Privacy Policy

Enflow (“Enflow”, “we”, “us”, or “our”) is an order management and operations platform for ecommerce businesses, operated by Enchain Technologies, India. This policy explains how we collect, use, share, and protect personal information when you use our websites, applications, and services (together, the “Services”).

Enflow is used by businesses (“Merchants”) to manage their orders and communicate with their customers. Where we process the personal data of a Merchant’s customers on the Merchant’s behalf, the Merchant is the data controller and Enflow acts as a data processor.

Account information. When a Merchant signs up, we collect the name, email address, phone number, business name, and password of the account holder and any team members they invite.

Order and customer data. To provide the Services, we process order details the Merchant imports or receives from connected sales channels (such as Shopify or WooCommerce), including customer names, shipping addresses, phone numbers, email addresses, order contents, and payment status.

Messaging data. When a Merchant uses Enflow to communicate with their customers over WhatsApp or other channels, we process the message content, recipient phone numbers, timestamps, and delivery status of those messages.

Usage and device data. We collect standard technical information such as IP address, browser type, pages visited, and actions taken within the Services, including through cookies and similar technologies.

We use the information we collect to:

• provide, operate, and maintain the Services;
• process, track, and fulfil orders on behalf of Merchants;
• send transactional notifications (such as order confirmations, payment requests, and delivery updates) that Merchants configure;
• provide customer support and respond to enquiries;
• secure the Services, prevent fraud and abuse, and enforce our terms;
• improve the Services, including aggregated and de-identified analytics;
• comply with legal obligations.

We do not sell personal information, and we do not use Merchants’ customer data for advertising.

Enflow integrates with the WhatsApp Business Platform provided by Meta Platforms, Inc. (“Meta”) to let Merchants send and receive WhatsApp messages with their customers.

• Messages are sent only to customers who have opted in to receive them, in line with WhatsApp’s Business Messaging Policy.
• To deliver messages, recipient phone numbers and message content are shared with Meta, which processes them under its own business data processing terms.
• We store WhatsApp message content and delivery metadata only as long as needed to provide the Services to the Merchant, and we use it solely to operate the messaging features — never for advertising or profiling.
• Customers can opt out of WhatsApp messages at any time by replying to the business or contacting the Merchant directly.

We share personal information only with service providers that help us operate the Services, and only to the extent necessary:

• Meta Platforms — to deliver WhatsApp messages, as described above;
• Sales channel platforms (e.g. Shopify) — to sync orders that Merchants connect;
• Shipping and logistics partners — to create shipments and track deliveries;
• Payment providers — to process payments Merchants collect;
• Cloud hosting and infrastructure providers — to store and process data securely;
• AI service providers — to power optional AI features, under contracts that prohibit training on our customers’ data.

We may also disclose information where required by law, or in connection with a merger, acquisition, or sale of assets (in which case this policy will continue to apply to previously collected data).

We retain personal information for as long as the Merchant’s account is active or as needed to provide the Services. When an account is closed, we delete or de-identify associated personal data within 90 days, except where longer retention is required by law (for example, tax and accounting records).

You can request deletion of your personal data at any time:

• Merchants can delete records from within the Enflow dashboard, or email hello@enflow.in to request deletion of their account and all associated data.
• Customers of Merchants should contact the business they purchased from, or email us at the address above; we will coordinate with the Merchant to fulfil the request.

We complete verified deletion requests within 30 days and confirm by email once done.

We protect personal information with industry-standard measures, including encryption in transit (TLS) and at rest, tenant-level data isolation, role-based access controls, and audit logging. No system is perfectly secure, so we encourage strong passwords and prompt reporting of any suspected issue to hello@enflow.in.

Depending on your location, you may have rights to access, correct, delete, or receive a copy of your personal data, and to withdraw consent where processing is based on consent. Indian users have rights under the Digital Personal Data Protection Act, 2023. To exercise any right, email hello@enflow.in; we respond within 30 days.

The Services are intended for businesses and are not directed to children under 18. We do not knowingly collect personal information from children.

We may update this policy from time to time. We will post the updated version on this page with a revised effective date, and notify Merchants of material changes by email or in-app notice.

Enchain LLP (Enflow)
Email: hello@enflow.in