Skip to privacy policy

Privacy Policy

Last updated:

On this page

Questions about your data?

support@flixer.in

Flixer (“Flixer”, “we”, “us”) is a WhatsApp CRM built on the official WhatsApp Business Platform (Meta Cloud API). This policy explains what information we collect, how we use it, and the choices you have. By using Flixer at https://flixer.in you agree to this policy.

Information we collect

  • Account data — your name, email address and password (stored hashed) when you create a Flixer account.
  • WhatsApp Business Account data— when you connect WhatsApp through Meta’s Embedded Signup, we receive and store your WhatsApp Business Account ID, phone number ID and an access token issued by Meta. The access token is encrypted at rest (AES-256-GCM) and used only to send and receive messages on your behalf through the WhatsApp Business Platform.
  • Message & contact data — the WhatsApp messages, contacts, and conversation metadata that flow through your connected number, so we can provide the shared inbox, automations, broadcasts and analytics you asked for.
  • Usage data — basic logs (timestamps, error traces) needed to operate and secure the service.

How we use your information

We use your data solely to provide and operate Flixer: routing inbound WhatsApp messages to your inbox, sending messages and broadcasts you initiate, running the automations you configure, and showing your own analytics. We do not sell your data, and we do not use your WhatsApp message content for advertising.

WhatsApp / Meta Platform data

Our use of information received from the WhatsApp Business Platform and Meta APIs adheres to the Meta Platform Terms and Developer Policies, including any restrictions on the use and transfer of Platform Data. Tokens and business assets obtained via Embedded Signup are used only to operate your own account’s messaging.

Storage & security

Data is stored in a Postgres database (Supabase) with row-level security so each account can only access its own data. WhatsApp access tokens are encrypted with AES-256-GCM. All traffic is served over HTTPS, and inbound webhooks are verified with an HMAC-SHA256 signature.

Data retention & deletion

We retain your data for as long as your account is active. You can disconnect WhatsApp at any time from Settings, which deletes the stored credentials for your number. To delete your account and all associated data, email us at support@flixer.in and we will erase it within 30 days.

Your rights

You may access, correct, export or delete your personal data. Contact us and we will respond within a reasonable time.

Contact

Questions about this policy? Email support@flixer.in.