Privacy Policy

Last updated: 2026-06-28

Table of Contents

1. Introduction

FlazHost by CV Flaz Digital Nusantara ("Company," "we," "us") operates the FlazHost platform ("Service"). This Privacy Policy explains how we collect, use, and protect your information when you use our Service, which includes: WhatsApp Business messaging management, WhatsApp Cloud API integration (via Meta), AI Agent, live chat, email hosting, domain management, and related services.

We are committed to protecting your privacy and ensuring a positive experience on our platform. Please read this Privacy Policy carefully.

2. Information We Collect

2.1 Information You Provide

• Account Registration: Name, email address, password, company information, and billing details
• Communications: Emails, support tickets, feedback, and correspondence with our team
• Billing & Payments: Credit card information, billing address, invoice history (processed securely by third-party providers)
• Profile Information: Display name, avatar, phone number (optional)
• WhatsApp Business Data: WhatsApp Business phone numbers, business names, and account information you connect to our platform

2.2 Automatically Collected Information

• Usage Data: Pages visited, time spent, click patterns, search queries
• Device Information: Browser type, operating system, IP address, device identifiers
• Cookies & Tracking: Session cookies, analytics cookies, preference cookies
• Message Logs: WhatsApp message metadata (timestamps, delivery status, sender/recipient numbers) — not personal message content

2.3 Information from Third Parties

• Meta / Facebook (Embedded Signup): When you connect a WhatsApp Business Account (WABA) via Facebook Login for Business, we receive your WABA ID, Phone Number ID, and an access token to operate the service on your behalf
• WhatsApp Cloud API: Inbound messages from your business customers are processed through our infrastructure and stored temporarily for service delivery
• OAuth Integrations: When you authorize Gmail or Google Workspace, we receive your email address and basic profile information
• Analytics Providers: Aggregated usage data from third-party analytics services

3. Meta Platform & WhatsApp Data

3.1 Data Received from Meta

• WABA Access Tokens: Access tokens obtained through Embedded Signup are stored encrypted in our database and used solely to send and receive messages on your behalf
• Phone Number ID & WABA ID: Used to route messages to the correct WhatsApp Business Account
• Message Data: Inbound and outbound message content processed through WhatsApp Cloud API is handled to provide your inbox, AI agent, and business analytics features
• Contact Information: Names and phone numbers of WhatsApp contacts who interact with your business

3.2 How We Use Meta Data

Data obtained from Meta platforms is used only to:

• Deliver the WhatsApp Business messaging services you requested
• Display conversation history in your inbox dashboard
• Operate the AI Agent that replies to your customers' messages
• Provide business analytics (message counts, response times, etc.)
• Comply with applicable legal obligations

We do not sell data obtained from Meta platforms to any third party. We do not use WhatsApp message data for advertising purposes.

3.3 Token Storage & Encryption

WABA access tokens are stored in an AES-256 encrypted database. We enforce strict access controls to ensure only authorized systems can use these tokens. Tokens can be revoked at any time through your dashboard or directly in Meta Business Manager.

3.4 Meta Data Deletion

When you disconnect your WhatsApp Business Account from FlazHost or delete your account, we will delete your WABA access token from our systems within 30 days. Conversation history can be deleted upon your request via our Data Deletion page.

4. How We Use Your Information

We use collected information for the following purposes:

• Providing, maintaining, and improving our Service
• Processing transactions and sending related information (invoices, receipts, confirmation emails)
• Sending account-related notifications and service updates
• Responding to your inquiries and providing customer support
• Monitoring and analyzing usage trends to improve the user experience
• Detecting and preventing fraud, abuse, and security incidents
• Complying with legal obligations and enforcing our Terms of Service
• Sending marketing communications (with your consent)

5. Data Sharing & Third Parties

5.1 When We Share Your Data

We do not sell your personal information. We may share data with:

• Meta Platforms, Inc.: Data is forwarded to WhatsApp Cloud API to deliver/receive messages on your behalf, in accordance with the WhatsApp Business Policy and Meta Platform Terms
• Service Providers: Payment processors, email delivery services, hosting providers (bound by confidentiality agreements)
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In the event of a merger, acquisition, or asset sale
• With Your Consent: When you explicitly authorize sharing with third parties

5.2 Third-Party Services

Our Service integrates with third-party platforms including Meta/WhatsApp, Gmail, Google Workspace, and AI providers (for AI Agent features). These platforms have their own privacy policies. We recommend reviewing them.

6. Data Retention

• Active Accounts: Data is retained for as long as your account is active
• Deleted Accounts: Data is deleted within 30 days of account deletion (unless legally required to retain)
• WhatsApp Message History: Retained according to your subscription plan limits; can be deleted upon request
• WABA Access Tokens: Deleted within 30 days of revocation or account deletion
• Backups: May be retained for up to 90 days for disaster recovery
• Legal Holds: Data retained if required by law or legal process

7. Your Rights & Choices

7.1 Data Access & Portability

You have the right to access, download, and transfer your personal data in a machine-readable format. Submit a request to [email protected].

7.2 Data Correction & Deletion

You can update account information directly in your account settings. For data deletion, see our Data Deletion Policy.

7.3 Revoking WhatsApp Business Access

You can disconnect your WhatsApp Business Account from FlazHost at any time through the device management dashboard or directly through Meta Business Manager. After revocation, we can no longer access your WABA and will delete the associated token within 30 days.

7.4 Marketing Communications

You can opt out of marketing emails by clicking "Unsubscribe" in any email or updating your preferences in your account settings.

8. Security

We implement industry-standard security measures including:

• SSL/TLS encryption for data in transit
• AES-256 encryption for sensitive data (including WABA tokens) at rest
• Regular security audits and penetration testing
• Secure password hashing (bcrypt)
• Two-factor authentication (2FA) support
• IP access controls and role-based access control
• Regular security patching and updates

However, no system is completely secure. If you suspect a security breach, contact us immediately at [email protected].

9. International Transfers

Your information may be processed and stored in countries other than your country of residence, which may have different data protection laws. By using our Service, you consent to such transfers. We implement safeguards including Standard Contractual Clauses for international transfers. WhatsApp data is processed in accordance with Meta Platforms, Inc. infrastructure.

10. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or for operational, legal, or regulatory reasons. We will notify you of significant changes via email or a prominent notice on our website. Your continued use of the Service after changes constitutes acceptance of the updated policy.