Privacy Policy.
How Flixer collects, uses and protects information — and why your contacts, conversations and keys stay yours.
Overview
Flixer is a self-hostable, AI-native WhatsApp Business CRM. Each deployment is run by an operator — the business or individual who installs and configures it. Because contacts and conversations live inside the operator's own deployment, the operator is the data controller for the people they message, and is responsible for complying with the privacy laws that apply to them. This policy explains what we, as the makers of the software, collect and how information is handled across the platform.
Information we collect
Depending on how you use the service, the following may be collected:
- Account details — your name, email address and login credentials, used to identify you and secure access to your workspace.
- WhatsApp contacts and message content — the contacts you import and the messages you send and receive through the WhatsApp Business Cloud API. This content is stored in the operator's own database.
- Usage and diagnostic logs — technical information such as timestamps, feature usage, delivery status and error logs, used to keep the service running and to troubleshoot problems.
How we use information
Information is used to:
- Provide the core product — the shared inbox, AI-generated replies, broadcasts and no-code automations.
- Route messages to and from the official WhatsApp Business Cloud API and deliver them to the right conversations.
- Secure the service, prevent abuse, and diagnose and fix issues.
- Improve reliability and performance over time.
We do not sell your data, and we do not use the content of your conversations to advertise to you.
Your data ownership
Ownership sits with you. Your contacts, conversations and API credentials live in the operator's own database, not in a shared multi-tenant store we control. There is no per-seat pricing and no lock-in — you can export your data at any time and take it with you. If you self-host, the data never leaves the infrastructure you choose to run it on.
Third-party services
The platform depends on services you connect with your own accounts and keys:
- WhatsApp Business Cloud API — all messages are sent and received through Meta's WhatsApp Business platform and are subject to Meta's own privacy terms.
- AI provider — AI-generated replies are produced by the AI provider you choose, using your own API key. Message content sent for a reply is processed under that provider's terms; review their privacy policy before enabling AI features.
Data security
We take reasonable technical measures to protect information:
- API tokens and AI provider keys are stored encrypted at rest using AES-256-GCM.
- All traffic is transported over HTTPS.
- Access controls limit who in your workspace can see and act on conversations.
No system is perfectly secure, but we work to keep credentials and message data protected.
Your rights
Depending on where you live, you may have the right to access, correct, delete and export the personal data held about you. Because operators control their own deployments, requests about a specific business's contacts are best directed to that operator. To exercise a right against us as the software maker, contact us using the details below and we will respond within a reasonable time.
Contact
Questions about this policy or your data? Email adarshdubey334@gmail.com.