Data Policy & Security
Here is the **Data Policy & Security** document in the same style, using **Helix Flow** and your updated contact details.
# Data Policy & Security
**Effective Date:** 31 August 2026
At **Helix Flow**, we are committed to protecting the security, confidentiality, and integrity of the information processed through our WhatsApp Business API, CRM, chatbot, automation, omnichannel messaging, and API integration services.
This Data Policy & Security document explains how we handle data and the security measures we use to protect information while providing our services.
## 1. Data We Process
Depending on how you use Helix Flow, we may process:
* Customer and business account information
* Names and contact details
* Phone numbers
* WhatsApp Business account information
* WhatsApp messages and conversation data
* Message templates and delivery information
* CRM and customer information
* Chatbot and automation data
* API and integration data
* Transaction and subscription information
* Technical and usage information
* Logs, diagnostics, and security information
* Information provided through connected third-party services
We process data only as necessary to provide, maintain, secure, and improve our services.
## 2. Customer Data
If you use Helix Flow to process information belonging to your customers, leads, employees, or other individuals, you remain responsible for ensuring that you have the necessary legal basis, permissions, notices, and consents required to collect and process that information.
Customers are responsible for:
* Obtaining required consent
* Providing appropriate privacy notices
* Using customer data lawfully
* Complying with applicable data protection laws
* Complying with WhatsApp and Meta policies
* Ensuring that marketing and communication activities are legally permitted
Helix Flow acts as a technology service provider for processing customer data based on the customer's instructions and configured use of the services.
## 3. Data Usage
We may use processed information to:
* Provide and operate our services
* Process WhatsApp communications
* Run chatbot and automation workflows
* Provide CRM functionality
* Process API requests and integrations
* Monitor service performance
* Provide customer support
* Detect fraud, abuse, spam, and unauthorized activity
* Maintain platform security
* Troubleshoot technical issues
* Improve our products and services
* Process payments and subscriptions
* Comply with applicable legal requirements
We do not sell customer databases or WhatsApp conversation data as a commercial data product.
## 4. Data Security
Helix Flow uses reasonable technical and organizational measures designed to protect information against unauthorized access, disclosure, alteration, loss, or destruction.
Security measures may include:
* Encryption in transit
* Secure API communication
* Access controls
* Authentication mechanisms
* Restricted employee access
* System monitoring
* Security logging
* Backup mechanisms
* Infrastructure security
* Technical safeguards against unauthorized access
Access to customer data is restricted to authorized personnel and service providers who require access for legitimate business or technical purposes.
## 5. Data Access
Helix Flow limits access to information based on business and operational requirements.
Employees, contractors, and service providers may access information only when necessary to:
* Provide technical support
* Maintain or operate the platform
* Resolve service issues
* Maintain security
* Meet contractual or legal obligations
We seek to limit access to the minimum information reasonably necessary for the relevant purpose.
## 6. Third-Party Services
Helix Flow may integrate with third-party services, including Meta, WhatsApp, payment providers, cloud infrastructure providers, analytics services, and other technology providers.
Information may be exchanged with these services when necessary to provide the requested functionality or when authorized by the customer.
Third-party providers maintain their own security, privacy, and data-processing practices. Customers should review the applicable policies of third-party services they connect to Helix Flow.
## 7. WhatsApp and Meta Data
Helix Flow may process information through Meta and WhatsApp Business Platform integrations.
This may include:
* WhatsApp Business account identifiers
* Business phone numbers
* Customer phone numbers
* Messages
* Message metadata
* Templates
* Delivery and status information
* Media and files
* Webhook information
* API responses
The use of WhatsApp and Meta services is also subject to the applicable Meta and WhatsApp terms, policies, and requirements.
Helix Flow does not control Meta's infrastructure, policies, availability, or data-processing practices.
## 8. Data Retention
We retain information only for as long as reasonably necessary for legitimate business, contractual, operational, security, and legal purposes.
Retention may be necessary to:
* Provide the services
* Maintain customer accounts
* Provide customer support
* Maintain transaction records
* Resolve disputes
* Prevent fraud and abuse
* Meet legal obligations
* Maintain security and operational records
When information is no longer required, it may be deleted, anonymized, or securely archived, subject to applicable law and legitimate retention requirements.
