Legal

Privacy Policy

This policy explains what personal data DiraFlow collects, how we use and share it, how long we keep it, and the choices and rights you have — including data processed through the WhatsApp Business Platform.

Last updated: 4 July 2026

1. Who we are

DiraFlow is an all-in-one billing, inventory, employee and customer-communication platform for small businesses, operated by Diraflow Technologies (“DiraFlow”, “we”, “us” or “our”). This policy applies to the DiraFlow website at diraflow.in, our web application and dashboards, and the WhatsApp messaging features offered as part of the DiraFlow platform.

If you have any questions about this policy or your data, contact us at [email protected].

2. Who this policy covers

  • Business customers (“Clients”) — the businesses that create a DiraFlow account and use our platform, including its WhatsApp dashboard.
  • End customers — the individuals a Client communicates with, including people who message a Client’s connected WhatsApp Business number.
  • Website visitors — anyone who visits diraflow.in or requests a demo.

3. Information we collect

a) Information you provide. Account and business details such as your name, business name, email address, phone number, store and staff information, and billing details you enter to use DiraFlow.

b) WhatsApp Business Platform data. When a Client connects their WhatsApp Business Account to DiraFlow, we process data through Meta’s WhatsApp Business Platform on that Client’s behalf, including:

  • The Client’s WhatsApp Business Account ID(s) and business phone number(s);
  • Message content sent and received — text, media, templates and interactive messages;
  • Message metadata — message IDs, timestamps, and delivery and read status;
  • End-customer WhatsApp phone numbers and WhatsApp profile names;
  • Conversation and contact records needed to display the dashboard and message history.

c) Information collected automatically. Basic log and usage data such as IP address, device and browser type, and pages viewed, used to keep the service secure and working. We use only the cookies necessary to sign you in and operate the site.

4. How we use information

  • To provide, operate and secure the DiraFlow platform and its WhatsApp dashboard;
  • To send and receive messages a Client initiates, and to show delivery and read status;
  • To display conversation history, contacts and analytics to the Client;
  • To provide customer support and respond to your requests;
  • To detect, prevent and investigate fraud, abuse and security incidents;
  • To meet legal, tax and regulatory obligations.

We do not sell your personal data, and we do not use the content of WhatsApp messages for advertising.

5. Our role: controller and processor

For a Client’s own account information, DiraFlow acts as a data controller. For the end-customer data a Client sends or receives through their connected WhatsApp Business Account, DiraFlow acts as a data processor and handles that data only on the Client’s instructions. End customers who message a business should also refer to that business’s own privacy notice, as the business is the controller of that conversation.

6. WhatsApp & Meta platform data

DiraFlow’s WhatsApp features are built on the WhatsApp Business Platform provided by Meta. Our receipt, use and transfer of information received through the WhatsApp Business Platform and Meta APIs adhere to the Meta Platform Terms and Developer Policies, including any applicable limited-use requirements. We access this data only to provide and improve the messaging features you have enabled, and to the extent permitted by Meta’s policies and by the Client who owns the WhatsApp Business Account. To operate these features, relevant data is also processed by Meta in accordance with Meta’s own privacy policy.

7. How we share information

We share data only as needed to run the service:

  • Meta Platforms — to deliver and receive WhatsApp messages via the WhatsApp Business Platform;
  • Infrastructure providers — our cloud hosting, content-delivery and secure object-storage providers that host the application and its data;
  • Service providers — for example SMS delivery, strictly to provide features you use;
  • Legal and safety — where required by law, regulation or valid legal process, or to protect our users and the service.

We require these providers to protect your data and to use it only for the purposes we specify. We do not sell or rent personal data to third parties.

8. Data retention

We keep personal data for as long as a Client’s account is active and as needed to provide the service, then delete or anonymise it within a reasonable period unless a longer period is required by law (for example, tax records). A Client may disconnect their WhatsApp Business Account at any time, after which we stop processing new messages for that account.

9. Your rights & data deletion

Subject to applicable law (including India’s Digital Personal Data Protection Act, 2023, and the GDPR where it applies), you may request to access, correct, export, or delete your personal data, or object to or restrict certain processing.

To request deletion of your data, or to exercise any other right, email [email protected] from the address associated with your account, or ask the business you interacted with to forward your request. We will verify and respond to your request within the time required by applicable law. Clients can also delete individual records and disconnect their WhatsApp Business Account from within the dashboard.

10. How we protect data

  • All traffic to DiraFlow is encrypted in transit using HTTPS/TLS;
  • Incoming WhatsApp webhook requests are cryptographically verified before they are accepted;
  • Access to production data is restricted to authorised personnel on a need-to-know basis;
  • Data is hosted on secured, access-controlled infrastructure with regular backups.

No method of transmission or storage is completely secure, but we work to protect your data using industry-standard safeguards.

11. International transfers

DiraFlow is operated from India. Where data is processed by providers such as Meta or our infrastructure partners outside your country, we take steps to ensure it remains protected in line with applicable data-protection laws.

12. Children’s privacy

DiraFlow is a business tool and is not directed to children. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you. Continued use of DiraFlow after an update means you accept the revised policy.

14. Contact us

Diraflow Technologies
Email: [email protected]
Website: diraflow.in

Sign in to your store

Select your organization to continue.

AMD
amd.diraflow.in
Demo
demo.diraflow.in
Scissors
scissors.diraflow.in
No organizations match “”.