Privacy Policy

Orbiflow provides a platform for businesses to communicate with their customers over WhatsApp. This policy explains what information we collect, how we use it, and your choices.

Information we collect

• Account information: name, email address and password (stored hashed) of platform users.
• Business information: business name, WhatsApp Business Account and phone number identifiers, and access tokens granted to us through Meta's Embedded Signup.
• Customer data our business customers upload or receive: contact names, phone numbers, message content, media, and delivery status.
• Usage and technical data: log data, IP address and device information used for security and reliability.

How we use information

• To provide the service: sending and receiving WhatsApp messages, campaigns, templates, and flows.
• To operate billing, support, security and abuse prevention.
• To comply with legal obligations and WhatsApp/Meta platform policies.

We do not sell personal information.

Roles

For end-customer message data, our business customers decide why and how it is processed (they are the controller); Orbiflow processes it on their behalf (processor).

Sharing

We share data with Meta Platforms (WhatsApp Business Platform) to deliver messages, and with infrastructure and payment providers that help us run the service, under appropriate agreements. We may disclose data when required by law.

Retention and security

We keep data for as long as your account is active or as needed to provide the service, then delete or anonymise it, unless the law requires longer retention. Access tokens are stored in a secrets store, traffic is encrypted in transit, and access is restricted.

Your rights

You may request access, correction or deletion of your data. See our data deletion instructions or contact us at connect@navantra.in.

Changes

We may update this policy; the date above shows the latest revision.