🔒 Privacy Policy — TrendifyBoostFlow (InventFlow)
Effective Date: August 17, 2026
Last Updated: August 17, 2026
Welcome to TrendifyBoostFlow (operated under InventFlow). We value your privacy and are committed to protecting your personal data, customer conversation history, and connected social media platform credentials.
This Privacy Policy explains how we collect, use, store, encrypt, share, and protect your information when you use our platform, website, multi-channel messaging services, AI assistants, and social integrations (including Facebook Pages, Facebook Messenger, Instagram Direct Messaging, WhatsApp Cloud API, TikTok, Telegram, and E-commerce connectors).
1. Information We Collect
A. Account & Profile Information
When you register for TrendifyBoostFlow, we collect:
- Full Name
- Business Email Address
- Password (stored using strong bcrypt password hashing)
- Organization / Business Name
- Phone Number
- Billing and Subscription details
B. Meta Platform & Social Channel Credentials (OAuth Data)
When you connect Facebook Pages, Facebook Messenger, Instagram DM, or WhatsApp Cloud API, we request authorization via Meta OAuth 2.0. We receive:
- Facebook User ID, Page IDs, Page Names, Page Profile Pictures
- Meta Access Tokens (Page Access Tokens, User Access Tokens, Long-Lived Tokens)
- Instagram Business Account IDs & Handles
- WhatsApp Business Account (WABA) IDs & Phone Number IDs
🔒 Security Commitment: All social media tokens and secrets are stored in our database encrypted at rest using AES-256-CBC/GCM encryption. They are never logged or exposed in plain text.
C. Message Content & Communication Data
To provide our Unified Inbox and AI Assistant auto-reply features, we process incoming and outgoing messages from connected channels:
- Customer Page-Scoped User IDs (PSID), Instagram Scoped IDs (IGSID), or WhatsApp Phone Numbers
- Text messages, images, audio, video attachments, and quick-reply payloads
- Message timestamps and conversation status
D. E-Commerce & Store Data (WooCommerce / Shopify / My BM Store)
- Product catalog titles, descriptions, prices, SKU, inventory status
- Order notification IDs and customer inquiry logs required for customer support automation
2. How We Use Your Information
We process your data strictly to fulfill our contractual services to you:
- Multi-Channel Inbox & Chat Routing: Aggregating messages from Facebook, Instagram, WhatsApp, and Telegram into your unified team inbox.
- AI Automated Responses & Tool Calling: Enabling AI agents to answer customer FAQs, check order status, recommend products, and handle customer service requests on your behalf.
- Marketing & Campaign Automation: Executing Meta Lead Ads retrieval, Custom Audience creation, and broadcast messaging.
- Analytics & Performance Tracking: Providing conversation metrics, response times, and campaign ROI on your dashboard.
- Security & Fraud Prevention: Detecting unauthorized logins, enforcing tenant isolation, and verifying Meta webhook signatures.
3. Data Sharing & Third-Party Services
We NEVER sell, rent, or trade your personal data or your customers’ conversation logs to third-party data brokers or advertisers.
We share data only with trusted service providers necessary to operate our platform:
- Meta Platforms, Inc. (Facebook, Instagram, WhatsApp): To send and receive messages via official Graph APIs and WhatsApp Cloud API.
- AI Infrastructure Providers (Google Gemini, Anthropic Claude, OpenAI): Transmitting message prompts for real-time response generation. Data sent to AI providers is strictly used for inferencing your specific queries and is NOT used to train public foundation models.
- Cloud Hosting & Infrastructure (Hostinger / AWS / GCP): Encrypted database storage, Redis caching, and Nginx SSL proxying.
- Payment Processors (bKash, Binance Pay, Stripe): Processing subscription transactions securely.
4. Meta User Data Retention & Deletion Policy
A. Data Retention Period
- Active conversation logs and contacts are retained while your account remains active.
- Access tokens are stored until you disconnect the channel or deauthorize our Meta App.
B. User Data Deletion Rights & Callback
- Disconnecting Channels: You can disconnect any Facebook Page, Instagram account, or WhatsApp Business account at any time from your platform Settings > Channels page. Disconnecting immediately revokes and deletes the stored AES-256 access tokens.
- Meta Deauthorization Callback: If you remove our app from your Facebook Business Integrations, Meta issues a signed deauthorization request to our webhook
/api/meta/deauthorize. Upon receipt, our server automatically unlinks your Page credentials and purges cached Meta data. - Manual Data Erasure Request: You can request full account data deletion by emailing support@trendifyboostflow.com. All associated organization records, message logs, and credentials will be permanently erased within 30 days.
5. Security Practices & Data Isolation
- Tenant Scoping: All database records enforce multi-tenant isolation via
organizationId. User A can never access User B’s conversations or tokens (preventing IDOR vulnerabilities). - Webhook Security: All incoming Meta webhooks are authenticated using SHA-256 HMAC signature verification (
X-Hub-Signature-256). - Access Controls: Employee access to production databases is restricted by strict role-based access policies (RBAC).
6. Children’s Privacy
Our platform is intended strictly for commercial business use by adults aged 18 and above. We do not knowingly collect personal information from children under 13.
7. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect technological changes, Meta policy updates, or legal obligations. We will notify registered users via email or dashboard alert prior to material changes taking effect.
8. Contact Us
For privacy concerns, data deletion requests, or Meta review compliance inquiries:
- Email:
privacy@trendifyboostflow.com/support@trendifyboostflow.com - Address: InventFlow HQ, Software Technology Park, Dhaka, Bangladesh.
Privacy Policy
This page explains how trendifyboost collects, uses, and protects your data while you use our platform.
1. Introduction
Welcome to trendifyboost. We respect your privacy and are committed to protecting your personal data.
2. Data We Collect
We collect information you provide directly to us when you create an account, connect channels, or communicate with us.
3. How We Use Your Data
We use your data to provide, maintain, and improve our services, including processing messages from connected platforms.
5. Contact Us
If you have any questions about this Privacy Policy, please contact us.