Privacy Policy
This policy explains what personal data Ramflo handles, why, who it is shared with, how long it is kept, and what rights you have.
In short
- Ramflo is a platform that lets businesses message their own customers on WhatsApp and email. We act on each business's instructions.
- We do not sell personal data, and this website uses no cookies or tracking.
- Anyone can stop messages by replying STOP or using an unsubscribe link, and can ask us to delete their data (see data deletion).
Who we are
Ramflo is operated by Ramasubramanian AI Software Private Limited, B 225, 15th Avenue, Jawaharlal Nehru Road, Ashok Nagar, Chennai, Tamil Nadu - 600083 ("Ramflo", "we", "us").
Ramflo is a multi-tenant platform. Businesses that use it ("clients") set up their own accounts, upload or enter their own contacts, and send messages to them through Ramflo. Two roles follow from that:
- For a client's contacts (the people a client messages), the client decides why and how their data is used, and is responsible for having consent or another lawful basis. Ramflo acts as the client's service provider (data processor) and handles that data only to provide the service to that client.
- For client account data and visitors to this website, Ramflo decides why and how the data is used.
What data we handle
| About | What we handle |
|---|---|
| Clients and their staff | Name, work email address, phone number, role, organisation details, and sign-in records. |
| A client's contacts | Name, phone number and email address, any other fields the client chooses to add, and consent and opt-out records (when, where and how consent was given or withdrawn). |
| Messages | The content of WhatsApp and email messages sent and received through Ramflo, delivery and read status, timestamps, conversation threads, and labels our AI adds to replies (for example "interested" or "unsubscribe"). |
| Connected accounts | Identifiers of the client's WhatsApp Business account and phone number, access tokens issued by Meta, and settings and credentials for any email account the client connects. Tokens and credentials are stored encrypted, are never shown on screen, and are never given to AI models. |
| Usage and audit | Counts of messages sent and AI use, logs of administrative actions, and technical records (such as IP address and time) used to keep the service secure. |
| Website visitors | This website has no accounts, cookies, advertising or analytics. Our hosting provider keeps standard server logs (such as IP address and requested page). |
Why we use it
- To provide the service: send and receive messages on a client's instructions, run follow-ups, show replies in one inbox, and collect approvals.
- To keep the service safe and fair: prevent abuse and spam, apply sending and usage limits, and keep audit trails.
- To meet legal and platform requirements: including the rules of WhatsApp/Meta and our email provider, and applicable law.
- To run and improve Ramflo: fix faults and understand overall usage.
We use clients' contact data only to provide the service to that client. We do not sell personal data.
Use of AI
Replies may be analysed by AI models to label them and to suggest a draft response. A person approves any reply before it is sent. Only the text needed for the task is sent to the AI provider. Access tokens, passwords and other credentials are never sent.
Who we share it with
We use the following providers to run Ramflo. Some of them may process data outside India.
| Provider | What it does for us |
|---|---|
| Supabase | Database, sign-in and encrypted storage of secrets. Our database is hosted in the Mumbai (India) region. |
| Meta Platforms (WhatsApp Business Platform) | Delivers WhatsApp messages and reports their status. Meta handles that data under its own terms. |
| Amazon Web Services (Amazon SES) | Delivers email. |
| AI model providers (b.ai and Vercel AI Gateway) | Classify replies and suggest drafts. |
| Vercel | Hosts this website. |
We may also disclose data when the law requires it, to protect rights and safety, or as part of a sale or reorganisation of our business (with the same protections continuing). We do not share data with anyone else for their own marketing.
Opt-outs and unsubscribing
- On WhatsApp, a recipient can reply STOP (or a similar word such as UNSUBSCRIBE) to stop messages.
- In email, a recipient can use the unsubscribe link.
- Ramflo records the opt-out on a suppression list and stops further messages to that contact from that business through Ramflo. Complaints and permanently undeliverable addresses are added to the list as well.
- Clients must send only to people they have a lawful basis to contact and must respect opt-outs. See our Terms of Service.
How long we keep it
We keep data only as long as needed for the purposes above. Specific periods:
- Contacts and messages: while the client's account is active, and for 90 days afterwards.
- Opt-out (suppression) records: kept so that opt-outs continue to be honoured.
- Audit and security logs: 12 months.
- Backups: removed as they rotate out, within 35 days.
How we protect it
- Each client's data is separated from every other client's at the database level (row-level security), so one client cannot see another's data.
- Access tokens and credentials are stored encrypted in a secrets vault and are never displayed.
- Data moves over encrypted connections.
- Access is limited to people who need it, and administrative actions are logged.
- Sending and AI-spend limits apply to every account to limit the effect of mistakes or misuse.
No system is perfectly secure. If a breach affects personal data, we will notify the affected clients and the authorities as the law requires.
Your rights
Under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act"), you can:
- ask for a summary of the personal data held about you and how it is used;
- ask for it to be corrected, completed or updated;
- ask for it to be erased;
- make a complaint and have it resolved (grievance redressal); and
- nominate another person to exercise these rights for you if you die or cannot act.
To use these rights, write to support@ramflo.io. For deletion, follow the steps on our data deletion page. If your data was sent to us by a business that messaged you, we may pass your request to that business, which decides how to respond, and we will help it do so.
Grievance Officer: Vasundhara, support@ramflo.io. We aim to reply within 7 days. You may also complain to the Data Protection Board of India once it is operating.
The DPDP Act and its Rules are being brought into force in stages. We are building our processes to meet them as they apply.
Children
Ramflo is a business service and is not intended for children.
Changes to this policy
We will post any change on this page and update the date below. If a change is significant, we will tell our clients.
Contact us
Questions about this policy: support@ramflo.io, or by post at B 225, 15th Avenue, Jawaharlal Nehru Road, Ashok Nagar, Chennai, Tamil Nadu - 600083.