what we collect

your account. name, email, phone, workspace and brand info, login and authentication logs, IP and device metadata.

Instagram, via Meta's official API. DMs and comments on your connected account, message metadata, and public profile info of people who message you (handle, name, photo). we never see or store your Instagram password.

WhatsApp, via the official WhatsApp Business Platform. inbound messages, outbound message logs (template, send time, delivery status, opt-outs), and the opt-in consent records you provide. we never see or store your WhatsApp password or session credentials.

Shopify, via the official API. product, collection, and order data, and purchase/cart activity used for outbound targeting. we don't store full payment details or complete customer addresses, most of this is fetched live rather than stored.

AI processing. message classification, intent and sentiment outputs, outbound targeting signals, escalation logs, and automation performance metrics.

knowledge base. FAQs, policies, documents, and brand voice settings you upload.

billing. plan, credit and outbound usage, invoices, GST details. payment processing is handled by PCI-compliant processors like Razorpay or Stripe, we never see your card number.

dashboard usage. cookies for login sessions, feature usage, and product improvement.

support. anything you send us when you reach out, emails, screenshots, bug reports.

how we use data

run linkfliq. connect your integrations, generate AI replies from your live catalogue, detect spam and high-intent buyers, escalate sensitive conversations to your team.

target outbound messages. decide who to send WhatsApp outbound to, based on your customers' purchase and conversation history, and only where you've provided valid opt-in consent.

train our AI. we use conversation and outcome data, what customers asked, how the AI replied, whether it led to a sale or resolution, to train and improve linkfliq's models, so it sells and supports better over time. this data stays inside linkfliq: we don't sell it, license it, or share it with other businesses or unrelated third parties. you can opt your brand's data out of training anytime, see "your choices and rights" below.

bill and support you. manage subscriptions, credits, and outbound charges, answer questions, keep the platform reliable.

improve the product. see how linkfliq is used in aggregate, fix bugs, decide what to build next. we never use your data for advertising.

Meta and Shopify integrations

Instagram and WhatsApp are connected through Meta's official OAuth and APIs, with your explicit permission. messaging respects Instagram's 24-hour window and WhatsApp's messaging and template rules. as the brand, you're solely responsible for the accuracy of the opt-in consent records you give us for outbound messaging.

Shopify is connected through Shopify's official OAuth, and used only to answer product, order, and support queries and power outbound targeting, we never change your store settings, products, prices, or orders on our own. you can revoke access anytime from your Shopify admin.

companies that help us run linkfliq

we rely on a few trusted subprocessors to host, secure, and run the platform, sharing only what each one needs.

hosting and storage. cloud infrastructure providers (such as AWS or Google Cloud).

messaging platforms. Meta, for the Instagram Graph API and WhatsApp Business Platform, and Shopify, for store data.

payments. PCI-compliant processors such as Razorpay or Stripe.

AI and reliability. we use large language model providers (such as Anthropic or OpenAI) to generate AI replies and, separately, to help train and improve linkfliq's own models, plus tools that help us catch errors and keep the platform running. conversation data sent to these providers is used solely to power linkfliq and improve our models, never to train the provider's own general-purpose models, per our agreements with them.

all subprocessors are bound by confidentiality and data protection agreements, and none of them use your data to train their own general-purpose models.

keeping your data safe, and deleting it

data is encrypted in transit (TLS 1.2+) and at rest. access is role-based and logged, and all connected-account access uses OAuth, we never store your Instagram or WhatsApp passwords. we follow security practices aligned with SOC 2 principles; formal certification is in progress.

while your account is active, we retain conversation logs and outbound/opt-in records for 12 months by default (configurable), billing and tax records for 7 years as Indian law requires, and support tickets for 24 months. if you delete your account, your brand and end-customer conversation data is deleted or anonymized within 30 days; records we're legally required to keep (tax, audit) are retained for the mandated period. data already used to train our AI models is not retroactively removed from a trained model, but is no longer used going forward.

if a data breach affects your data, we'll notify you and the Data Protection Board of India, or other applicable authority, within the timelines the DPDP Act requires.

some processing may happen on servers outside India through our cloud and AI providers; where that applies, we follow the DPDP Act's cross-border transfer requirements and use providers with equivalent protection standards.

your choices and rights

access and correct. you can request the data we hold about you and ask us to fix inaccuracies.

delete. email us and we'll delete your data within 30 days, subject to legal retention requirements.

opt out of AI training. if you'd rather your brand's conversation data not be used to train our models, email us and we'll exclude it going forward. this doesn't affect linkfliq's core functionality, replies and automation keep working as normal.

restrict or object. ask us to limit certain processing, including opting your business out of specific data uses.

portability. request a copy of your data in a machine-readable format.

withdraw consent or file a complaint. where processing relies on consent, you can withdraw it; you can also lodge a complaint with the Data Protection Board of India.

end customers. if you're an end customer of one of our brands, contact that brand directly, they're the data fiduciary responsible for your access, correction, deletion, and opt-out requests. every outbound WhatsApp message includes a way to opt out, and we help brands fulfill these requests promptly.

to exercise any of these rights, email support@linkfliq.com. we respond within timelines required by law, typically within 30 days.

children, changes, contact

linkfliq is a business tool, not directed at anyone under 18, and we don't knowingly collect data from minors. brands are responsible for ensuring their own end-customer messaging complies with applicable child privacy laws.

we may update this policy as linkfliq changes. material changes will be communicated by email or in-app notice at least 7 days before they take effect.

privacy questions: support@linkfliq.com

grievance officer

as required under Indian law:

Name: Akshay Kheveria
Designation: Co-founder, Fliqmedia Tech Pvt. Ltd.
Email: support@linkfliq.com
Address: Fliqmedia Tech Pvt. Ltd., India

we acknowledge grievances within 24 hours and aim to resolve them within 15 days.

questions?

email support@linkfliq.com and we'll help.