Privacy Policy

Last updated: August 2026

FiloFlow (“FiloFlow”, “we”, “us”) is a business management platform operated by FiloFlow Technologies Inc., a corporation registered with the Philippine Securities and Exchange Commission, based in Las Piñas City, Metro Manila, Philippines. This policy explains what personal data we collect, how we use it, and the choices you have. It is written to comply with the Philippine Data Privacy Act of 2012 (RA 10173) and its implementing rules.

It covers both account holders (businesses that sign up for FiloFlow) and the customers of those businesses whose information is stored in FiloFlow by the account holder.

1. Information we collect

Account information. When you create an account we collect your name, email address, business name, and the settings you configure (services, hours, payment details such as your GCash or Maya number).

Your business data. As you use FiloFlow, you may store information about your own customers, such as names, phone numbers, email addresses, bookings, deals, invoices, messages, files, and notes. Your business remains the data controller for this information and decides what is collected and how it is used. FiloFlow acts solely as a data processor on your behalf: we access and process this data only on your instructions and only as necessary to provide, maintain, secure, and support the services you choose to use, to comply with applicable law, or as you otherwise authorize.

Messaging data. If you connect messaging channels — such as SMS, email, or a Facebook Page or Instagram account — we receive and store the messages sent and received on those channels, along with basic sender details (such as a name and platform ID) so we can display conversations in your inbox.

Usage and device data. We collect standard technical logs (IP address, browser type, pages visited) to keep the service secure and reliable. We use only the cookies necessary to keep you signed in — we do not use advertising cookies.

2. How we use information

We do not sell personal data, and we do not use your business’s customer data for advertising.

3. Facebook & Instagram messaging

If you choose to connect your Facebook Page or Instagram Professional Account, FiloFlow uses Meta’s official APIs to enable customer communication within your workspace. We only access the information necessary to provide these features, including message content, timestamps, sender display names, platform identifiers, and conversation metadata.

Meta Platform Data is used solely to receive customer messages, allow you to reply to those messages, display conversation history, create CRM contacts, and support related customer service features requested by you. We do not sell Meta Platform Data, use it for advertising, or share it with unrelated third parties.

You remain in full control of connected accounts. You may disconnect your Facebook Page or Instagram account at any time from your FiloFlow settings. Once disconnected, FiloFlow will stop receiving new messages from those channels. Previously synchronized conversations remain available within your workspace unless deleted by you or removed following a verified data deletion request.

Our use of Meta Platform Data complies with the Meta Platform Terms, Meta Developer Policies, and applicable privacy laws.

4. Google integrations

If you choose to connect your Google account, FiloFlow accesses only the permissions you grant: sending email on your behalf from your Gmail address, and creating and updating Google Calendar events for your bookings. We do not read the contents of your inbox. Sent messages are recorded in your FiloFlow contact history so you have a complete record.

FiloFlow’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google account tokens are stored encrypted. You can disconnect Google at any time from your FiloFlow settings, which revokes our access.

5. AI features

Some FiloFlow features — such as the website chat assistant that account holders can add to their sites — use a third-party AI model provider (Anthropic) to generate replies. Message content needed to produce a reply is sent to that provider for processing and is not used to train their models. AI-generated replies may be inaccurate, and account holders remain responsible for how these features are used with their customers.

6. Sharing and service providers

We share data only with trusted service providers necessary to operate FiloFlow. Our current providers are:

These providers process information only for the purpose of delivering their respective services to FiloFlow and are contractually or legally required to protect your information. We may update this list as the service evolves and will keep this page current.

We may also disclose information where required by law, to comply with lawful government requests, or to protect the rights, safety, and security of FiloFlow, our users, and the public.

7. Data retention

We keep your data for as long as your account is active. If you close your account, we delete or anonymize your data within a reasonable period, except where we must keep records to meet legal or accounting obligations. You can export your contacts and records at any time before closing your account.

8. Security

We protect your information using industry-standard security practices, including encrypted HTTPS connections, encryption of stored data, database-level isolation so that each business can access only its own records, role-based access controls, authenticated user sessions, routine backups, and continuous monitoring of our infrastructure. FiloFlow staff do not browse customer data; access is limited to what is necessary to resolve a support request you have made or to maintain the service. While no system can guarantee absolute security, we continuously work to safeguard your information against unauthorized access, disclosure, alteration, or destruction.

9. Your rights

Under the Data Privacy Act, you have the right to be informed, to access, correct, and object to the processing of your personal data, to request erasure or blocking, to data portability, and to lodge a complaint with the National Privacy Commission (NPC). To exercise any of these rights, email us at hello@filoflow.ph.

If your information is stored in FiloFlow by a business you interact with (for example, a clinic or salon you book with), you may contact that business directly, or contact us and we will refer your request to them and assist as needed.

10. Data deletion

You may request deletion of your personal data, including information received through Facebook Messenger, Instagram Messaging, or Google integrations, by emailing hello@filoflow.ph. After verifying your request, we will confirm receipt and complete the deletion within 30 days unless we are legally required to retain certain information. Account holders may also delete contacts, conversations, and records directly within FiloFlow or disconnect connected messaging and Google channels at any time.

11. Children

FiloFlow is a business tool intended for users 18 years old and above. We do not knowingly collect personal data from children.

12. Changes to this policy

We may update this policy as FiloFlow evolves. We will post changes on this page and update the date above; for significant changes we will notify account holders by email or in the app.

13. Compliance

FiloFlow is committed to complying with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), the Meta Platform Terms and Developer Policies, the Google API Services User Data Policy where applicable, and other relevant laws governing the protection and processing of personal information.

14. Contact us

FiloFlow Technologies Inc.
Las Piñas City, Metro Manila, Philippines
Email: hello@filoflow.ph