Interflow values your privacy and is committed to protecting the personal information of our customers and their end users. This Privacy Policy describes how we collect, use, share, and protect information obtained through our platform, accessible at interflow.chat ('Platform').
1. Information We Collect
1.1 Customer Information
When you register on our Platform, we collect information to provide and improve our services, such as:
- Name and contact information, including email address, phone number, and billing information.
- Authentication information, such as usernames and passwords.
1.2 End User Data
Our Platform allows companies to integrate various communication channels, including WhatsApp, Instagram, Facebook, and email. During use, we may process:
- Text messages and audio transcripts of conversations between end users and attendants.
- End user identifiers (e.g., phone number or profile ID).
- Conversation tagging for internal organization purposes.
1.3 Navigation and Usage Data
We automatically collect information about Platform usage to improve user experience and system security, including:
- Log data and browsing records, such as IP address, browser type, pages viewed, and actions taken.
- Performance data to monitor and enhance our services.
2. Google user data (Gmail and Calendar)
When a customer connects a Google account to Interflow, we access only the data needed for the enabled feature (Gmail email channel and/or Calendar integration). This Google user data is used solely to provide and operate those Platform features. We do not use Google user data for advertising, sale, credit, personalized ads, building external databases, or to develop, improve, or train generalized or non-personalized AI/ML models. Google Workspace APIs are not used to develop, improve, or train non-personalized AI/ML models.
2.1 Gmail — what we access and why
With the gmail.modify scope and the account email (userinfo.email), Interflow:
- Reads new messages in the connected mailbox to open them as support conversations in the inbox.
- Sends replies on the same thread from the connected mailbox.
- Uses the account address only to identify the channel and confirm the connection.
- Does not backup the mailbox, mass-export mail, scan for ads, or monitor mail outside support.
2.2 Google Calendar — what we access and why
With the calendar.events.owned scope, Interflow:
- Creates, reads, updates, and deletes only events the app itself created, for support scheduling.
- Does not use Calendar data for ads, profiling, or model training.
2.3 Sharing, retention, and deletion of Google data
Gmail and Calendar data:
- May be processed by cloud and infrastructure providers strictly to operate the Platform, under confidentiality obligations.
- Are not sold, transferred to data brokers, or used by third parties for advertising.
- Are kept only while the channel or integration is connected, or as required by law.
- When you disconnect Gmail or Calendar, OAuth tokens are revoked/deleted and send/receive for that account stops. You may request deletion at contact@interflow.chat.
3. Use of Information
We use collected information only to provide and improve the Platform’s functionality. In particular:
- Provide and Manage the Platform: authentication, inbox, channels, support, and billing.
- Platform improvement: product telemetry (UI usage, performance, and errors). This analysis does not include Gmail message content or Google Calendar events.
- Google data: used only as described in section 2, for the email channel and Calendar.
- Security and Legal Compliance: fraud protection and applicable law.
4. Information Sharing
Interflow may share personal information in the following cases. We do not transfer Google user data to third parties for advertising, sale, or model training.
- With Third-Party Providers: To operate the Platform (payments, cloud, transactional email), always under confidentiality and only as needed for the service.
- To Comply with Legal Obligations: When required by law, regulation, or to respond to legal processes.
- In Cases of Mergers or Acquisitions: In case of change of control or asset sale, user information may be transferred as necessary, subject to this policy.
5. Data Security
We implement technical and organizational measures to protect the confidentiality of your data, including encryption of Google OAuth tokens and access controls. No system is completely secure, and we cannot guarantee absolute security.
6. Data Retention
Information is kept only as long as needed for the purposes in this policy or as required by law. After that, it is anonymized or deleted. Gmail/Calendar tokens and data follow section 2.3. You may request deletion at contact@interflow.chat.
7. User Rights
According to applicable data protection laws, you can:
- Request access, correction, or deletion of your personal information.
- Revoke consent for data processing, where applicable.
To exercise these rights, contact us at contact@interflow.chat.
8. International Data Transfers
If data is transferred outside the country, we ensure your personal information will be protected by appropriate measures, such as standard contractual clauses, as required by data protection regulations.
9. Cookies and Tracking Technologies
The Platform may use cookies and similar technologies to improve user experience. You can adjust browser settings to refuse cookies, although this may affect some Platform functionalities.
10. Changes to this Privacy Policy
Interflow may periodically update this Privacy Policy. When significant changes are made, we will notify users through the Platform or other appropriate means. We recommend regular review of this Policy to stay aware of our most recent privacy practices.
11. Contact
If you have any questions about this Privacy Policy or how we handle your information, contact us:
Email: contact@interflow.chat
Address: Av. Marq de São Vicente, 2219, Suite 812 Letter WE0097, Água Branca - São Paulo/SP