Privacy Policy
Last updated: April 22, 2026
1. Who we are
OmniFlow AI is a product of VendedorGPT, a Brazilian company providing WhatsApp Business automation services built on Meta's Cloud API.
2. Data we collect
- WhatsApp Business Account (WABA) identifiers and phone-number IDs.
- Inbound WhatsApp message content strictly necessary to route and respond to customer inquiries.
- Meta Ads campaign metadata accessed with your authorization (
ads_read,pages_show_list,pages_read_engagement). - Account and authentication data from Meta Login for Business.
3. How we use data
We use data solely to (a) deliver WhatsApp messaging automation, (b) report campaign performance, (c) send conversion events via the Meta Conversions API, and (d) comply with legal obligations. We do not sell or rent personal data.
4. Sharing
Data is shared only with Meta Platforms (as required by the underlying APIs) and with infrastructure providers acting on our behalf under data-processing agreements (Vercel, Supabase).
5. Retention
We retain operational data for the lifetime of the connected account plus 90 days, then purge it. Message content is retained only as long as required to support the conversation thread.
6. Your rights
You can request access, correction, or deletion of your data at any time. See Data Deletion for the self-service instructions and Meta callback endpoint.
7. Security
All data is encrypted in transit (TLS 1.2+) and at rest. Access is limited to authenticated tenants. Webhook payloads are verified with HMAC SHA-256 against Meta's app secret.
8. Contact
Privacy inquiries: privacy@vendedorgpt.com.br. See also Contact.