Draft — under review. This policy has not yet been reviewed by a lawyer and may change. Last updated 8 October 2026.

Privacy policy

This policy explains how Flowgento (“we”, “us”) handles personal data when you use flowgento.ai, the Flowgento seller panel, and the online shops that sellers run on Flowgento. It is written with India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) in mind.

1. Two roles

Sellers and their staff. For the account you create with us — your name, email, phone and business details — we decide why and how the data is used. Under the DPDP Act we are the Data Fiduciary for it.
A seller’s customers. When you buy from a shop that runs on Flowgento, the shop decides what happens with your data and is its Data Fiduciary. We process it on the shop’s behalf, to run the shop for them. Questions about an order or a shop’s messages should go to that shop first; we will help the shop answer.

2. What data, and why

Account data — name, email, phone, a hashed password (we never store the password itself), and the Google account id if you sign in with Google. To create your account, sign you in and keep it secure.
Business data — shop name, address, GSTIN, bank and UPI details you choose to print on invoices, products, orders, invoices, purchases, expenses and other records you enter. To run the service you asked for, including GST invoices and reports.
Staff data entered by a seller — names, phone numbers, a hashed kiosk PIN and attendance records. To provide the team, attendance and kiosk features to that seller.
Shop customers’ data — name, phone, email, delivery addresses, orders, wishlists, reviews (with any photos added), questions, and a record of marketing consent. To take and deliver orders, send order updates, and handle returns on the shop’s behalf.
Payments — card, UPI and netbanking payments are handled by Razorpay. We keep payment references and amounts, never card numbers.
Messages — order updates by email and WhatsApp. Marketing messages and campaign emails go only to people with a recorded opt-in, and stop when they reply STOP or unsubscribe.
Technical data — cookies that keep you signed in; on shops, a random first-party visitor id cookie used only for the shop’s own visit statistics (never shared with advertisers); IP addresses in security and rate-limit records; anonymised error reports.
Contact and support — what you send us through the contact form, email or phone, to answer you.
Subscription billing — the plan you are on and your payments to us, to bill you and issue GST invoices.

We do not sell personal data, and we do not use a shop’s customer data for our own marketing.

3. Who processes data for us

We use these service providers (“processors”) to run Flowgento. Each receives only what its job needs:

Server and database hosting — the servers that run the application and its PostgreSQL database. [Owner: name the provider and the data location.]
Cloudflare R2 — storage for files: product photos, review photos, uploaded bills and documents, exports and backups.
Email delivery — ZeptoMail and Resend, to send sign-in codes, order emails, reminders and campaign emails.
WhatsApp — Meta’s WhatsApp Business Platform and the WhatsApp API service we connect through, to send and receive WhatsApp messages.
Razorpay — payments to sellers (through each seller’s own Razorpay account) and subscription payments to us.
Google — “Sign in with Google”, and Google Gemini for the optional AI helpers (for example drafting product details or reading a voice note). Only the text, image or audio you ask a helper to work on is sent.

Some providers may process data outside India. Where they do, we rely on the transfer being permitted under section 16 of the DPDP Act. [Owner: confirm locations.]

4. How long we keep it

Account and business data: while the account is open. When an account is closed, we delete or anonymise it, except records we must keep by law.
Tax records (invoices, credit notes, accounts): for as long as GST and income-tax law require — generally at least six years from the relevant return.
When a shop customer deletes their account, their personal details are blanked; their orders and tax documents stay, because the law requires them.
Raw shop visit events: 90 days, after which only daily totals are kept.
Deleted files go to a recycle bin and are removed for good after 30 days; file backups are kept for 30 days.

5. Your rights

Under the DPDP Act you can ask us to:

access a summary of your personal data and how it is processed;
correct or complete it, or bring it up to date;
erase it, where we no longer need to keep it by law;
withdraw consent you gave (for example to marketing) at any time — this does not affect what was done before;
nominate someone to exercise these rights for you if you die or cannot act; and
have a grievance heard, and if you are not satisfied, complain to the Data Protection Board of India.

Sellers can download all of their shop’s data from Settings at any time. Shop customers can download their data or delete their account from their account page in the shop, or ask the shop.

6. Security

Passwords and PINs are stored only as hashes. Each shop’s data is kept apart from every other shop’s by the database itself. Connections are encrypted. No system is perfectly secure; if a breach affects you, we will tell you and the Data Protection Board as the law requires.

7. Children

Flowgento is a service for businesses and is not meant for children. Sellers must not knowingly collect children’s data through their shop without verifiable parental consent.

8. Grievances and contact

Grievance contact: sales@flowgento.ai (write). [Owner: name the grievance officer.] You can also use the contact page.

9. Changes

We will post any change here with a new date, and tell sellers in the seller panel or by email when a change matters to them.

See also the Terms of Service and the Refund policy.