Privacy Policy

This policy explains how Clients Platforms Solutions Limited ("ClientFlow", "we", "us") collects, uses and protects personal data when you use the ClientFlow platform at clientflow-platforms.com, and when businesses that use ClientFlow communicate with their customers through it.

Who we are

Clients Platforms Solutions Limited, a company registered in Nigeria (RC 9884707), 8 Fagbohun Street, Iju Ajuwon, Lagos, Nigeria. Contact: support@clientflow-platforms.com, +234 913 710 9843.

Our two roles

• For the businesses that sign up to ClientFlow ("clients") and their team members, we decide how their account data is used. For that data we are the data controller.
• For the data about a client's own customers (their messages, contact details, jobs and payments), we process it on behalf of that client, who is the data controller. We act as their data processor and only use it to provide the service to them.

What we collect

• Account and team data: names, email addresses, phone numbers, roles and sign-in details of the people who use a ClientFlow account.
• Business data: business name, short name, industry, services and prices, coverage areas, knowledge-base entries, business bank account details and payment-page links that the client chooses to add.
• Customer data processed for clients: customers' names, phone numbers and email addresses; the messages they exchange with the business on WhatsApp and email, including voice notes and their transcripts; notes, quotes, jobs, job status updates and payment records.
• WhatsApp connection data: when a client connects their WhatsApp Business Account through Meta's sign-up flow, we receive the identifiers of that account and phone number and an access token that lets us send and receive messages for the client. We do not store your Facebook profile information.
• Technical and usage data: records of automated replies and their usage, error reports, and security logs needed to run and protect the service.
• Data stored on your device: small settings such as your display theme and, if you turn it on, a reference to your device's fingerprint/face unlock. Your fingerprint or face data never leaves your device and is never sent to us.

How we use it

• To provide the service: show messages in the inbox, send the client's replies, manage jobs, quotes and payment requests.
• To send automatic replies on the client's behalf, written only from the information the client has provided. To do this, message content is processed by automated response technology, including third-party language-model services.
• To transcribe and translate voice notes so the client can read them.
• To send business-initiated WhatsApp messages only through approved templates and never to customers who have opted out.
• To secure the service, prevent misuse, fix errors and meet legal obligations.

We do not sell personal data, and we do not use clients' customer data for advertising.

Legal basis (Nigeria Data Protection Act 2023)

Performance of our contract with clients; the client's own lawful basis for their customer data (we process it on their instructions); our legitimate interests in running a secure service; consent where required (for example marketing messages); and compliance with law.

Who we share data with

Only with service providers that help us run ClientFlow, under obligations to protect it:

• Lovable Cloud / Supabase (application hosting and database);
• Meta Platforms (WhatsApp Business Platform, to send and receive WhatsApp messages);
• providers of automated language and transcription services, reached through the Lovable AI gateway and OpenAI (to generate replies and process voice notes);
• Twilio SendGrid (email);
• Africa's Talking (SMS and voice, where switched on);
• Sentry (error monitoring);
• Cloudflare (domain and network services).

We may also disclose data where the law requires it. We review any request from a public authority and only disclose what is legally required.

International transfers

Some of these providers operate servers outside Nigeria. Where data is transferred abroad we rely on the safeguards permitted by the Nigeria Data Protection Act 2023.

How long we keep it

• Voice-note audio is deleted automatically after 90 days; the transcript remains with the conversation.
• Conversations can be archived automatically after 6, 12 or 24 months, as the client chooses.
• When a client asks us to close their account, we delete their account and customer data within 7 days of confirming the request, and revoke our access to their WhatsApp account. We may keep limited records where the law requires it (for example financial records).

Security

Data is encrypted in transit (HTTPS) and stored with access controls that keep each client's data separate. Sign-in sessions time out after a period of inactivity. No system is perfectly secure, but we work to protect your data and will notify affected clients and the regulator of a personal data breach as the law requires.

Your rights

Under the Nigeria Data Protection Act 2023 you can ask to access, correct or delete your personal data, object to or restrict its use, withdraw consent and ask for a copy in a portable format. Customers of a business that uses ClientFlow should usually contact that business first; you can also contact us and we will help. You can complain to the Nigeria Data Protection Commission (NDPC).

Children

ClientFlow is a business service and is not intended for anyone under 18.

How to delete your data

See our Data Deletion Instructions at clientflow-platforms.com/data-deletion.

Changes

We will post any changes on this page and update the date above. Significant changes will be notified to clients.

Contact

support@clientflow-platforms.com · +234 913 710 9843 · Clients Platforms Solutions Limited, 8 Fagbohun Street, Iju Ajuwon, Lagos, Nigeria.