BotFlow AI is operated by SGWALA Technologies. BotFlow helps businesses manage WhatsApp conversations, contacts, AI replies, and related customer support activity.
BotFlow AI is built for South African businesses and is operated with regard to the Protection of Personal Information Act, 4 of 2013 (POPIA). Customers remain responsible for collecting lawful opt-in and using WhatsApp messages responsibly. BotFlow provides the controls to help them do it safely.
For client workspaces, the client is usually the responsible party for its own customers' personal information. BotFlow acts as an operator by hosting, routing, automating, and protecting information on the client's instructions.
We may process business account details, user login details, WhatsApp phone numbers, customer contact details, conversation messages, message status events, and operational analytics needed to provide the service.
We use information to authenticate users, route WhatsApp messages, generate and store support conversations, provide dashboard analytics, prevent misuse, and maintain service reliability.
BotFlow supports consent-led onboarding, approved WhatsApp templates, opt-in audience controls, human handover, audit logs, and deletion request paths. Clients must only upload or message contacts where they have a lawful basis to do so.
We do not sell personal information. We share information only with service providers needed to operate BotFlow, including hosting, database, AI, and WhatsApp Business Platform providers.
BotFlow uses HTTPS, protected cookies, tenant-aware APIs, internal send protection, webhook verification, payment webhook signatures, rate limiting, security headers, and audit logging to reduce unauthorized access, abuse, and data leakage risk.
South African data subjects may request access, correction, deletion, restriction, or objection where applicable. Requests should include enough detail for us to identify the relevant workspace, contact, and conversation records.
If we become aware of a confirmed security compromise affecting personal information, we will investigate, contain the issue, notify affected clients where required, and support legally required regulator or data-subject notifications.
We retain information while an account is active or as needed for legal, security, and operational purposes. Customers may request deletion of their data.
Some infrastructure and service providers may process data outside South Africa. Where this happens, BotFlow aims to use reputable providers and contractual safeguards appropriate for the service.
For POPIA, privacy, access, correction, or deletion requests, email hello@sgwala.co.za. You can also view our contact details and data deletion instructions.