Privacy Policy

Last updated: September 1, 2026

FlowAI CRM ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how your personal information is collected, used, and disclosed by FlowAI CRM.

1. Information We Collect

When you connect your Facebook or Instagram account to FlowAI CRM, we receive access to certain information from your Meta profile based on the permissions you grant us. This includes:

  • Basic profile information (name, profile picture)
  • Information about your connected Facebook Pages and Instagram Business Accounts, including the account name, username and the technical identifiers Meta assigns to them
  • Messages, comments, and interactions from your audience to allow our CRM to process them, together with the sender's public Instagram username and profile picture
  • An app-scoped identifier that Meta assigns to your account when you authorise FlowAI CRM
  • The access credentials Meta issues so the integration can keep working on your behalf

Access credentials are stored encrypted and are never shared, displayed or used for any purpose other than operating the connection you authorised. The app-scoped identifier is used only to recognise your account when Meta sends us a deauthorisation or a data deletion request, so that we act on the correct connection. We never use it for advertising, tracking or profiling.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain our CRM services
  • Process and display your conversations and messages within the platform
  • Keep your authorised Facebook and Instagram connections working, including replying to messages and comments from within the CRM on your behalf
  • Improve, personalize, and expand our services
  • Send you administrative messages and customer support responses

3. Third-Party Access

We do not sell, trade, or otherwise transfer your personally identifiable information to outside parties. Your data is strictly used to provide you with the CRM capabilities you requested.

4. Data Retention and Disconnection

You can disconnect a Facebook Page or an Instagram Business Account at any time from your account settings in FlowAI CRM, or by removing our app from your Facebook or Instagram settings.

  • When you disconnect an account inside FlowAI CRM, we immediately delete the access credentials stored for it and stop processing new messages and comments for that connection.
  • When you remove FlowAI CRM from your Meta account settings, Meta notifies us and we revoke the connection and delete the access credentials we had stored for it.
  • Your existing CRM history — conversations, contacts and messages already received — is not deleted automatically, so that you keep your business records. It remains in your workspace until you ask us to erase it.

If you want that history removed as well, follow the process described below.

5. Data Deletion

You have the right to request the deletion of your data at any time. For detailed instructions on how to remove our app's access and request full data erasure, please visit our Data Deletion Instructions page.

6. Contact Us

If you have any questions about this Privacy Policy, please contact us at support@flowaicrm.com.