Privacy Policy

20Flow is operated by 20Flow Digital Solutions, Abu Dhabi, United Arab Emirates. 20Flow provides subscription-based software for social messaging automation, CRM workflows, analytics, and related business tools.

Depending on how you use 20Flow, we may process:

• Account information such as name, email, authentication and workspace membership.
• Workspace data, automation settings, keywords, replies, links, contact records and conversation metadata.
• Instagram professional account information supplied through official Meta APIs, including account identifiers, usernames, media identifiers and permitted webhook events.
• Integration credentials such as access tokens. Tokens are stored server-side and are not displayed back in full.
• Billing information such as plan, subscription status, invoice identifiers, payment status and Stripe customer/subscription references. Full payment-card details are processed by Stripe and are not stored by 20Flow.
• Technical and security information including IP-derived request information, browser/session data, error logs, webhook events, execution diagnostics and usage metrics.

We use information to provide, secure, operate and improve 20Flow, including authentication, automation execution, customer messaging, CRM features, billing, fraud and abuse prevention, troubleshooting, service analytics, legal compliance and support.

We do not sell personal data.

20Flow relies on third-party services necessary to operate the product, including Meta/Instagram for connected social features, Stripe for payment processing and billing, and infrastructure/database providers used to host and deliver the service. Their processing is also subject to their own terms and privacy policies.

We apply reasonable technical and organisational safeguards such as authenticated sessions, tenant-scoped access, signed webhook verification, encrypted or protected integration credentials, operational logging and restricted server-side access. We retain information for as long as reasonably necessary to provide the service, protect users, resolve disputes, meet financial or legal obligations and prevent abuse. Retention periods vary by data category.

Subject to applicable law, you may request access, correction, deletion or other available rights relating to your personal data. You may disconnect integrations or revoke Meta/Instagram permissions through the relevant platform settings.

For deletion instructions, see our Data Deletion page.

Some service providers may process data outside the United Arab Emirates. Where applicable, we use appropriate contractual, technical or organisational measures for cross-border processing and require service providers to protect the information they process.

20Flow is a business software service and is not directed to children. Users must have the legal capacity and authority required to enter into these Terms and operate the connected business accounts.

Privacy questions may be sent to support@20flow.app. We may update this policy when the service, law or our practices change. The updated date will be shown on this page.