Privacy Policy

Last updated: 17 August 2026

At StartToFlow, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our WhatsApp-based personal assistant service.

By using our service, you consent to the data practices described in this policy. This policy is compliant with GDPR, CCPA, and other major privacy regulations. Last updated: December 19, 2025.

1. Information We Collect

We collect information you provide directly to us, including: (a) Account information: WhatsApp phone number, name, and profile information; (b) Content data: Messages, tasks, notes, and reminders you send through our service; (c) Usage data: Information about how you interact with our service, including timestamps and feature usage; (d) Device information: Device type, operating system, and unique device identifiers; (e) Communication data: Your correspondence with us for support or feedback. We do not access your WhatsApp contacts or other messages not directed to StartToFlow.

2. How We Use Your Information

We use the information we collect to: (a) Provide, maintain, and improve our service; (b) Process and organize your tasks, notes, and reminders; (c) Send you technical notices, updates, and support messages; (d) Respond to your comments and questions; (e) Analyze usage patterns to improve user experience; (f) Detect, prevent, and address technical issues and fraudulent activity; (g) Comply with legal obligations. We use industry-standard AI and natural language processing to understand and categorize your messages. Your data is never used to train public AI models or shared with third parties for marketing purposes.

3. Data Security and Storage

We implement industry-standard security measures to protect your information, including encryption in transit (TLS/SSL) and at rest (AES-256), secure data centers with 24/7 monitoring, regular security audits and penetration testing, access controls and authentication mechanisms, and automatic backup systems. We retain your data for as long as your account is active or as needed to provide services. You can request deletion of your data at any time. While we strive to protect your information, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

4. Third-Party Services and Data Sharing

We use select third-party service providers to help us operate our service, including: WhatsApp Business API (message delivery), cloud infrastructure providers (data hosting), AI/ML service providers (natural language processing), and analytics services (usage statistics). These providers are contractually obligated to protect your data and may only use it to provide services to us. We do not sell, trade, or rent your personal information to third parties. We may disclose your information only when required by law, to protect our rights, or with your explicit consent.

5. Your Privacy Rights

Depending on your location, you have certain rights regarding your personal information: (a) Right to access: Request a copy of your personal data; (b) Right to rectification: Correct inaccurate or incomplete data; (c) Right to erasure: Request deletion of your data ("right to be forgotten"); (d) Right to restrict processing: Limit how we use your data; (e) Right to data portability: Receive your data in a structured, machine-readable format; (f) Right to object: Opt-out of certain data processing activities; (g) Right to withdraw consent: Revoke previously given consent at any time. To exercise these rights, please contact us using the information provided in the Contact section. We will respond within 30 days.

6. Contact Us

If you have any questions about this Privacy Policy, your data, or our practices, please contact us at: Email: privacy@flowfunnel.io. Data Protection Officer: dpo@flowfunnel.io. For users in the European Union, you have the right to lodge a complaint with your local data protection authority. We are committed to resolving any privacy concerns and will work with you to address any issues promptly.