Privacy Policy

This Privacy Policy applies to the BATFLOWS website, account system, CRM, Admin-supported payment flow, support features and related services (collectively, the Service).

For account registration, billing, security, service operations and BATFLOWS support, BATFLOWS determines why and how information is used. For customer contact records, CRM notes, WhatsApp conversations and similar business data uploaded or connected by a workspace customer, the customer generally determines the purpose of processing and BATFLOWS processes that information to provide the Service.

Account and profile information

We may collect your name, email address, username, recovery phone number, authentication state, workspace membership, role, plan, settings and profile information.

CRM and customer communication data

Depending on the features you use, a workspace may contain customer names, WhatsApp or phone numbers, email addresses, company details, categories, tags, conversation content, message delivery information, notes, follow-ups, call records, assignment information and customer support history.

Team and workspace data

Business plans may process invitations, team-member roles, membership status, departments, seat allocation, activity and access-related records needed to operate a shared workspace.

Payment and financial records

BATFLOWS currently supports manual bank or wallet payment workflows. We may store the selected payment method, plan, billing term, amount, transaction reference, payment proof you upload, review status, receipts, invoices and entitlement history. BATFLOWS does not need your banking password, PIN or one-time password and you must never upload those credentials.

Security, device and technical data

We may process session identifiers, login and recovery events, authentication factors, security-event history, rate-limit events, device or browser information, timestamps, IP-related security data, application logs, webhook delivery information and diagnostic data where needed to secure and operate the Service.

Support information

If you message BATFLOWS Support, we process your messages, attachments and the account, workspace or transaction information needed to investigate and respond.

We use information as reasonably necessary to:

• create and secure accounts, workspaces and team access;
• provide Inbox, CRM, contacts, categories, notes, calls, follow-ups and related features;
• connect and operate WhatsApp Business functionality selected by the customer;
• process plan requests, manual payment verification, activation, renewal and seat changes;
• send transactional, security and support communications;
• prevent abuse, fraud, unauthorized access, spam and security incidents;
• maintain audit records, troubleshoot failures and improve reliability;
• comply with applicable law, legal process and enforceable requests; and
• enforce the Terms of Service and protect BATFLOWS, customers and other users.

Where a law requires a legal basis, processing may rely on performance of a contract, legitimate interests in operating and securing the Service, consent where required, and compliance with legal obligations.

If a customer connects or uses WhatsApp Business services with BATFLOWS, communication data may pass through WhatsApp or Meta systems in order to send, receive, deliver, route or report on messages and related events.

Meta and WhatsApp operate their own services and may process information under their own terms, policies and legal obligations. A BATFLOWS customer is responsible for having any required permission, notice, consent or other lawful basis to contact people and for complying with applicable WhatsApp Business messaging requirements.

More detail is provided in our Data Processing & WhatsApp / Meta Disclosure.

BATFLOWS does not sell customer CRM content as a data-broker product. We may disclose information only as needed for the Service, including to the following categories:

• Infrastructure providers for database, authentication, storage, hosting, logging and application delivery.
• Communication providers such as Meta / WhatsApp for connected business messaging and email providers for transactional messages.
• Authorized workspace users according to owner, manager, agent or other access permissions configured by the customer.
• Professional or legal recipients where reasonably necessary for security, compliance, dispute handling or legal obligations.
• Successors in connection with a lawful merger, acquisition, financing, reorganization or transfer of the Service, subject to appropriate confidentiality and legal protections.

Retention depends on the type of information and why it is needed. Workspace CRM content is generally retained while the workspace is active or until it is deleted through available product controls, account closure or an authorized support process.

Security records, entitlement history, payment records, receipts, invoices, audit trails and records connected with disputes or legal obligations may be retained for longer where reasonably necessary. Backups and provider systems may retain deleted information for a limited period before routine removal.

A customer must not instruct BATFLOWS to delete information that the customer is legally required to preserve. If a customer requests account deletion, we may retain the minimum information necessary to document the closure, prevent fraud, enforce rights or meet legal and accounting obligations.

BATFLOWS uses technical and organizational measures designed to protect information, including authenticated access, role-based controls, private file storage, session controls, multi-factor authentication for sensitive administrative access, rate limiting, audit/security event logging and restricted server-side credentials.

No online service can guarantee absolute security. Customers are responsible for protecting their credentials, enabling available security controls, using appropriate team permissions and notifying BATFLOWS promptly if they suspect unauthorized access.

BATFLOWS and its service providers may process information in countries other than the country where the customer or contact is located. Those countries may have different privacy and data protection laws.

Where applicable law requires transfer safeguards, the customer and BATFLOWS will use the safeguards reasonably required for the relevant transfer and service-provider relationship.

Depending on applicable law, individuals may have rights to request access, correction, deletion, restriction, portability or objection, or to withdraw consent where consent is the applicable basis.

If your information was provided to BATFLOWS by one of our customers through that customer's CRM, please contact that business first. The customer controls the business purpose for that data and is normally best placed to respond. BATFLOWS will provide reasonable assistance to the customer where required.

BATFLOWS account holders may use available Profile, Account, Security and Support controls to review or request changes to their own account information.

BATFLOWS is intended for business and professional use. It is not designed as a consumer service for children. Account holders must be legally capable of entering into the Terms of Service and authorized to act for the business or organization they represent.

We may update this Privacy Policy when the Service, law or our data practices change. Material updates may be communicated through the Service or account communications. The date at the top shows the current version.

Privacy, data or legal requests can be submitted through BATFLOWS Support from your account. If you cannot access the account, use the contact method shown on your BATFLOWS transaction, activation or official account communication. See the Legal & Support Notice for routing details.