BizFlow by DK Enterprise

Privacy protection noticeBizFlow by DK Enterprise operates using Meta WhatsApp Cloud API credentials provided directly by your business. We do not sell, rent, or trade customer contact lists or message content to third-party advertisers.

01Overview & scope

This Privacy Policy describes how BizFlow by DK Enterprise ("we," "our," or "us") collects, uses, stores, and protects personal data and business communication metadata when you interact with our WhatsApp marketing, automated broadcasting, and analytics web application.

02Information we access & collect

To facilitate WhatsApp campaign creation, scheduling, template dispatches, and real-time delivery webhooks, we collect only the necessary credentials and contact list details:

Meta API Configuration & Credentials: WhatsApp Business Account ID (WABA ID), Phone Number ID, Permanent/System User Access Tokens, App Secret, and Webhook Verification Tokens.
Audience Contact Lists: Recipient phone numbers, names, and custom template variables uploaded via CSV or managed through audience groups.
Message Logs & Telemetry: WhatsApp message template names, language codes, dispatch timestamps, delivery status receipts (Sent, Delivered, Read, Failed), and quick reply responses.
Technical Logs & Authentication: User email addresses, account preferences, IP addresses, and standard HTTP session cookies required for portal login.
Facebook Login for Business (WhatsApp Embedded Signup): when you connect a number with "Continue with Facebook", Meta gives us a one-time authorization code, which we exchange for an access token limited to the WhatsApp Business Account and phone number you choose. With it we read that account's ID, phone number ID, display number and verified business name. We use the permissions whatsapp_business_management and whatsapp_business_messaging only to manage templates, subscribe to message webhooks, register the number and send and receive messages. We never receive your Facebook password, and we do not read your Facebook profile, friends, pages or posts.
Account details: the name, email address, company name and mobile number you give when you sign up.
Subscription & payment records: your plan, billing status and Razorpay payment and subscription IDs. Card, UPI and bank details are entered on Razorpay's checkout and handled by Razorpay; we never see or store them.

03How we use your information

We process collected data strictly for operational and communication service delivery:

Dispatching template messages through the official Meta WhatsApp Cloud API (graph.facebook.com).
Executing scheduled broadcast campaigns at designated dates and times.
Processing incoming webhook notifications for real-time delivery receipts and customer replies.
Generating campaign performance analytics, PDF reports, and telemetry exports.
Ensuring security, preventing fraudulent activity, and verifying account authorization.
Billing your subscription and sending payment receipts (through Razorpay).
Sending notifications about new messages to devices you sign in on.

04Data storage, security & encryption

We implement robust administrative, technical, and physical security measures to safeguard data against unauthorized access, disclosure, or loss:

All data transferred between your browser, our application servers, and Meta's Graph API is encrypted in transit using TLS 1.3/SSL Encryption.
Database tables enforce strict Row-Level Security (RLS) policies and encrypted authentication sessions.
Access Tokens and sensitive API credentials are stored securely and used exclusively to authenticate Meta Graph API calls.

06Data retention & user data deletion procedure

We retain campaign telemetry and contact lists only for as long as your account remains active or as needed to provide broadcast service records:

How to delete your data:

Remove the app from Facebook: in Facebook go to Settings & privacy → Settings → Apps and websites (or Business Integrations), and remove BizFlow by DK Enterprise. Facebook then sends us a deletion request automatically and shows you a confirmation code; you can check its status on our data deletion page.
Disconnect a number: removing a WhatsApp account under Connections deletes its stored access token and IDs immediately.
In-App Deletion: You can delete any campaign, recipient group, or connection configuration instantly through the application interface. Deleting a campaign permanently removes all associated recipient logs.
Account Data Wiping Request: To request complete account termination and permanent deletion of all stored API keys, templates, and contact history, email contact@dkenterprise.tech (or use our contact form) with the subject "Data Deletion Request".

Upon receiving a verified deletion request, all personal data, API tokens, and contact lists associated with your account will be permanently purged from our active databases within 7 days. Payment records may be kept longer where tax law requires it.

