Privacy Policy
Last updated: May 16, 2026
AgentFlow ("we", "our", "us") is operated by CyberSnow. This Privacy Policy explains how we collect, use, store, and share your data when you use our WhatsApp lead-qualification platform ("Service"). By using the Service, you agree to this policy.
1. Information We Collect
Account Information
- Your name, business name, email address, and phone number
- Authentication identifiers (Supabase user ID)
- Business profile details you submit during onboarding
WhatsApp Business Data
When you connect your WhatsApp Business Account via Meta Embedded Signup, we receive and store:
- WhatsApp Business Account ID (WABA ID)
- Phone Number ID and verified display name
- Long-lived access token (encrypted at rest)
- Message templates and approval statuses
Lead and Conversation Data
- Lead names, phone numbers, and product inquiries (sourced from IndiaMart with your authorization)
- WhatsApp message content (inbound and outbound) for qualified leads
- Conversation stage, intent classification, and AI-generated responses
Technical Data
- IP address, browser type, and device information
- Application logs and usage analytics
2. How We Use Your Data
- To send WhatsApp messages to leads on your behalf via the WhatsApp Business API
- To run AI-powered conversation flows for lead qualification
- To display dashboard analytics, lead lists, and conversation transcripts
- To send notifications about hot leads, system alerts, or platform updates
- To improve our service quality and debug technical issues
3. How We Share Your Data
We do not sell your data. We share limited data with these third-party processors:
- Meta (WhatsApp Business Platform) — to deliver messages to your leads
- Supabase — for database hosting and authentication
- OpenRouter / LLM providers — to process conversation messages for AI responses
- Google Sheets — to export hot leads if you opt in
- IndiaMart API — to fetch leads using your provided credentials
We may also disclose information if required by law, court order, or to protect the rights and safety of our users.
4. Data Storage and Security
- Data is stored in encrypted databases hosted on Supabase
- Access tokens and credentials are encrypted at rest
- All API communication uses HTTPS/TLS
- Role-based access controls restrict who in our team can view tenant data
5. Data Retention
We retain your data for as long as your account is active. Upon account deletion, all personal and business data is permanently deleted within 30 days, except where retention is required by law (e.g., billing records). See our Data Deletion Policy for details.
6. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Export your data in a portable format
- Withdraw consent and disconnect WhatsApp at any time
To exercise these rights, contact us at support@cybersnow.in.
7. Children's Privacy
AgentFlow is not intended for users under 18. We do not knowingly collect data from minors.
8. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or dashboard notification. Continued use of the Service after changes constitutes acceptance.
9. Contact Us
For privacy-related questions or concerns, contact:
CyberSnow
Email: support@cybersnow.in
Website: https://agentflow.cybersnow.in