Privacy Policy

Flowverse ("Flowverse", "we", "us") provides WhatsApp AI automation for businesses in Saudi Arabia and the GCC — clinics and online stores — through the website getflowverse.com and the Flowverse platform (together, the "Service"). This policy explains what data we collect, how we use it, and the choices available to you.

1. Who is responsible for your data

• If you are a business using Flowverse — Flowverse is responsible for your account data as described in this policy.
• If you are a customer messaging a business on WhatsApp — that business decides why and how your messages are handled; Flowverse processes them on the business's behalf to operate its AI assistant. For questions about your data, contact the business you messaged; we will assist them in responding.

2. Data we collect

From subscribing businesses:

• Account details: name, email address, phone number, business name and type, city.
• Business configuration: services/treatments and prices, staff names, working hours, policies and documents the business uploads (e.g. return policy, insurance list), the AI assistant's instructions.
• Store data from platforms the business connects (such as Salla or Shopify): products, prices, inventory, orders, shipment status.
• Billing and subscription information, and usage metrics (e.g. number of AI conversations).

From the business's customers (processed on the business's behalf):

• WhatsApp conversation content — text messages and voice notes (voice notes are converted to text to generate a reply), plus the sender's WhatsApp phone number and profile name.
• Booking and order details shared in the conversation — e.g. requested appointment, chosen product, delivery details.

From visitors to this website: the demo request form (name, business name, WhatsApp number, business type, city, message). Our site uses only essential session storage for logins — no advertising trackers.

3. How we use data

• Operate the AI assistant: understand incoming WhatsApp messages and generate replies using the business's own data (services, prices, availability, products, policies).
• Perform the actions customers ask for: book appointments, create orders and payment links, check order status and shipping.
• Run the business's automations: appointment reminders and confirmations, order updates, abandoned-cart recovery, review requests, stock alerts.
• Show the business its own dashboard: conversations, leads, bookings, orders, and performance reports.
• Provide support, secure the Service, measure usage against subscription limits, and bill for the Service.

4. AI processing

Messages (including transcribed voice notes) are processed by third-party AI models to understand the request and generate a reply. We choose AI providers whose API terms state that submitted data is not used to train their models. The assistant is designed to answer only from the business's own data and to hand the conversation to a human when appropriate. AI-generated replies may occasionally be imperfect; conversations remain visible to the business, which can take over at any time.

5. Service providers (sub-processors)

We share data with these providers only as needed to run the Service. We do not sell personal data to anyone.

6. Where your data is stored

Account, conversation, and business data are stored in the European Union (Frankfurt, Germany) on our cloud database provider's infrastructure. WhatsApp and Instagram messages are transmitted and processed by Meta under its own terms. Because the business, its customers, and some providers may be located in different countries, personal data may be transferred across borders; we rely on the safeguards offered by our providers and applicable law, including the Saudi Personal Data Protection Law (PDPL), for such transfers.

Conversations for clinics may include health-related information. We treat such data as sensitive: it is stored only to provide the Service to that clinic, is isolated per account, and is not used for any other purpose.

7. Data retention

We keep business and conversation records for as long as the account is active, so the assistant has context and the business keeps its records. Operational logs (for example message-delivery and automation logs) are pruned on a rolling basis, typically within 90 days. When an account is closed — or on a verified deletion request — we delete or anonymize the associated personal data within 30 days, except where we must keep limited records to meet legal or accounting obligations.

8. Security

Data is encrypted in transit (TLS). Each business's data is isolated with per-account access controls, and administrative access is restricted and authenticated. No method of transmission or storage is 100% secure, but we work to protect the Service and review our safeguards on an ongoing basis.

9. Your rights

Consistent with applicable law, including the Saudi Personal Data Protection Law (PDPL), you may request access to, correction of, or deletion of your personal data, or object to certain processing. Businesses can contact us directly. Customers of a business should contact that business first; we will support it in fulfilling your request. To exercise a right, email ai.flowverse@gmail.com. You also have the right to lodge a complaint with the competent Saudi authority (SDAIA). In the event of a personal-data breach that poses a risk to you, we will notify affected parties and the competent authority as required by applicable law.

10. Children

The Service is intended for businesses and is not directed at children. We do not knowingly collect data from children.

11. Changes to this policy

We may update this policy as the Service evolves. We will post the updated version here with a new "Last updated" date, and notify subscribing businesses of material changes.

11. Contact us

Flowverse — Saudi Arabia
Email: ai.flowverse@gmail.com
Phone / WhatsApp: +966 54 457 8009