Backup systems and technical logs may retain information for a limited additional period.
## 9. Data Deletion
Customers may request deletion of their account and applicable data by contacting Helix Flow.
Upon receiving a valid request, we will take reasonable steps to delete or anonymize applicable information, subject to:
* Legal retention requirements
* Contractual obligations
* Outstanding financial obligations
* Fraud prevention
* Security requirements
* Dispute resolution
* Backup retention periods
Deletion from Helix Flow does not necessarily result in deletion of information held by Meta, WhatsApp, payment providers, or other third-party services.
## 10. Data Breach and Security Incidents
If Helix Flow becomes aware of a security incident that materially affects customer data, we will take reasonable steps to investigate, contain, and remediate the incident.
Where required by applicable law, we may provide appropriate notifications to affected customers or relevant authorities.
Customers are also responsible for promptly notifying Helix Flow if they believe their account or credentials have been compromised.
## 11. Account Security
Customers are responsible for maintaining the security of:
* Account credentials
* Passwords
* API keys
* Access tokens
* Connected third-party accounts
* Authorized users and administrators
Customers should immediately notify Helix Flow if they suspect unauthorized access or misuse of their account.
## 12. Data Transfers
Depending on the infrastructure and third-party services used, information may be processed or stored in India or other countries.
Where required by applicable law, appropriate safeguards will be implemented for applicable international data processing.
## 13. Compliance
Helix Flow seeks to operate its services in accordance with applicable laws and regulations relating to privacy, data protection, information security, and electronic communications.
Customers remain responsible for ensuring that their use of Helix Flow complies with the laws and regulations applicable to their business, customers, communications, and industry.
## 14. Changes to This Policy
We may update this Data Policy & Security document from time to time.
Any changes will be published on this page with the revised effective date.
## 15. Contact Us
For questions regarding data protection, privacy, or security, please contact us:
**Helix Flow**
**Email:** [support@helixflow.in](mailto:support@helixflow.in)
**Website:** helixflow.in
**Address:** Dilsukh Nagar, Hyderabad, Telangana, India
By using Helix Flow services, you acknowledge that you have read and understood this Data Policy & Security document.
← Back to Helix Globe
# Data Policy & Security
**Effective Date:** 31 August 2026
At **Helix Flow**, we are committed to protecting the security, confidentiality, and integrity of the information processed through our WhatsApp Business API, CRM, chatbot, automation, omnichannel messaging, and API integration services.
This Data Policy & Security document explains how we handle data and the security measures we use to protect information while providing our services.
## 1. Data We Process
Depending on how you use Helix Flow, we may process:
* Customer and business account information
* Names and contact details
* Phone numbers
* WhatsApp Business account information
* WhatsApp messages and conversation data
* Message templates and delivery information
* CRM and customer information
* Chatbot and automation data
* API and integration data
* Transaction and subscription information
* Technical and usage information
* Logs, diagnostics, and security information
* Information provided through connected third-party services
We process data only as necessary to provide, maintain, secure, and improve our services.
## 2. Customer Data
If you use Helix Flow to process information belonging to your customers, leads, employees, or other individuals, you remain responsible for ensuring that you have the necessary legal basis, permissions, notices, and consents required to collect and process that information.
Customers are responsible for:
* Obtaining required consent
* Providing appropriate privacy notices
* Using customer data lawfully
* Complying with applicable data protection laws
* Complying with WhatsApp and Meta policies
* Ensuring that marketing and communication activities are legally permitted
Helix Flow acts as a technology service provider for processing customer data based on the customer's instructions and configured use of the services.
## 3. Data Usage
We may use processed information to:
* Provide and operate our services
* Process WhatsApp communications
* Run chatbot and automation workflows
* Provide CRM functionality
* Process API requests and integrations
* Monitor service performance
* Provide customer support
* Detect fraud, abuse, spam, and unauthorized activity
* Maintain platform security
* Troubleshoot technical issues
* Improve our products and services
* Process payments and subscriptions
* Comply with applicable legal requirements
We do not sell customer databases or WhatsApp conversation data as a commercial data product.
## 4. Data Security
Helix Flow uses reasonable technical and organizational measures designed to protect information against unauthorized access, disclosure, alteration, loss, or destruction.
