Privacy Policy

Account & Profile Data

When you sign up for WasFlo, we may collect your name, email address, phone number, country, timezone, password credentials, and any profile photo or other information you choose to provide.

Workspace & Operational Data

To provide and operate the Service, we may process information such as your workspace name, connected WhatsApp Business Accounts and phone numbers, message templates, automation and flow configurations, contact lists, team-member information and roles, billing and subscription information, and account or activity log events.

Customer Message Data

WasFlo processes messages, attachments, contact information, and related metadata that you or your users transmit through your workspace. Depending on your relationship with the individuals whose information you process, you may be responsible for determining the appropriate legal basis for processing that information. Where applicable, WasFlo processes such information on your behalf as a service provider or data processor.

Usage & Technical Information

We may collect information about how you use WasFlo, including feature usage, page views, performance information, device and browser information, IP address, request times, diagnostic information, and other technical data. We use this information to operate, secure, maintain, troubleshoot, and improve the Service.

We use the information we collect to:

• Provide, maintain, operate, and improve the Service;
• Process payments, issue invoices, and manage subscriptions and billing;
• Respond to support requests and communicate with you about your account;
• Detect, prevent, investigate, and address abuse, fraud, unauthorized activity, and security threats;
• Send transactional communications, including receipts, security alerts, service notifications, and other communications related to your account;
• Send marketing or promotional communications where you have provided consent or where otherwise permitted by applicable law;
• Monitor and analyze usage, performance, and reliability to improve the Service;
• Comply with applicable legal, regulatory, tax, accounting, and law-enforcement requirements; and
• Enforce our Terms of Service and protect the rights, safety, security, and property of WasFlo, our users, and others.

We do not sell your personal information or your customers' personal information.

We may share information only as reasonably necessary to operate, provide, secure, and improve WasFlo, or as otherwise permitted or required by applicable law.

• Service Providers — We may share information with third-party service providers that help us operate WasFlo, including hosting, cloud infrastructure, payment processing, email delivery, security, communications, and other business services. These providers may process information only as necessary to provide services to WasFlo and subject to applicable contractual and legal safeguards.
• Stripe — We use Stripe to process subscription payments and other applicable payments. Payment information may be processed by Stripe in accordance with its own privacy policy and terms.
• WhatsApp and Meta — Where you connect a WhatsApp Business Account or use WhatsApp-related features, information may be transmitted to or received from Meta and WhatsApp as necessary to provide the requested messaging and related services. Your use of WhatsApp and Meta services is also subject to their applicable terms and policies.
• Legal and Safety Requirements — We may disclose information when reasonably necessary to comply with applicable law, regulation, legal process, court orders, or valid governmental requests, or when necessary to protect the rights, safety, security, or property of WasFlo, our users, or others.
• Business Transfers — If WasFlo or substantially all of its assets are involved in a merger, acquisition, financing, reorganization, bankruptcy, sale, or other business transaction, information may be transferred as part of that transaction, subject to applicable law.
• With Your Direction or Consent — We may share information when you direct us to do so, authorize the sharing, or otherwise consent to it.

We do not sell your personal information.

WasFlo may use cookies and similar technologies to operate the Service, maintain user sessions, enhance security, remember preferences, understand how the Service is used, and improve performance.

We may use both necessary cookies and, where applicable, analytics or similar technologies. We do not use cookies for cross-site behavioral advertising.

You may be able to control or restrict cookies through your browser settings. Disabling certain cookies may affect the functionality or availability of parts of the Service.

Additional information about our use of cookies and similar technologies may be provided in our Cookie Policy.

We retain personal information and Customer Data for as long as reasonably necessary to provide the Service, maintain your account, comply with legal and regulatory obligations, resolve disputes, enforce our agreements, prevent fraud and abuse, and protect the security and integrity of WasFlo.

When an account is terminated or expires, Customer Data may remain available for export or retrieval for a limited post-termination period of generally 30 to 60 days, unless a different period applies under a custom or Enterprise plan, a separate written agreement, or applicable law.

