Privacy Policy

1. Who we are

Flomate is operated by [Your Legal Entity Pvt. Ltd.], [Registered address, City, State, PIN], India. For privacy questions you can reach us at support@flomate.io. As a Data Fiduciary, we determine the purpose and means of processing personal data described below.

2. Information we collect

• Account data — name, work email, phone, role and workspace details you provide at sign-up.
• Customer (CRM) data — the leads, contacts, deals, messages and notes you and your team store in your workspace. You are the controller of this data; we process it on your behalf.
• Communication data — call logs, WhatsApp/email/SMS metadata and content routed through connected channels.
• Usage & device data — log data, IP address, browser/device type, and product analytics used to operate and improve the Services.
• Payment data — billing details processed by our payment partners (we do not store full card numbers).

3. How we use your data

• To provide, secure and maintain the Services and your workspace.
• To send transactional messages (verification, billing, security and service notices).
• To provide support and respond to your requests.
• To improve features, reliability and performance.
• To comply with legal obligations and enforce our Terms.

We do not sell your personal data.

4. Lawful basis & consent

We process personal data on the basis of your consent, the performance of our contract with you, our legitimate interests in operating the Services, and compliance with applicable law. Where we rely on consent, you may withdraw it at any time as described in Section 7.

5. Sharing & sub-processors

We share data with vetted service providers strictly to operate the Services — for example cloud hosting, communication gateways (WhatsApp/email/SMS/voice), analytics and payment processors. These sub-processors are bound by contractual confidentiality and data-protection obligations. We may disclose data if required by law or to protect rights, safety and security.

6. Data retention & storage

We retain personal data for as long as your account is active and as needed to provide the Services, then for the period required to meet legal, accounting and audit obligations. Audit and compliance records are maintained in an append-only manner. Data is stored on infrastructure located in India.

7. Your rights (DPDP)

Subject to applicable law, you may:

• access and obtain a copy of your personal data;
• request correction or completion of inaccurate data;
• request erasure of your personal data;
• withdraw consent for processing that relies on it;
• nominate another person to exercise your rights in case of incapacity; and
• lodge a grievance with our Grievance Officer (Section 9).

To exercise any right, email support@flomate.io. We will respond within the timelines required by law.

8. Security

We use industry-standard safeguards including encryption in transit, role-based access control with row-level data scoping, tenant isolation, and audit logging. No method of transmission or storage is 100% secure, but we work continuously to protect your data. See our Security page.

9. Grievance Officer

In accordance with the DPDP Act and the Information Technology Act, the contact details of our Grievance Officer are:

[Grievance Officer Name]
Email: grievance@flomate.io
[Your Legal Entity Pvt. Ltd.], [Registered address, City, State, PIN], India

10. Children

The Services are intended for businesses and are not directed to children under 18. We do not knowingly collect data from children.

11. Changes to this policy

We may update this Policy from time to time. Material changes will be notified in-product or by email. Continued use of the Services after an update constitutes acceptance of the revised Policy.