Privacy Policy

VistaFlow Cloud is a business software and cloud management service operated by Trade Vista Solution FZE LLC ("VistaFlow", "we", "our", or "us"), based in the United Arab Emirates.

Our services may include CRM workspaces, client management, business workflows, subscription management, and optional integrations such as the WhatsApp Business Platform.

This policy explains how personal information is handled when you visit our public pages, register or administer an account, use VistaFlow CRM, connect an integration, or contact our team.

There are two common roles in our services:

• Our own business operations: We determine how account registration, subscriptions, technical diagnostics, support and website contact information are handled, subject to applicable law.
• Customer-controlled CRM records: When a business uploads leads, contacts, messages or other customer records into its VistaFlow CRM, that business generally decides why and how those records are used.

We process customer-controlled data to deliver requested services, subject to applicable agreements and law. If your information appears in a customer's CRM, contact that business first about its records.

Depending on the services and integrations used, the following information may be processed.

Users may also provide information through forms, uploads, connected services and support requests. Sensitive information should only be uploaded when necessary, authorized and legally appropriate.

VistaFlow may use Meta services including Facebook Login for Business, WhatsApp Embedded Signup, WhatsApp Business Platform APIs and webhooks to connect business accounts with authorized CRM workspaces.

• Authorization: Customers may authorize selected business assets and permissions during Meta onboarding.
• Messaging: When activated, supported messages, media, sender details, timestamps, templates and message status events may be processed.
• Business App coexistence: Where supported and authorized, additional message synchronization or chat-history access may be available. Eligibility and access depend on Meta's requirements.
• Customer control: Each business is responsible for lawful communications, recipient permissions and applicable messaging policies.

Meta and WhatsApp process information under their own privacy policies. Connecting an account does not grant VistaFlow unlimited access to personal Facebook information.

Meta Privacy Policy · WhatsApp Privacy Policy

Information may be used to:

• Provide and administer CRM and cloud services.
• Authenticate users and manage authorized access.
• Connect customer-authorized integrations.
• Process business messages and communication workflows.
• Administer subscriptions, invoices and support.
• Detect abuse, investigate errors and maintain security.
• Comply with applicable legal requirements.
• Improve service performance using appropriate information.

Customer CRM data is not intended to be accessible to unrelated customer accounts. Authorized platform access may be necessary for maintenance, support, security or legal compliance.

Where applicable law requires a legal basis, personal data processing may rely on performance of a contract, compliance with a legal obligation, legitimate interests such as security and service reliability, or consent where required.

Customer businesses controlling their own CRM contacts and messages are responsible for their appropriate legal basis, notices and required consents.

Information may be shared when relevant to the requested service or otherwise lawfully required.

• Meta and WhatsApp: Messaging and onboarding.
• Infrastructure providers: Hosting, storage and security.
• Payment processors: Subscription and transaction processing.
• Customer-selected integrations: Authorized external services.
• Legal authorities: Valid legal or regulatory requirements.

We do not publish private CRM records as public content. WhatsApp message content is not intended for unrelated advertising without appropriate disclosure and lawful basis.

VistaFlow customers and service providers may operate in different countries. Information may therefore be processed outside the country in which it was collected.

Where required, applicable legal, contractual and organizational safeguards will be considered. Deployment-specific hosting information may be requested through our support contact.

We retain information for as long as reasonably necessary to provide services, meet legal and accounting obligations, resolve disputes and maintain appropriate security records.

Retention depends on data type, customer configuration and applicable law. Customer administrators may delete or manage many records within their workspaces.

Disconnecting an integration does not necessarily erase historical records. Some information may remain temporarily in backups or legally required records where permitted.

We take reasonable technical and organizational measures intended to protect personal information against unauthorized access, alteration, loss and disclosure.

Depending on deployment, measures may include authentication, role-based permissions, access restrictions, secure connections, protection of integration credentials and operational monitoring.

No online system can guarantee absolute security. Administrators should protect credentials, restrict team permissions and use trusted integrations.

Depending on your jurisdiction, you may have rights to request access, correction, deletion, restriction, objection or a copy of certain personal information.

To request assistance, email support@vistaflowcrm.com with the subject "VistaFlow Privacy Request".

We may require appropriate verification and may refer customer-controlled CRM data requests to the business responsible for those records.

Individuals and authorized businesses may request deletion of eligible personal data held by VistaFlow.

1. Email support@vistaflowcrm.com with subject "VistaFlow Data Deletion Request".
2. Identify the relevant account, organization and type of information you want deleted.
3. We may verify your identity or authority. Customer-controlled data may require the customer administrator's involvement.
4. The request will be reviewed and handled according to applicable law and relevant service arrangements.

VistaFlow may use essential session cookies and related technologies for authentication, security, preferences and basic application functionality.

Additional analytics or marketing technology, where used, will be subject to relevant legal notice and choice requirements. You can manage cookies through your browser.

Businesses using VistaFlow must ensure their contacts are collected lawfully and that communications comply with applicable marketing, privacy and WhatsApp Business Messaging requirements.

Customer administrators are responsible for appropriate notices, consent practices, employee permissions, retention policies and lawful messaging.

VistaFlow is a business-focused service and is not designed for children. Businesses should not intentionally process children's personal information without an appropriate legal basis and safeguards.

We may update this policy to reflect changes in our services, technology, legal requirements or data practices. The revision date will be displayed on the page.

Where required by applicable law, additional notice will be provided for material changes.

For data privacy inquiries, access requests, deletion requests or concerns about VistaFlow services, contact us using the following details.

Company: Trade Vista Solution FZE LLC
Brand: VistaFlow Cloud
Location: United Arab Emirates
Email: support@vistaflowcrm.com
Website: vistaflowcrm.com