• Customer Data — Generally retained for the applicable 30–60 day post-termination period and then scheduled for deletion, subject to legal obligations and backup retention practices.
• Account and operational records — Certain information may be retained for longer periods where reasonably necessary for security, fraud prevention, dispute resolution, accounting, tax, legal, or regulatory purposes.
• Billing and transaction records — We may retain billing, payment, and transaction information for as long as reasonably necessary to comply with applicable accounting, tax, financial, and legal obligations.
• Backups — Deleted information may remain temporarily in encrypted backups or disaster-recovery systems until those copies are routinely overwritten or deleted in accordance with our backup and retention practices.

Retention periods may vary depending on the type of information, the purpose for which it was collected, applicable legal requirements, and the services or plan used.

WasFlo takes reasonable technical and organizational measures designed to protect personal information and Customer Data against unauthorized access, disclosure, alteration, loss, or destruction.

Security Measures

Depending on the nature of the information and the services used, security measures may include access controls, authentication mechanisms, encryption in transit, secure infrastructure, monitoring, logging, backups, and other safeguards designed to protect the Service and the information processed through it.

Access Controls

Access to Customer Data and other sensitive information is limited to authorized personnel, systems, and service providers who require access to perform their responsibilities or provide the Service.

Third-Party Services

WasFlo may rely on third-party infrastructure and service providers to operate certain parts of the Service. We take reasonable steps to select and work with providers that maintain appropriate security measures for the services they provide.

Your Responsibilities

You are responsible for maintaining the security of your account credentials, access tokens, connected accounts, and devices used to access WasFlo. You should use strong passwords, protect authentication credentials, and promptly notify us if you believe your account or connected services have been compromised.

Security Limitations

No internet-based service, electronic transmission, or storage system can be guaranteed to be completely secure. While we take reasonable measures to protect information, we cannot guarantee absolute security.

Security Incidents

If we become aware of a security incident affecting personal information or Customer Data, we will take reasonable steps to investigate, contain, and remediate the incident and provide notifications where required by applicable law.

Depending on where you live and the laws that apply to your personal information, you may have certain rights regarding your personal information. These rights may include:

• Access — request access to or a copy of personal information we hold about you;
• Correction — request correction of inaccurate or incomplete personal information;
• Deletion — request deletion of personal information, subject to applicable legal exceptions;
• Data Portability — request a copy of certain personal information in a structured, commonly used, and machine-readable format where required by applicable law;
• Restriction or Objection — request that we restrict or stop certain processing of your personal information where applicable;
• Withdraw Consent — withdraw consent where we rely on consent as the legal basis for processing; and
• Opt Out of Marketing — unsubscribe from promotional communications at any time by using the unsubscribe mechanism provided in the communication or by contacting us.

These rights are not absolute and may be subject to limitations or exceptions under applicable law.

To exercise an applicable privacy right or ask a privacy-related question, please contact us at privacy@wasflo.com.

We may need to verify your identity before processing certain requests. We will respond to valid requests within the time period required by applicable law.

WasFlo may process and store personal information and Customer Data in countries other than the country where you are located. This may occur because we use service providers, infrastructure, communication platforms, payment processors, or other third parties that operate internationally.

Where personal information is transferred across borders, we take reasonable steps to ensure that the transfer is conducted in accordance with applicable data-protection laws and that appropriate safeguards are used where required.

Depending on the applicable law and circumstances, these safeguards may include contractual protections, adequacy decisions, Standard Contractual Clauses approved by the European Commission, or other legally recognized transfer mechanisms.

By using WasFlo, you acknowledge that your information may be processed in countries that may have data-protection laws different from those in your country of residence.

Children's Privacy

WasFlo is a business and communications service and is not intended for individuals under 18 years of age.

We do not knowingly collect personal information directly from individuals under 18. If you believe that a person under 18 has provided personal information to WasFlo, please contact us at privacy@wasflo.com.

If we become aware that we have knowingly collected personal information from an individual under 18 in circumstances where applicable law requires deletion, we will take reasonable steps to delete that information.

We may update this Privacy Policy from time to time to reflect changes to the Service, our practices, applicable laws, or other circumstances.

Where required by applicable law, we will provide notice of material changes before they take effect. Notice may be provided by email, through the Service, or by posting the updated Privacy Policy on our website.

The “Updated” date at the top of this Privacy Policy indicates when it was most recently revised.

If you have questions about this Privacy Policy, our privacy practices, or your personal information, please contact us at privacy@wasflo.com.

WasFlo is operated by Melima LLC, a California limited liability company.