Privacy Policy

1. Information We Collect

• We collect the name, email and business details you provide when you register.
• We collect messages sent and received through your connected WhatsApp Business number.
• For leads and subscribers, we collect phone numbers, names and the history of their interactions.
• We collect OAuth tokens to access Google Calendar and Google Sheets.
• We collect Meta WABA tokens to send and receive WhatsApp messages.
• We collect usage data, including the features you use, diagnostic logs and performance data.

2. How We Use Your Information

• To provide, operate, and improve the Eilya Flow platform.
• To automate WhatsApp conversations, qualify leads, and execute bot flows.
• To send transactional emails (confirmations, alerts, invoices).
• To export data to Google Sheets or Calendar on your behalf.
• To comply with legal obligations and enforce our Terms of Service.

3. Limited Use Policy for Google APIs

Eilya Flow's use of data received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only use Google user data to provide features visible to you. We do not sell, transfer, or use Google user data for advertising. Google API Services User Data Policy.

4. Data Storage & Security

Data is stored on Supabase (PostgreSQL) with access controls for individual rows. We use HTTPS for service traffic, restrict privileged credentials to authorized services, and do not sell your data to third parties.

5. Data Sharing

• Google provides access to Calendar and Sheets through OAuth and processes bot responses through Gemini AI.
• Meta handles incoming and outgoing WhatsApp messages through the Cloud API.
• Supabase and Railway provide our database and hosting infrastructure.
• We do not share data with advertisers or data brokers.

6. Data Retention & Deletion

We retain your data while your account is active. You may request deletion at any time by emailing contact@eilyatech.com. Data is permanently deleted within 30 days of account closure.

7. Your Rights

• Access, correct, or delete your personal data at any time.
• Revoke Google or Meta OAuth access via your Google Account or Meta Business settings.
• Export your data in a format computers can read.
• Contact us to restrict processing or object to certain uses.

8. Contact

For privacy questions or data requests, email us: