Legal

Privacy Policy

Last updated June 8, 2026

This Privacy Policy explains how Staticflow LLC (“Staticflow,” “we,” “us”) collects, uses, shares, retains, and deletes personal information when you interact with our websites and with the messaging assistants (“chatbots”) we operate on Facebook Messenger, Instagram, and website chat — including assistants we run on behalf of our business clients. By messaging one of our assistants or using our sites, you agree to this policy.

1. Who we are

Staticflow LLC, a data-driven consulting agency. Contact: general@staticflow.ai. When we operate a chatbot for a client, that client is a joint controller of the conversation data for their own page; this policy covers Staticflow’s processing.

2. Information we collect

When you message one of our assistants or use our sites, we may collect:

Profile information from the platform — your name, profile picture, and a platform-scoped user identifier (e.g., a Facebook Page-Scoped ID). We do not receive your email or phone number from Meta unless you provide it.
Message content — the messages you exchange with the assistant, including attachments you share.
Details you provide — such as your name, phone number, address, service needs, and scheduling preferences.
Technical metadata — timestamps, message/conversation identifiers, and delivery/status information.
Website data — standard server logs and, where applicable, cookies/analytics used to operate staticflow.ai.

3. How we use your information

To respond to your messages and answer your questions.
To qualify your inquiry, capture relevant details, and help schedule appointments or follow-ups.
To route your conversation to a human agent when needed (escalation/handoff).
To operate, secure, debug, and improve our services.
To comply with legal obligations and enforce our terms.

We do not sell your personal information, and we do not use your message content to train third-party foundation models.

4. Automated & AI processing

Our assistants use automated logic and large language models to generate replies. Message content and conversation context may be sent to AI model providers via an AI gateway solely to produce a response. These providers process the data as our service providers under contract and do not use it to train their models. Conversations may be reviewed by a human agent for quality and support.

5. How we share your information

The business whose page you messaged (our client), so they can serve your request.
Service providers (sub-processors) acting on our behalf — our conversation/helpdesk platform (Chatwoot), cloud hosting/networking, AI model/gateway providers, and scheduling or CRM tools used to book and manage appointments. [List specific sub-processors here.]
Meta Platforms, to deliver and receive messages through Messenger and Instagram.
Authorities or third parties where required by law, to protect rights and safety, or in a business transfer.

6. Data retention

We retain conversation and lead data for as long as needed to provide the service and for legitimate business or legal purposes, then delete or anonymize it. [Specify your retention window, e.g., “conversations are retained for 24 months after last contact.”] You may request earlier deletion (see below).

7. Your rights & data deletion

Depending on your location, you may have the right to access, correct, port, or delete your personal information, and to object to or restrict certain processing (e.g., under the GDPR or CCPA/CPRA).

To request deletion of your data:

Message the assistant the words “delete my data” (or “stop” to opt out of further messages); or
Email general@staticflow.ai with the subject “Data Deletion Request” and the page/profile you messaged from.

We will verify the request, delete or anonymize your personal information associated with the conversation, and confirm completion, typically within 30 days, except where retention is required by law. Full instructions: staticflow.ai/data-deletion.

8. Security

We use reasonable administrative, technical, and organizational safeguards. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International transfers

Your information may be processed in the United States and other countries where we or our service providers operate. Where required, we use appropriate safeguards for cross-border transfers.

10. Children

Our services are intended for adults and are not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect their personal information.

11. Changes to this policy

We may update this policy from time to time. We will revise the “Last updated” date above and, where appropriate, provide additional notice.

12. Contact us

Questions or requests: general@staticflow.ai, Staticflow LLC.