Security and privacy
Your number, your customers, your data.
Dunnflow is safe by design, not by promise: messages run on Meta's official platform, the account is yours, money moves through your own payment provider, and we work with the least access that can do the job. Here is exactly how.
Official platform only
Every message travels through Meta's own platforms for businesses. Nothing unofficial ever touches your number.
WhatsApp Business Platform
The system Meta provides to businesses, the same one large companies use.
Instagram messaging API
Comments and DMs handled through Meta's official API, never a logged-in phone.
Verified business name
Your business is verified by Meta and your name shows next to your number.
Signed messages
Every message between Meta and our servers is signed with a secret only Meta and we hold, and travels over HTTPS.
You own everything
The account, the number, the conversations and the data are in your name. Dunnflow is your technical partner, nothing more.
Your account, your number
The WhatsApp Business account is created in your Meta business, with your number.
Remove us in a minute
Take away our access from your Meta business settings at any time. It works instantly.
A copy you control
Every lead and booking lands in a Google Sheet in your own account.
Leave with everything
If you stop, your data is handed over as a full export, or deleted, as you instruct, within 7 days.
Money never passes through us
Payment links come from your own payment account or are plain UPI links to your UPI ID.
Card details never reach us
Card numbers, UPI PINs and bank details stay with Razorpay, Cashfree or the customer's UPI app.
No wallet, no cut
There is no Dunnflow wallet, no holding period and nothing taken in flight.
A flat fee, invoiced separately
Our fee is a fixed monthly amount. We only hear that a payment succeeded.
Settles to your bank
Money goes from the customer to your provider and on to your bank account.
Your customers have the controls
Built in from the first day, as India's Digital Personal Data Protection Act expects.
STOP
Reply STOP and the assistant never starts a conversation with that person again.
DELETE MY DATA
Their conversation records are removed within 7 days.
Offers only with consent
Campaigns go only to people who agreed to hear from you, with a one-tap STOP.
No selling, ever
We never sell or share your data, or your customers' data, with anyone.
Access
The least access that can do the job. Written down.
What Dunnflow can do
- Receive and reply to messages sent to your business number and Instagram
- Record bookings, payments and opt-outs for your account
- Create a payment link on your own payment account and hear when it is paid
What Dunnflow never does
- See or store card numbers, UPI PINs or bank details
- Hold, move or take a cut of your money
- Message anyone who has not messaged you or agreed to hear from you
- Sell or share your customers' data with anyone
Sub-processors
Every company that can touch data. And why.
| Company | What it does for us | When |
|---|---|---|
| Meta Platforms | Carries every WhatsApp and Instagram message | Always |
| Cloudflare | Hosts this website and the secure connection to our servers | Always |
| Your live Google Sheet of leads and bookings | If you use the Sheet | |
| Razorpay or Cashfree | Payment links and receipts, through your own account | If you take payments |
| Google (Gemini API) | Reads unusual wording to pick your approved reply. Gets the message words only, never the phone number or name | When a message matches no button or keyword |
| Anthropic | The AI assistant that answers from your own documents | Only with the AI add-on |
Last updated 27 October 2026. We tell clients before adding a new one. Full details in our Privacy Policy and data processing terms.
Questions about security?
Happy to walk you through anything before you start. Email hello@dunnflow.com, or message our assistant and ask for a person.