1. About this policy
FlowDesk (also referred to as AA WorkDesk) is an agency operations platform operated by Agnihotri Digital. This policy applies to the FlowDesk website, application, client portal and connected communication features.
Effective date: 4 August 2026 • Last updated: 4 August 2026
2. Information we collect
- Account and identity information, such as name, business email, role, workspace and login-security data.
- Business and client information entered by an authorised workspace, including contact details, services, plans and communication preferences.
- Operational records such as tasks, updates, files, approvals, invoices, payment records and reports.
- WhatsApp information such as an opted-in phone number, consent source, message template, delivery status and webhook event metadata.
- Technical and security information such as IP address, browser details, session data, timestamps, audit logs and error logs.
Card, UPI and net-banking credentials are handled by the selected payment provider. FlowDesk does not store complete card credentials.
3. How we use information
- Provide, secure and maintain the platform and its tenant-isolated workspaces.
- Manage client work, approvals, invoicing, payment tracking and authorised communications.
- Authenticate users, enforce access controls, prevent misuse and investigate security incidents.
- Deliver requested notifications and WhatsApp messages where valid consent and an approved template exist.
- Support users, troubleshoot failures, improve reliability and meet legal or accounting obligations.
4. WhatsApp and Meta services
When a workspace enables WhatsApp, FlowDesk uses the Meta WhatsApp Business Platform to send approved transactional messages and receive message-status updates. Messages are sent only for configured events and clients with recorded opt-in consent.
A recipient may reply STOP or contact the sender to withdraw WhatsApp consent. Withdrawal prevents future automated WhatsApp messages, subject to processing time and legally required communications.
5. Sharing and service providers
We do not sell personal information. Information may be shared only as necessary with authorised workspace users, the relevant client portal user, hosting and infrastructure providers, email providers, Meta/WhatsApp, payment gateways, professional advisers, or authorities where legally required.
Each agency workspace controls the client and operational data it enters. Agnihotri Digital processes that data to provide and secure FlowDesk.
6. Retention, security and location
Records are retained while an account or workspace is active and afterwards only for legitimate operational, backup, dispute, tax, accounting or legal purposes. Retention periods vary by record type and applicable requirements.
We use access controls, encryption for configured secrets, tenant boundaries, secure connections, audit logging and backups. No internet service can guarantee absolute security; users must protect their credentials and report suspected misuse promptly.
Service providers may process information in other jurisdictions. Where this occurs, we use appropriate contractual and security safeguards.
7. Your choices and rights
Subject to applicable law and the role of your agency workspace, you may request access, correction, export, restriction or deletion of your personal information. You may also withdraw optional communication consent.
For deletion instructions, visit our Data Deletion page.
8. Cookies and sessions
FlowDesk uses essential cookies and session storage for login, security, preferences and core application operation. These are not used to sell personal information.
9. Children and policy updates
FlowDesk is a business service and is not directed to children. We may update this policy when the service or legal requirements change. The current version and effective date will remain available on this page.
10. Contact
For privacy questions or requests, contact Agnihotri Digital at hello@agnihotriamit.com. Please do not send passwords, access tokens, payment credentials or other secrets by email.