Privacy Policy — FLASH AI

Account information

• Phone number (sign-in via OTP delivered on WhatsApp)
• Email address
• Internal user ID linked to your account

Business information you provide

• Shop name, physical address, business details
• Social media handles (Instagram, Facebook)
• Product photos, catalog names, product descriptions, and other content you create or upload

Automatically collected

• Device identifiers (including IDFA, only with your permission via App Tracking Transparency)
• Product interaction data (screens viewed, features used)
• Advertising data (ad campaign performance via Meta)
• Coarse location (approximate, derived from IP address)
• Push notification token (FCM)

• App functionality — authentication, catalog management, order management
• Website publishing — the app creates a live storefront website for your business; content you add (shop details, products, photos) is publicly accessible at your website URL
• AI content generation — your photos and product details are processed by Google Gemini to generate marketing content
• Social posting — with your authorization, marketing content is posted to your connected social accounts (e.g., Instagram)
• Analytics — understanding feature usage to improve the app
• Third-party advertising — measuring and delivering marketing campaigns via Meta/Facebook (only with ATT consent)

The app asks for your permission before tracking. If you allow it, your device identifier and app activity may be shared with Meta Platforms for advertising measurement. You can change this anytime in iOS Settings → Privacy & Security → Tracking. Declining does not affect app functionality.

• Supabase — authentication (OTP), account database, backend services
• Firebase (Google) — push notifications (FCM), analytics, legacy account authentication
• Google Gemini — AI content generation
• Meta/Facebook — advertising measurement and tracking (with consent)
• WhatsApp (Meta) — OTP delivery for phone verification
• Razorpay — payment account connection for your storefront
• Shiprocket — shipping and logistics for your storefront orders

Each processes data under its own privacy policy.

We do not sell your data. Data is shared only with the processors above to operate the service, and with Meta for advertising if you grant tracking permission. Content you publish to your storefront website is publicly accessible by design. Data may be processed on servers outside India by the providers listed above.

Data is retained while your account is active. You can request account deletion in-app (Delete Account option in the app's home menu) or by contacting support@flashai.co.in. Deletion is permanent and removes your profile, shop data, published website, and content. Requests are processed within 2 days; you cannot log in while deletion is in progress. Data may be retained longer only where legally required.

Data is transmitted over HTTPS/TLS and stored with access controls. No method is 100% secure; report issues to support@flashai.co.in.

The app is a business tool not directed at children under 13. We do not knowingly collect data from children.

You may request access, correction, export, or deletion of your data at support@flashai.co.in.

We may update this policy; material changes will be notified in-app or via this page with an updated effective date.