08Contact information

If you have questions, concerns, or data protection inquiries regarding this Privacy Policy, email contact@dkenterprise.tech or contact our team:

BizFlow by DK Enterprise Support

Send us a message and we'll get back to you.

Contact support

02Information we access & collect

To facilitate WhatsApp campaign creation, scheduling, template dispatches, and real-time delivery webhooks, we collect only the necessary credentials and contact list details:

Meta API Configuration & Credentials: WhatsApp Business Account ID (WABA ID), Phone Number ID, Permanent/System User Access Tokens, App Secret, and Webhook Verification Tokens.
Audience Contact Lists: Recipient phone numbers, names, and custom template variables uploaded via CSV or managed through audience groups.
Message Logs & Telemetry: WhatsApp message template names, language codes, dispatch timestamps, delivery status receipts (Sent, Delivered, Read, Failed), and quick reply responses.
Technical Logs & Authentication: User email addresses, account preferences, IP addresses, and standard HTTP session cookies required for portal login.
Facebook Login for Business (WhatsApp Embedded Signup): when you connect a number with "Continue with Facebook", Meta gives us a one-time authorization code, which we exchange for an access token limited to the WhatsApp Business Account and phone number you choose. With it we read that account's ID, phone number ID, display number and verified business name. We use the permissions whatsapp_business_management and whatsapp_business_messaging only to manage templates, subscribe to message webhooks, register the number and send and receive messages. We never receive your Facebook password, and we do not read your Facebook profile, friends, pages or posts.
Account details: the name, email address, company name and mobile number you give when you sign up.
Subscription & payment records: your plan, billing status and Razorpay payment and subscription IDs. Card, UPI and bank details are entered on Razorpay's checkout and handled by Razorpay; we never see or store them.

03How we use your information

We process collected data strictly for operational and communication service delivery:

Dispatching template messages through the official Meta WhatsApp Cloud API (graph.facebook.com).
Executing scheduled broadcast campaigns at designated dates and times.
Processing incoming webhook notifications for real-time delivery receipts and customer replies.
Generating campaign performance analytics, PDF reports, and telemetry exports.
Ensuring security, preventing fraudulent activity, and verifying account authorization.
Billing your subscription and sending payment receipts (through Razorpay).
Sending notifications about new messages to devices you sign in on.

04Data storage, security & encryption

We implement robust administrative, technical, and physical security measures to safeguard data against unauthorized access, disclosure, or loss:

All data transferred between your browser, our application servers, and Meta's Graph API is encrypted in transit using TLS 1.3/SSL Encryption.
Database tables enforce strict Row-Level Security (RLS) policies and encrypted authentication sessions.
Access Tokens and sensitive API credentials are stored securely and used exclusively to authenticate Meta Graph API calls.

06Data retention & user data deletion procedure

We retain campaign telemetry and contact lists only for as long as your account remains active or as needed to provide broadcast service records:

How to delete your data:

Remove the app from Facebook: in Facebook go to Settings & privacy → Settings → Apps and websites (or Business Integrations), and remove BizFlow by DK Enterprise. Facebook then sends us a deletion request automatically and shows you a confirmation code; you can check its status on our data deletion page.
Disconnect a number: removing a WhatsApp account under Connections deletes its stored access token and IDs immediately.
In-App Deletion: You can delete any campaign, recipient group, or connection configuration instantly through the application interface. Deleting a campaign permanently removes all associated recipient logs.
Account Data Wiping Request: To request complete account termination and permanent deletion of all stored API keys, templates, and contact history, email contact@dkenterprise.tech (or use our contact form) with the subject "Data Deletion Request".

Privacy Policy

01Overview & scope

02Information we access & collect

03How we use your information

04Data storage, security & encryption

05Third-party sharing & Meta platform policies

06Data retention & user data deletion procedure

07Compliance & opt-in consent requirements

08Contact information

Privacy Policy

01Overview & scope

02Information we access & collect

03How we use your information

04Data storage, security & encryption

05Third-party sharing & Meta platform policies

06Data retention & user data deletion procedure

07Compliance & opt-in consent requirements

08Contact information