FoxFlowFoxFlow

Privacy Policy

Last updated: September 17, 2026

This is a courtesy translation. In case of any divergence, the Portuguese version prevails.

This policy explains how FoxFlow ("we"), a WhatsApp customer service and sales automation platform operated by Bee.liv Solutions, collects, uses, shares and protects personal data, in compliance with the Brazilian General Data Protection Law (Law No. 13,709/2018 — LGPD) and with the Meta Platform Terms.

1. Who we are

Controller of account data: Bee.liv Solutions. Data Protection Officer (DPO) contact: [email protected]. As for the data of the contacts (leads) our customers serve through the platform, the customer is the controller and FoxFlow acts as the processor.

2. Data we collect

  • Account data: name, email, phone number, company name and payment details processed by our payment provider.
  • Customer service data: contacts, messages, files and labels from the WhatsApp conversations connected by the customer.
  • Meta (Facebook) data — only when the customer clicks "Connect account": Facebook user ID and name, access token, the list of ad accounts and business portfolios they manage, and metrics for campaigns, ad sets and ads (name, status, budget, amount spent, impressions, reach, clicks and results). With the WhatsApp Business API, we also process the phone numbers, message templates and the messages sent and received by the customer.
  • Technical data: IP address, browser and access logs, for security purposes.

3. How we use Meta data

We use the data obtained through Meta’s APIs exclusively to:

  • show the customer, inside the FoxFlow dashboard, the campaigns and metrics of the ad accounts they authorized (read-only access — we do not create, edit or pause ads);
  • send and receive WhatsApp messages on behalf of the customer, according to the automations they set up;
  • send conversion events (Conversions API) when the customer enables that feature.

We do not sell, rent or share Meta data with third parties, we do not use it for advertising, profiling or model training, and we do not transfer it to data brokers.

4. Sharing

We share data only with service providers needed to run the service (hosting, file storage, payment processing and the AI providers chosen by the customer), under contract and to the extent necessary, or when required by law.

5. Storage and security

Data is kept on protected servers with restricted access, encrypted connections (HTTPS) and access tokens stored only on the server, never exposed in the browser. Calls to Meta use appsecret_proof.

6. Retention

We keep the data while the account is active. The Meta token is deleted as soon as the customer clicks "Disconnect", removes the app in their Facebook settings or closes the account. Ad metrics are fetched in real time and are not stored.

7. Your rights

You may request access, correction, portability, anonymization or deletion of your data, and withdraw consent, by writing to [email protected]. To delete the data obtained from Facebook, see the Data deletion page.

8. Changes

We may update this policy; the date at the top indicates the current version. Significant changes will be announced in the dashboard or by email.