AAgentFlow

Privacy policy

Last updated: September 30, 2026

This policy explains what information AgentFlow (“we”, “us”) collects when you use AgentFlow (the “Service”), how we use it, and the choices you have.

1. Who we are

AgentFlow is operated by AgentFlow. You can reach us at our contact page.

2. Information we collect

From account holders (businesses using the Service)

  • Account details — your name, email address and a securely hashed password; for team members, the same details added by the account owner.
  • Billing details — the plan you choose and payment references such as bKash or Nagad transaction IDs and the sending number.
  • Business content — websites you ask us to read, files, text and Q&A you upload, instructions and settings.
  • Connected accounts — when you connect WhatsApp, Telegram, a Facebook Page or an Instagram professional account, we store the identifiers and access tokens needed to send and receive messages for you (for example your Page ID, Page name, Instagram account ID and username).

From your customers (people who chat with an agent)

  • Messages sent to an agent on a website, WhatsApp, Messenger, Instagram or Telegram, including voice notes and images, which may be transcribed or described automatically.
  • Contact details the channel provides or the customer shares — such as name, phone number, platform user ID or email address.
  • Technical data — a random visitor ID stored in the browser so a website chat can continue, and the page URL where the chat started.

Automatically

  • Log and security data such as IP address, browser type and timestamps, used to keep the Service secure and prevent abuse.
  • A login cookie that keeps you signed in. We do not use advertising cookies.

3. How we use information

  • To provide the Service: train your agent on your content, generate replies, deliver messages on the channels you connected and show conversations in your inbox.
  • To show analytics such as topics, sentiment, ratings and unanswered questions to the account holder.
  • To notify your team (for example a WhatsApp or Slack alert when a customer needs a person) and send events to integrations you set up.
  • To process payments, provide support, keep the Service secure and comply with the law.

We do not sell personal information and we do not use your content or your customers’ messages for advertising.

4. Our role for customer conversations

For messages exchanged between a business and its customers, the business decides how the agent is used and is responsible for its own privacy notice. We process those messages on the business’s behalf to provide the Service.

5. Service providers

We share information only with providers that help us run the Service, and only as needed:

  • AI model providers — message text and the relevant parts of your business content are sent to AI providers to generate replies, embeddings, transcriptions and image descriptions.
  • Hosting and infrastructure — servers and databases where the Service and its data are stored.
  • Messaging platforms — WhatsApp, Meta (Facebook Messenger and Instagram) and Telegram, to deliver messages on channels you connect.
  • Integrations you enable — such as Slack, Zapier, Make or your own webhook, which receive the events you choose.

6. Facebook and Instagram data

When you connect a Facebook Page or Instagram account we use the permissions you grant only to list your Pages, receive messages sent to them and reply on your behalf. Page access tokens are stored on our servers and never shown in the browser. You can remove this access at any time:

  • Disconnect the Page or Instagram account in your agent’s Channels page — this deletes the stored token; or
  • Remove the app in Facebook → Settings & privacy → Settings → Business integrations; or
  • Follow the steps on our data deletion page.

7. Retention and deletion

We keep your data while your account is active. You can delete sources, conversations, contacts or a whole agent from the dashboard at any time, and deleted items are removed from our active systems. To delete your account and all its data, contact us at our contact page. Backups are overwritten on a rolling basis.

8. Security

We use encrypted connections (HTTPS), hashed passwords, access controls and team roles to protect data. No online service can be completely secure, so please use a strong password and keep API keys private.

9. Your choices and rights

You can access, correct, export or delete your information by using the dashboard or by contacting us. Customers who chatted with a business can contact that business, or us, to request deletion of their messages.

10. Children

The Service is intended for businesses and is not directed to children under 13.

11. Changes

We may update this policy from time to time. We will post the new version on this page and change the date above; significant changes will be announced in the dashboard or by email.

12. Contact

Questions about this policy? Contact AgentFlow at our contact page.