Security measures may include:
* Encryption in transit
* Secure API communication
* Access controls
* Authentication mechanisms
* Restricted employee access
* System monitoring
* Security logging
* Backup mechanisms
* Infrastructure security
* Technical safeguards against unauthorized access
Access to customer data is restricted to authorized personnel and service providers who require access for legitimate business or technical purposes.
## 5. Data Access
Helix Flow limits access to information based on business and operational requirements.
Employees, contractors, and service providers may access information only when necessary to:
* Provide technical support
* Maintain or operate the platform
* Resolve service issues
* Maintain security
* Meet contractual or legal obligations
We seek to limit access to the minimum information reasonably necessary for the relevant purpose.
## 6. Third-Party Services
Helix Flow may integrate with third-party services, including Meta, WhatsApp, payment providers, cloud infrastructure providers, analytics services, and other technology providers.
Information may be exchanged with these services when necessary to provide the requested functionality or when authorized by the customer.
Third-party providers maintain their own security, privacy, and data-processing practices. Customers should review the applicable policies of third-party services they connect to Helix Flow.
## 7. WhatsApp and Meta Data
Helix Flow may process information through Meta and WhatsApp Business Platform integrations.
This may include:
* WhatsApp Business account identifiers
* Business phone numbers
* Customer phone numbers
* Messages
* Message metadata
* Templates
* Delivery and status information
* Media and files
* Webhook information
* API responses
The use of WhatsApp and Meta services is also subject to the applicable Meta and WhatsApp terms, policies, and requirements.
Helix Flow does not control Meta's infrastructure, policies, availability, or data-processing practices.
## 8. Data Retention
We retain information only for as long as reasonably necessary for legitimate business, contractual, operational, security, and legal purposes.
Retention may be necessary to:
* Provide the services
* Maintain customer accounts
* Provide customer support
* Maintain transaction records
* Resolve disputes
* Prevent fraud and abuse
* Meet legal obligations
* Maintain security and operational records
When information is no longer required, it may be deleted, anonymized, or securely archived, subject to applicable law and legitimate retention requirements.
Backup systems and technical logs may retain information for a limited additional period.
## 9. Data Deletion
Customers may request deletion of their account and applicable data by contacting Helix Flow.
Upon receiving a valid request, we will take reasonable steps to delete or anonymize applicable information, subject to:
* Legal retention requirements
* Contractual obligations
* Outstanding financial obligations
* Fraud prevention
* Security requirements
* Dispute resolution
* Backup retention periods
Deletion from Helix Flow does not necessarily result in deletion of information held by Meta, WhatsApp, payment providers, or other third-party services.
## 10. Data Breach and Security Incidents
If Helix Flow becomes aware of a security incident that materially affects customer data, we will take reasonable steps to investigate, contain, and remediate the incident.
Where required by applicable law, we may provide appropriate notifications to affected customers or relevant authorities.
Customers are also responsible for promptly notifying Helix Flow if they believe their account or credentials have been compromised.
## 11. Account Security
Customers are responsible for maintaining the security of:
* Account credentials
* Passwords
* API keys
* Access tokens
* Connected third-party accounts
* Authorized users and administrators
Customers should immediately notify Helix Flow if they suspect unauthorized access or misuse of their account.
## 12. Data Transfers
Depending on the infrastructure and third-party services used, information may be processed or stored in India or other countries.
Where required by applicable law, appropriate safeguards will be implemented for applicable international data processing.
## 13. Compliance
Helix Flow seeks to operate its services in accordance with applicable laws and regulations relating to privacy, data protection, information security, and electronic communications.
Customers remain responsible for ensuring that their use of Helix Flow complies with the laws and regulations applicable to their business, customers, communications, and industry.
## 14. Changes to This Policy
We may update this Data Policy & Security document from time to time.
Any changes will be published on this page with the revised effective date.
## 15. Contact Us
For questions regarding data protection, privacy, or security, please contact us:
**Helix Flow**
**Email:** [support@helixflow.in](mailto:support@helixflow.in)
**Website:** helixflow.in
**Address:** Dilsukh Nagar, Hyderabad, Telangana, India
By using Helix Flow services, you acknowledge that you have read and understood this Data Policy & Security document.