Privacy policy
The short version
- We only use data from Instagram and Messenger to run the features you turn on.
- We never see or store your Instagram or Facebook password. You connect with Meta’s own login.
- We don’t sell personal data and we don’t use it for advertising or to train AI models.
- Remove Flivy from your Instagram or Facebook settings, or ask us, and we delete your data. You get a code to track it.
- You can ask for a copy of your data, fix it or delete it at any time.
1. Who we are
Flivy is run by [COMPANY LEGAL NAME], a company registered in India at [REGISTERED ADDRESS] (“Flivy”, “we”, “us”).
There are two kinds of people in Flivy. Customers are the creators and businesses who sign up. Contacts are the people who comment on, message or buy from those customers. For customer accounts we decide how data is used (we are the Data Fiduciary). For contacts, our customer decides and we process the data on their behalf (we are their Data Processor).
2. Data we collect
From you, when you sign up: name, email, phone number for login codes, business name, GSTIN and billing address if you add them, your plan and invoices. Plan payments are handled by Razorpay; we never see full card numbers or UPI PINs.
From Meta, when you connect a channel, you choose which permissions to grant on Meta’s screen. Each one gives us only this:
| Permission | Flivy will be able to | Why |
|---|---|---|
instagram_basic | View your profile and posts | Show your account and let you pick posts for automations |
instagram_manage_comments | Read, reply to and hide comments | Match keywords, post your public replies, hide or delete comments you choose |
instagram_manage_messages | Send and manage messages | Send your automated and inbox replies, show conversations |
pages_show_list | See the list of Pages you manage | Let you choose which Page to connect |
pages_messaging | Read and reply to Messenger chats for the chosen Page | Messenger automations and the inbox |
pages_manage_metadata | Read and reply to Messenger chats for the chosen Page | Receive new chats and comments for the chosen Page |
pages_read_engagement | Read and reply to comments on the Page's posts | Match keywords on the Page’s posts |
pages_read_user_content | Read and reply to comments on the Page's posts | Read the comments people leave on the Page |
pages_manage_engagement | Read and reply to comments on the Page's posts | Post your public replies and hide comments you choose |
We use data from Meta only to provide Flivy to the customer who connected it. We don’t sell it, use it for ads, or combine it into profiles outside that customer’s workspace. WhatsApp is not connected in this version; its permissions will be listed here before it launches.
About contacts, on our customers’ behalf: their Instagram- or Page-scoped ID, username, name and profile photo, the comment or message text, whether they follow the customer (checked only after they tap a follow button), any email or phone number they choose to share, orders and tags.
Automatically: device and browser type, a hashed IP address, pages used and error logs. Essential cookies keep you logged in; analytics stay off until you agree.
3. How we use it
- To run the features you set up: replies, automations, the inbox, link-in-bio pages and checkout.
- To keep accounts safe: pacing sends under Meta’s limits and spotting spam and abuse.
- To bill you, send GST invoices and meet tax and legal duties.
- To support you when you ask for help, and to tell you about changes to the service.
- To improve Flivy using counts and trends, never by reading individual conversations without your permission.
Legal basis. In India we rely on your consent and on the legitimate uses allowed by the Digital Personal Data Protection Act, 2023. Where the GDPR applies, we rely on our contract with you, legitimate interests and consent.
AI features. If you turn on AI replies, the message being answered and your knowledge base are sent to Anthropic to write a reply. Our agreement does not let them train models on this data.
5. How long we keep it
| Data | Kept for |
|---|---|
| Meta access tokens | Deleted at once when you disconnect or remove the app |
| Messages, comments, contact profiles | While the channel is connected. Deleted within 30 days of disconnecting or deleting the contact |
| Delivery logs | 90 days |
| Raw webhook payloads | 14 days |
| Account and workspace | While your account is open. Deleted within 30 days of closing it |
| Invoices and tax records | As long as Indian tax law requires, currently up to 8 years |
| Backups | Overwritten within 35 days |
6. Your rights
- Get a summary of the personal data we hold and who we shared it with.
- Correct, complete or update it.
- Delete it, unless the law makes us keep it (for example invoices).
- Withdraw consent at any time. This stops future use; it doesn’t undo past use.
- Name someone to act for you if you die or can’t act yourself.
- Raise a complaint with our Grievance Officer.
Customers can do most of this in Settings. Anyone can email [LEGAL EMAIL]; we reply within 30 days. If you’re not happy with our answer, you can complain to the Data Protection Board of India. If you messaged a business that uses Flivy, use the data deletion request on the Data deletion page and we act on it.
7. Security
Data is encrypted in transit and at rest, and Meta access tokens are encrypted separately with their own key. Staff access is limited to what each job needs, protected by two-factor login and logged. If a breach affects your data, we tell you and the Data Protection Board as the law requires.
8. Children
Flivy accounts are for people aged 18 and over. Customers must not knowingly target children with automations. If you think we hold a child’s data, email [LEGAL EMAIL] and we’ll delete it.
9. Where data is stored
Our main database is in India (Mumbai). Some sub-processors work in other countries; we only transfer data to countries the Government of India has not restricted, with contract safeguards in place.
10. Changes to this policy
We email customers and show a notice in the app at least 30 days before an important change. The date at the top always shows the latest version.
11. Contact and Grievance Officer
Grievance Officer: [GRIEVANCE OFFICER NAME], [COMPANY LEGAL NAME], [REGISTERED ADDRESS]. Email [LEGAL EMAIL]. We acknowledge complaints within 24 hours and aim to resolve them within 15 days.
Refund policy in short
One-click cancel in Settings. Full refund within 30 days of your first payment for a plan. Pro-rated refunds on yearly plans after that. GST invoices for every payment.
Read the refund policyContact us
Privacy and legal: [LEGAL EMAIL]
Grievance Officer: [GRIEVANCE OFFICER NAME]
[COMPANY LEGAL NAME], [REGISTERED ADDRESS]