Privacy Policy

LeadsFlow is a customer-conversation CRM for businesses. Businesses ("customers") connect their own messaging channels — such as WhatsApp Business, email, Facebook Messenger, Instagram, TikTok, and marketplace chat — and manage customer conversations, leads and follow-ups in one inbox. This policy explains what data we process, why, and the choices available to you.

1. Data we process

• Account data — name, email address, password hash, and workspace details of the business users who sign in to LeadsFlow.
• Channel data — when a business connects a messaging channel, we receive and store the messages, sender identifiers (such as phone numbers or platform user IDs), names, and media that end users send to that business through the connected channel, plus delivery metadata (timestamps, delivery status).
• Lead data — contact details and notes the business stores about its leads and customers.
• Usage data — application logs and aggregate usage metrics used to operate, secure, and bill the service.

2. How we use data

• To display the business's own conversations in its inbox and deliver its replies to the selected channel.
• To provide optional AI-assisted replies: when a business enables an AI assistant, message content is processed by our AI infrastructure to generate a suggested or automated reply on that business's behalf.
• To operate, secure, meter, and invoice the service.

We do not sell personal data, use customer conversation content for advertising, or use it to train our own foundation models.

3. Platform data

Data received from third-party platforms — including Meta Platforms (WhatsApp, Messenger, Instagram), Google (Gmail), and TikTok — is used only to provide the connected inbox functionality to the business that authorized the connection, in accordance with each platform's terms and developer policies. We do not transfer platform data to third parties except as required to provide the service, comply with law, or as directed by the business that owns the connection. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Where data lives

Data is stored on Cloudflare's global infrastructure (R2 object storage and D1) and in Neon-managed PostgreSQL databases. Transactional emails are sent via Amazon SES. Payments, where enabled, are processed by Airwallex; we do not store card numbers.

5. Retention and deletion

Conversation and lead data is retained for as long as the owning business keeps its workspace. Businesses can delete leads, conversations, or their entire workspace by request. End users may request access to or deletion of their personal data by contacting the business they messaged, or by emailing us at the address below — we will act on verified requests within 30 days.

6. Cookies and sessions

We use strictly necessary session cookies to keep signed-in users authenticated. We do not use advertising or cross-site tracking cookies.

7. Mobile app (Nenji Desk)

The Nenji Desk app for Android and iOS gives business users access to the same workspace data described above. In addition, the app:

• stores a push notification token for your device so we can notify you about conversations assigned to you and announcements from your workspace or from us. Signing out removes it, and you can turn notifications off in your device settings at any time;
• uses the camera and photo library only when you choose to take or attach a photo in a conversation;
• uses the microphone only while you are recording a voice message;
• keeps your sign-in session in the device's secure storage, and caches recent conversations, media and quick replies on the device so they load quickly.

The app does not read your device contacts or location, and contains no advertising or third-party analytics or tracking. Push notifications are delivered through Expo and Google Firebase Cloud Messaging (Android) or Apple Push Notification service (iOS), which receive only the notification content needed to display it. App updates are delivered through Expo's update service.

You can delete your account at any time in the app (You → Delete account) or on our account deletion page, or by emailing support@nenji.ai from the email address you sign in with. Your login details are erased within 30 days.

8. Security

Access to workspace data is restricted to authenticated members of that workspace with role-based permissions. API access requires per-workspace API keys. Data in transit is encrypted with TLS.

9. Changes

We will post any changes to this policy on this page and update the effective date above.

10. Contact

Privacy questions and data requests: support@nenji.ai