Privacy Policy

Last updated: July 2026

FiloFlow (“FiloFlow”, “we”, “us”) is a business management platform operated by FiloFlow Technologies Inc., a corporation registered with the Philippine Securities and Exchange Commission, based in Las Piñas City, Metro Manila, Philippines. This policy explains what personal data we collect, how we use it, and the choices you have. It is written to comply with the Philippine Data Privacy Act of 2012 (RA 10173) and its implementing rules.

It covers both account holders (businesses that sign up for FiloFlow) and the customers of those businesses whose information is stored in FiloFlow by the account holder.

1. Information we collect

Account information. When you create an account we collect your name, email address, business name, and the settings you configure (services, hours, payment details such as your GCash or Maya number).

Your business data. As you use FiloFlow, you may store information about your own customers, such as names, phone numbers, email addresses, bookings, deals, invoices, messages, files, and notes. Your business remains the data controller for this information, while FiloFlow acts solely as a data processor on your behalf. We access and process this data only to provide, maintain, secure, and support the services you choose to use.

Messaging data. If you connect messaging channels — such as SMS, email, or a Facebook Page or Instagram account — we receive and store the messages sent and received on those channels, along with basic sender details (such as a name and platform ID) so we can display conversations in your inbox.

Usage and device data. We collect standard technical logs (IP address, browser type, pages visited) to keep the service secure and reliable. We use only the cookies necessary to keep you signed in — we do not use advertising cookies.

2. How we use information

To provide, operate, and improve FiloFlow — bookings, contacts, pipeline, inbox, campaigns, invoicing, and automations.
To send messages you compose or automate (SMS, email, and connected messaging channels) to your customers, on your instructions.
To communicate with you about your account, security, and service updates.
To protect the service against fraud, abuse, and unauthorized access.
To comply with legal obligations.

We do not sell personal data, and we do not use your business’s customer data for advertising.

Data processing responsibilities

For customer information stored by businesses using FiloFlow, the account holder determines what information is collected and how it is used. FiloFlow processes this information only on the account holder's instructions and only as necessary to operate the platform, maintain security, provide support, comply with applicable laws, or as otherwise authorized by the account holder.

3. Facebook & Instagram messaging

If you choose to connect your Facebook Page or Instagram Professional Account, FiloFlow uses Meta's official APIs to enable customer communication within your workspace. We only access the information necessary to provide these features, including message content, timestamps, sender display names, platform identifiers, and conversation metadata.

Meta Platform Data is used solely to receive customer messages, allow you to reply to those messages, display conversation history, create CRM contacts, and support related customer service features requested by you. We do not sell Meta Platform Data, use it for advertising, or share it with unrelated third parties.

You remain in full control of connected accounts. You may disconnect your Facebook Page or Instagram account at any time from your FiloFlow settings. Once disconnected, FiloFlow will stop receiving new messages from those channels. Previously synchronized conversations remain available within your workspace unless deleted by you or removed following a verified data deletion request.

Our use of Meta Platform Data complies with the Meta Platform Terms, Meta Developer Policies, and applicable privacy laws.

4. Sharing and service providers

We share data only with trusted service providers necessary to operate FiloFlow, including cloud hosting and database infrastructure, email delivery providers, SMS providers, payment-related integrations, and communication platforms you explicitly connect (such as Meta). These providers process information only for the purpose of delivering their respective services to FiloFlow and are contractually or legally required to protect your information.

We may also disclose information where required by law, to comply with lawful government requests, or to protect the rights, safety, and security of FiloFlow, our users, and the public.

5. Data retention

We keep your data for as long as your account is active. If you close your account, we delete or anonymize your data within a reasonable period, except where we must keep records to meet legal or accounting obligations.

6. Security

We protect your information using industry-standard security practices, including encrypted HTTPS connections, encryption of stored data where applicable, role-based access controls, authenticated user sessions, routine backups, and continuous monitoring of our infrastructure. While no system can guarantee absolute security, we continuously work to safeguard your information against unauthorized access, disclosure, alteration, or destruction.

7. Your rights

Under the Data Privacy Act, you have the right to be informed, to access, correct, and object to the processing of your personal data, to request erasure or blocking, to data portability, and to lodge a complaint with the National Privacy Commission (NPC). To exercise any of these rights, email us at hello@filoflow.ph.

If your information is stored in FiloFlow by a business you interact with (for example, a clinic or salon you book with), you may contact that business directly, or contact us and we will refer your request to them and assist as needed.

8. Data deletion

You may request deletion of your personal data, including information received through Facebook Messenger or Instagram Messaging, by emailing hello@filoflow.ph After verifying your request, we will confirm receipt and complete the deletion within 30 days unless we are legally required to retain certain information. Account holders may also delete contacts, conversations, and records directly within FiloFlow or disconnect connected messaging channels at any time.

9. Children

FiloFlow is a business tool intended for users 18 years old and above. We do not knowingly collect personal data from children.

10. Changes to this policy

We may update this policy as FiloFlow evolves. We will post changes on this page and update the date above; for significant changes we will notify account holders by email or in the app.

11. Compliance

FiloFlow is committed to complying with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), the Meta Platform Terms and Developer Policies where applicable, and other relevant laws governing the protection and processing of personal information.

12. Contact us

FiloFlow Technologies Inc.
Las Piñas City, Metro Manila, Philippines
Email: hello@filoflow.ph