ClientFlow4U
Start free
Your data, protected

Privacy, plainly written.

We explain exactly what we collect, why, where it lives, and how you can take it back — no legal jargon, no dark patterns.

Last updated April 15, 2026
AES-256
Tokens encrypted at rest
HTTPS/TLS
End-to-end in transit
HMAC-SHA256
Webhooks verified
30 days
Full deletion window
01

Introduction

ClientFlow4U ("we", "our", "us") operates a WhatsApp marketing and communication SaaS platform. This policy explains how we collect, use, disclose and safeguard your information when you use our services.

02

What We Collect

Five categories — nothing more than what's needed to run the product.

Account
Name, email and password. If you sign in with Google or Facebook, your name, email and profile picture.
Company
Company name, country, timezone and currency — captured during onboarding.
WhatsApp Business
WhatsApp Business Account ID, phone number ID and an encrypted access token. We never store your Meta password.
Contacts
Phone numbers, names and emails you upload. You are responsible for having consent to message them.
Usage
Campaigns sent, messages delivered and feature usage — used only for analytics and improving the product.
03

How We Use It

  • Operate and maintain the platform
  • Process subscriptions and payments via Lemon Squeezy
  • Send WhatsApp messages through the Meta Cloud API on your behalf
  • Provide customer support and respond to tickets
  • Send service-related notifications (never spam)
  • Analyze usage to improve features and performance
  • Detect, prevent and resolve technical issues

Data Security

Security isn't a checkbox — it's in the architecture.

AES-256
WhatsApp access tokens encrypted at rest
HTTPS/TLS
All traffic encrypted in transit
HMAC-SHA256
Webhook signature verification
bcrypt
Password hashing
CSRF
Session-based auth with token protection
Tenant-scoped
Every row isolated by company_id
05

Third-Party Services

We rely on a small, vetted set of providers. Each has its own privacy policy.

Meta (WhatsApp Business Cloud API)
Sends and receives your WhatsApp messages.
Lemon Squeezy
Payment processing and invoicing.
Google / Facebook OAuth
Optional social sign-in.
Pusher
Real-time chat updates in the inbox.
06

Retention & Deletion

We keep your data for as long as your account is active. On deletion, we remove personal and contact data within 30 days. Some records (billing, audit logs) are kept longer for legal compliance. You can trigger full deletion anytime from your profile or via the Meta data-deletion callback.

07

Your Rights

Access
Request a copy of your personal data
Correct
Update inaccurate information
Delete
Remove your account and associated data
Export
Download your contacts as CSV
Withdraw
Revoke consent for data processing

Exercise any right by emailing privacy@clientflow4u.com or from in-product settings.

08

Meta Platform Terms

We operate under Meta's BYOW (Bring Your Own WhatsApp) model. Meta messaging charges are billed directly by Meta to your Meta Business account — we never handle Meta billing. Your messaging is subject to Meta's Platform Terms and WhatsApp Business Policy.

09

International Transfers

Your data may be stored and processed in the country of our hosting provider. By using the platform you consent to such transfers in accordance with applicable law.

10

Children's Privacy

The platform is not intended for anyone under 16. We do not knowingly collect data from minors.

11

Changes to This Policy

We may update this policy from time to time. Significant changes will be announced by email or an in-product notice.

Free forever plan

Ready to scale your WhatsApp outreach?

Launch your first campaign in under 10 minutes. No credit card, no commitment, no WhatsApp ban risk.

Get started free