Privacy Policy

Flovoo is a business messaging and customer communications platform designed for SMBs in the MENA region. Flovoo consolidates conversations from WhatsApp Business API, Facebook Messenger, Instagram, SMS, Live Chat, and other channels into a single shared inbox.

For any privacy-related matters, you may contact us at info@flovoo.com.

2.1 Account & Registration Data

When you sign up for Flovoo, we collect:

• Full name, work email address, and password
• Company name, business type, and team size
• Phone number and country
• Billing information (processed securely by our payment provider — we do not store card numbers)

2.2 Usage & Platform Data

As you use the Flovoo platform, we automatically collect:

• Log data (IP address, browser type, device, pages visited, timestamps)
• Feature usage data (workflows configured, channels connected, team activity)
• Performance and error reporting data

2.3 Customer Conversation & Contact Data

Flovoo acts as a data processor on behalf of our customers. The conversations, contact records, tags, and messages that flow through the Flovoo platform belong to our customers (data controllers). We process this data solely to provide the service.

Note: Flovoo does not apply artificial intelligence or machine learning to the content of your customers' conversations without your explicit configuration and consent.

2.4 Payment Data

Subscription and billing transactions are processed by trusted PCI-DSS compliant payment providers. We receive a transaction confirmation and billing summary only. We do not store credit card numbers, CVV codes, or full card details on our servers.

2.5 Communications Data

If you contact our support team via email or chat, we retain those communications to resolve your query and improve our service.

We use the information we collect for the following purposes:

• Service delivery: to create and manage your account, provide access to the platform, and process payments
• Platform improvement: to understand feature usage, fix bugs, and improve performance
• Customer support: to respond to inquiries, troubleshoot issues, and provide onboarding assistance
• Security & fraud prevention: to monitor for unauthorized access, abuse, or policy violations
• Legal compliance: to meet obligations under applicable data protection laws
• Communications: to send service notices, product updates, and (with your consent) marketing communications

We do not sell your personal data to third parties. We do not use your customers' conversation data for advertising or profiling purposes.

• Contract performance: processing is necessary to provide the Flovoo service under our Terms of Service
• Legitimate interests: to operate, secure, and improve our platform
• Legal obligation: to comply with applicable laws and regulations
• Consent: for marketing emails and non-essential cookies (you may withdraw consent at any time)

We share data with a limited set of trusted third-party service providers ("sub-processors") who help us deliver the Flovoo platform. All sub-processors are contractually bound to process data only as instructed and to maintain appropriate security standards.

Current sub-processors include:

• Amazon Web Services (AWS) — cloud infrastructure, data storage, servers
• Meta Platforms, Inc. — WhatsApp Business API, Messenger API, Instagram API
• Twilio, Inc. — SMS channel messaging delivery
• Stripe, Inc. — payment processing and billing

We may also disclose data when required by law, court order, or to protect the rights and safety of Flovoo, our users, or the public.

Your data may be stored on cloud infrastructure located in the European Union, the United States, or other regions where our sub-processors operate. By using Flovoo, you acknowledge that your data may be transferred to and processed in these regions.

For transfers across jurisdictions, we ensure adequate safeguards are in place, including Data Processing Agreements (DPAs) with all sub-processors and, where applicable, Standard Contractual Clauses (SCCs).

Customers operating in jurisdictions with specific data residency requirements (e.g., KSA PDPL, UAE PDPL, GDPR) are responsible for ensuring their use of Flovoo complies with those local regulations.

• Account data: retained for the duration of your subscription and for 90 days after account termination to allow for reactivation
• Conversation & contact data: retained according to the plan you subscribe to; deleted upon written request after account closure
• Billing records: retained for up to 7 years to meet legal and tax obligations
• Log data: retained for up to 12 months for security and diagnostic purposes

After the applicable retention period, data is securely deleted or anonymised.

Subject to applicable data protection laws, you have the following rights regarding your personal data:

• Right to Access: request a copy of the personal data we hold about you
• Right to Rectification: request correction of inaccurate or incomplete data
• Right to Erasure: request deletion of your data where there is no legitimate reason for retention
• Right to Object: object to certain types of processing, including marketing communications
• Right to Portability: receive your data in a structured, machine-readable format
• Right to Restriction: request that we restrict processing of your data in certain circumstances

To exercise any of these rights, please contact us at info@flovoo.com. We will respond within 30 days of receiving your request.

The Flovoo website uses cookies and similar technologies:

• Essential cookies: required for the website and platform to function (authentication, session management). Cannot be disabled.
• Analytics cookies: help us understand how visitors interact with our website (page views, navigation flow). You may opt out.
• Preference cookies: remember your language and display preferences.

You can manage or disable non-essential cookies through your browser settings. Disabling certain cookies may affect website functionality.

The Flovoo application uses only functional cookies necessary to operate the platform. No advertising or tracking cookies are used inside the product.

We take data security seriously and implement appropriate technical and organisational measures, including:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
• Role-based access controls and least-privilege principles
• Regular security reviews and vulnerability assessments
• Secure cloud infrastructure hosted on AWS

While we take all reasonable steps to protect your data, no method of transmission over the internet is 100% secure. In the event of a data breach that affects your rights, we will notify you in accordance with applicable law.

Flovoo is a business platform intended for use by adults and registered businesses. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have inadvertently collected data from a minor, we will take steps to delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make material changes, we will:

• Post the updated policy on this page with a revised "Effective Date"
• Notify registered customers via email and/or an in-platform notice

Your continued use of Flovoo after the effective date of any changes constitutes your acceptance of the updated policy. We encourage you to review this page periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please reach out to us at info@flovoo.com.

We typically respond within 2–3 business days.