and promotional materials (with an unsubscribe option).
• Comply with legal obligations and requests from competent authorities.
• Detect, prevent and respond to security incidents or fraud.

4. Legal Basis for Processing

The processing of your data is based on: (a) performance of the service agreement; (b) your explicit consent when applicable; (c) our legitimate interest in improving and securing the platform; and (d) compliance with legal obligations.

5. Data Sharing

We do not sell your personal data. We may share information with:

• Meta (WhatsApp Business API): for the delivery and receipt of messages, according to Meta policies.
• AI providers: anonymized data sent to language model providers (e.g. OpenAI) to generate chatbot responses.
• Payment processors: billing data shared with Stripe, Wompi or other providers to manage subscriptions.
• Infrastructure providers: we host data on certified cloud providers (AWS, GCP or similar).

6. Data Security

We implement technical and organizational measures to protect your data, including encryption in transit (TLS) and at rest, role-based access control, continuous monitoring and regular backups. However, no system is 100% secure and we cannot guarantee absolute invulnerability.

7. Data Retention

We retain your data while you maintain an active Flowti account. WhatsApp message data is retained according to the retention policies configured in your account. After service cancellation, data is deleted or anonymized within a maximum period of 90 days, unless a longer retention period is required by law.

8. Your Rights

Depending on your jurisdiction, you may exercise the following rights:

• Access to your personal data.
• Correction of inaccurate data.
• Deletion of your data ("right to be forgotten").
• Data portability in a structured format.
• Objection to or restriction of processing.
• Withdrawal of consent at any time.

To exercise these rights, contact [email protected].

9. Cookies and Tracking Technologies

We use essential cookies for service operation and analytics cookies to understand how the platform is used. You can manage your cookie preferences from your browser settings.

10. Changes to this Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by email or by posting a notice on the platform. Continued use of the service after changes are published constitutes acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy, you can contact FLOWTI S.A.S. at [email protected] or +57 311 532 7764. See our Legal Information.