Privacy Policy

Last updated: July 2026

Flowqen ("we", "us", or "our") operates the AI sales associate platform available at flowqen.com and app.flowqen.com. This Privacy Policy explains what information we collect from merchants who use Flowqen and from their customers who interact with Olyx, how we use it, and what choices you have. By using Flowqen you agree to the practices described here.

Section 1 — Information We Collect

1.1 Merchant account information

When you create a Flowqen account we collect your name and email address. We use this to identify your account, send service notifications, and provide support.

1.2 Store and catalog data

When you connect your Shopify store, we import product catalog data, inventory levels, order information, and shipping details. This data is stored in our database and used exclusively to power Olyx's responses to your customers. We request only the minimum Shopify API scopes required: read_products, read_inventory, read_orders, and read_fulfillments.

1.3 Customer conversation data

When customers message your store through WhatsApp or the website widget, we store the content of those conversations. This includes customer messages, Olyx's replies, and any structured data captured during the conversation such as names, phone numbers, and order references. This data appears in your Flowqen dashboard as conversations and leads.

1.4 WhatsApp configuration

When you connect WhatsApp Business API, we store your Meta Phone Number ID and access token, encrypted at rest using AES-256. We use these credentials solely to receive inbound messages and send replies on your behalf through Meta's Cloud API.

1.5 Technical data

We automatically collect IP addresses, user agent strings, and request metadata when your customers interact with the widget or WhatsApp channel. We use this for abuse prevention and service reliability.

1.6 Payment data

When you purchase credits, payment is processed by Razorpay. We store your order ID and payment status but never your card number, UPI ID, or bank credentials. Those remain with Razorpay.

Section 2 — How We Use Your Information

We use the information we collect to:

We do not sell your data or your customers' data to any third party. We do not use your customers' conversation data to train AI models without your explicit consent.

Section 3 — AI and Data Processing

Olyx uses large language models to generate responses. Customer messages and relevant context from your knowledge base are sent to our AI provider (currently Groq) to generate replies. We use Meta's WhatsApp Cloud API to send and receive WhatsApp messages. Neither Groq nor Meta store your data beyond what their standard data processing agreements permit.

Your knowledge sources — PDFs, website content, Q&A pairs, and product catalog — are processed and stored as vector embeddings in MongoDB Atlas. These embeddings are used only to retrieve relevant context for Olyx's responses to your customers.

Section 4 — Third-Party Services

We use the following services to operate Flowqen:

Section 5 — Data Retention

We retain your account data and conversation history for as long as your account is active. You can delete individual conversations, knowledge sources, or your entire account at any time from your dashboard. When you delete data it is permanently removed from our active databases. Backups may persist for up to 30 days before automatic purging.

Customer conversation data is retained for 12 months by default. You can delete individual conversations from your dashboard at any time.

Section 6 — Your Rights

You have the right to:

To exercise any right contact us at hello@flowqen.com.

Section 7 — Your Customers' Rights

If one of your customers asks you about their data held by Flowqen, you can delete their conversation records from your dashboard. For requests you cannot fulfill through the dashboard, contact us at hello@flowqen.com and we will assist within 30 days.

Section 8 — Cookies and Authentication

Flowqen uses httpOnly JWT cookies strictly for session authentication. These are set on login and cleared on logout. We do not use advertising cookies, tracking cookies, or third-party analytics. We do not display a cookie consent banner because we use only essential session cookies.

Section 9 — Data Security

We protect your data using encryption in transit (TLS/HTTPS), AES-256 encryption for sensitive credentials like WhatsApp access tokens, secure database access controls, and regular security reviews. No internet transmission is 100% secure and we cannot guarantee absolute security.

Section 10 — Children's Privacy

Flowqen is a business tool for merchants and is not directed at individuals under 18. We do not knowingly collect personal information from minors.

Section 11 — Changes to This Policy

We may update this policy periodically. When we make significant changes we will notify you by email or with a notice on our website. Your continued use of Flowqen after changes constitutes acceptance of the updated policy.

Section 12 — Contact

For any questions about this Privacy Policy or your data:
Flowqen
Email: hello@flowqen.com
Website: flowqen.com