What FlowSell Connect Does

FlowSell Connect provides a unified API and SDK for customer communication channels. WhatsApp Business is the first supported channel, with more providers planned.

We process requests so your application can send messages, manage templates, upload media, receive webhooks, and track API quota without handling provider tokens or raw provider APIs directly.

Data We Store

Account data: name, email address, password hash or SSO identity, session metadata, admin support-session audit details, and workspace settings.

Billing data: Razorpay customer, order, payment, subscription, wallet, setup-fee, and request-pack references. We do not store card numbers, CVV, UPI PINs, or bank credentials.

Channel data: connected WhatsApp Business Account IDs, WhatsApp phone-number IDs, display phone numbers, business names, funding mode, onboarding status, payment setup status, and admin notes needed to operate the connection.

Security data: API key prefixes and hashed API key secrets. The full API key secret is shown once and is not stored in plain text.

Operational data: quota counters, usage events, request-pack balances, webhook endpoints, delivery attempts, audit logs, template metadata, and media IDs uploaded through FlowSell Connect.

Message And Media Content

FlowSell Connect routes message and template payloads to the selected provider. We do not use customer message content for advertising or model training.

For normal sending, we store operational metadata such as endpoint, status, quota usage, provider response identifiers, and error context. We do not intentionally retain full conversation histories.

When you create templates or upload media through FlowSell Connect, we may store template definitions, template status, media IDs, filenames, source URLs, MIME types, and provider metadata so the same assets can be managed and reused from the console or SDK.

Third Parties

We share only the data required to provide the service with infrastructure and payment providers such as AWS, Vercel, Razorpay, email delivery providers, and communication providers such as Meta/WhatsApp.

Provider-specific policies still apply. For WhatsApp, your use of FlowSell Connect must follow Meta Platform Terms, WhatsApp Business Messaging Policy, template approval rules, and applicable consent requirements.

Security And Access

We do not ask customers to manually paste Meta access tokens into the product. Provider authentication is handled through approved OAuth, Embedded Signup, system-token, or admin-assisted workflows.

Administrative support access is limited to operational needs such as onboarding, payment setup, debugging, or customer-requested support. Support sessions should include an actor, reason, timestamp, and audit trail.

Customers are responsible for keeping API keys secret and rotating keys when access should be removed.

Retention And Deletion

We retain account, billing, quota, audit, and operational records for as long as needed to provide the service, meet legal obligations, resolve disputes, and prevent abuse.

You can request account deletion or data review by contacting FlowSell support. Some billing, security, and audit records may be retained where required by law or legitimate operational need.