Privacy Policy

Message Flow
Operated by FareFlow Ltd
Last Updated: 27 February 2026

1. Introduction

Message Flow ("Platform") is operated by FareFlow Ltd, a company registered in New Zealand.

This Privacy Policy explains how we collect, use, store, and disclose personal information when you use our web-based messaging platform.

If you have any privacy-related questions, you may contact us at:

Email: hello@messageflow.app

2. Who This Policy Applies To

Message Flow is a business-to-business (B2B) platform provided to businesses and their authorised users.

This Privacy Policy applies to personal information relating to:

• authorised users of business accounts, such as employees or representatives (including individuals under the age of 18 who are authorised by their employer), and
• individuals that those businesses communicate with through the Platform, such as their customers or clients.

Where we process message content and contact information on behalf of a business account, we generally do so under that business's instructions.

3. Information We Collect

3.1 Account Information

When you create or use an account, we may collect:

• Full name
• Email address
• Phone number
• Company name
• Encrypted password

Billing information is processed securely by our payment provider, Stripe. We do not store full credit card details on our servers.

3.2 Messaging Data

Because Message Flow is a messaging platform, we process and store:

• Message content (SMS and WhatsApp messages)
• Message metadata (timestamps, sender/recipient details, delivery status)
• Contact lists

Message data is stored indefinitely unless deleted by the account holder or upon account termination.

3.3 Technical Data

We may automatically collect:

• IP address
• Browser type
• Device information
• Usage logs
• Error reports (via monitoring services)

This helps us maintain security and platform reliability.

4. How We Use Information

We use collected information to:

• Provide and operate the Platform
• Send and receive messages on your behalf
• Process payments and manage subscriptions
• Maintain platform security
• Monitor performance and resolve technical issues
• Comply with legal obligations

We do not sell personal information.

5. Third-Party Service Providers

To operate the Platform, we use trusted third-party providers, including:

• ClickSend - SMS message delivery
• Meta Cloud API (WhatsApp) - WhatsApp message delivery
• Stripe - Payment processing
• Laravel Cloud - Hosting and database infrastructure (Australia region)
• Resend - Transactional email delivery

These providers may process personal information as part of delivering their services to us. Each provider operates under its own privacy policy.

6. International Data Transfers

Our primary hosting infrastructure is located in Australia.

Some third-party providers may process data in other countries. Where personal information is transferred internationally, we take reasonable steps to ensure appropriate safeguards are in place.

7. Data Retention

Message content, metadata, and uploaded contact information are stored indefinitely unless:

• Deleted by the account holder, or
• The account is terminated and data is removed in accordance with our internal policies.

We may retain certain records where required for legal, tax, or regulatory purposes.

8. Your Rights

Depending on your jurisdiction (including New Zealand and the European Union), you may have the right to:

• Request access to personal information we hold about you
• Request correction of inaccurate information
• Request deletion of personal information
• Request restriction of processing in certain circumstances

To make a request, contact us at:

Email: hello@messageflow.app

We will respond within a reasonable timeframe.

9. Security

We take reasonable technical and organisational measures to protect personal information against:

• Unauthorised access
• Disclosure
• Loss
• Misuse
• Alteration

However, no internet-based service can guarantee absolute security.

10. Cookies

Message Flow uses strictly necessary cookies for authentication, session management, and security.

These cookies are required for the Platform to function and cannot be disabled within the Platform.

We do not use tracking or marketing cookies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be published on our website with a revised "Last Updated" date.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle personal information, please contact:

Email: hello@messageflow.app