Privacy Policy

1. Introduction & Commitment

AiBotFlow ("we", "our", "us", or "Platform"), operated by Anil Sharma and registered in Gopalganj, Bihar, India, provides enterprise-grade WhatsApp Cloud API CRM solutions, autonomous AI agents, omnichannel customer engagement, and Google Business Profile automation tools for businesses globally.

We hold business privacy and end-customer confidentiality to the highest standard. We are committed to transparency in our data collection, handling, and storage practices, adhering strictly to the Digital Personal Data Protection Act (DPDP Act 2023), the Information Technology Act, 2000, Meta Platform Terms, and Google API Services User Data Policy.

2. Information We Collect

To provide, optimize, and bill our Software-as-a-Service (SaaS) products, we collect the following categories of data:

• Account & Registration Information: Your business name, contact person name, official email address, mobile/WhatsApp number, billing address, and GSTIN (for Indian tax invoicing).
• Meta WhatsApp Cloud API Integration Data: Meta Business Manager ID (WABA ID), phone number ID, system user access tokens, and webhook payloads required to transmit and receive customer messages via official Meta Cloud API endpoints.
• End-Customer Communication Records: Incoming and outgoing messages, customer phone numbers, media attachments, delivery and read receipts, tags, and custom CRM attributes that your business processes through AiBotFlow.
• Google Business Profile (GMB) Data: OAuth authorization tokens and review payloads to display incoming Google reviews and publish automated AI responses on your behalf.
• Payment Information: Transaction identifiers, payment methods, and invoice records processed securely via PCI-DSS compliant gateways (Razorpay). We do not store credit/debit card numbers or net-banking credentials on our servers.
• Technical & Log Data: IP addresses, browser types, session timestamps, and operational metrics used exclusively for platform uptime monitoring, DDoS defense, and fraud prevention.

3. How We Use Your Data

We process your data strictly to fulfill our contractual SaaS obligations:

• Connecting your official Meta WhatsApp Cloud API credentials to receive and deliver real-time messages.
• Powering your Autonomous AI Agents to qualify leads and answer incoming queries accurately using your uploaded knowledge base.
• Facilitating team collaboration in the Multi-Agent Shared Inbox with agent assignment, internal notes, and tagging.
• Generating broadcast analytics, deliverability reporting, and tracking subscription usage limits.
• Sending transactional service alerts, OTP verification, billing invoices, and security notifications.

4. Meta Cloud API & Google API Compliance

Meta WhatsApp Business Platform: AiBotFlow is built directly on Meta's official WhatsApp Cloud API. When you send messages, content is securely transmitted through Meta's encrypted infrastructure. We comply strictly with the Meta Platform Terms, Developer Policies, and WhatsApp Business Messaging Policy. You maintain full ownership of your WABA and can disconnect your account at any time.

Google API Services User Data Policy: AiBotFlow's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to train generalized AI models.

5. Data Security & Storage Architecture

We implement robust administrative, technical, and physical security safeguards to protect your business information:

• 256-Bit SSL/TLS Encryption: All data in transit between your browser, our servers, and Meta/Google APIs is encrypted using modern TLS 1.3 cryptographic protocols.
• Encrypted Database Storage: API secrets, auth tokens, and sensitive credentials are encrypted at rest using AES-256 standard encryption.
• Role-Based Access Control: Strict least-privilege access policies ensure that only authorized platform systems handle conversation payloads.
• Automated Backups: Secure, geo-redundant database backups with point-in-time recovery to prevent data loss.

6. Your Rights & Data Control

Under the DPDP Act 2023 and global privacy frameworks, you have full control over your data:

• Right to Access & Portability: You may export your contact lists, conversation histories, and analytics at any time via CSV or REST API.
• Right to Rectification: You can update your business profile, phone numbers, and billing details directly within your AiBotFlow dashboard.
• Right to Erasure ("Right to Be Forgotten"): Upon subscription cancellation or explicit written request, you may request permanent deletion of your CRM records and conversation logs.

7. Grievance Officer & Contact Information

If you have questions, feedback, or grievance redressal requests regarding this Privacy Policy or your data handling, you can reach out directly to our designated Grievance & Compliance Officer: