Privacy Policy
Last updated: August 15, 2026 • Effective immediately for all GM Flow merchants
01.Information We Collect & Store
GM Flow collects only essential merchant account information including your name, business store name, email address, and API connection credentials (such as Facebook Page access tokens, WhatsApp Cloud API keys, and Steadfast/Pathao Courier API keys). This data is strictly used to execute your autonomous sales conversations and automate courier parcel booking.
02.Multi-Tenant Customer Data Isolation (Row-Level Security)
Customer conversations originating from Facebook Messenger and WhatsApp are securely processed in real-time. Every store is completely isolated in our Supabase PostgreSQL architecture using cryptographic Row-Level Security (RLS). Your customer phone numbers, delivery addresses, and gross sales figures are private to your store and are NEVER shared or cross-referenced across stores or third parties.
03.Bring Your Own Key (BYOK) Encryption
Under our zero-middleware architecture, AI API keys (Google Gemini, Groq Cloud) are encrypted at rest. GM Flow acts solely as an orchestrator and state engine. We do not use your private customer conversations to train public AI models.
04.Third-Party Courier & Meta Integrations
When an order is confirmed by a customer, delivery data (name, phone, address, COD amount) is securely transmitted directly to your configured courier portal (Steadfast or Pathao) via their official APIs. No intermediate data brokers are utilized.
05.Contact & Privacy Inquiries
If you have any questions or data deletion requests regarding your store or customer privacy, please email us directly at gmflow1070@gmail.com.