Privacy Policy
This policy explains how CENLEX DIGITAL SDN. BHD. (a company registered in Malaysia, operating as Flowlzy) handles personal data. The full Terms of Service are on their own page.
We process two categories of data:
1. Your customer's data
WhatsApp messages, phone numbers, names, and booking details that pass through Flowlzy. We are the processor; you are the controller. We process this data only to deliver the Service.
2. Your business data
Account, billing, team members, and usage telemetry. We retain this for the duration of your account and for 12 months after cancellation.
Storage & location
Customer message data is stored in Supabase, with at-rest encryption and TLS in transit. We comply with the Personal Data Protection Act 2010 (Malaysia).
Your rights
You can export, delete, or correct any data via your dashboard or by emailing info@flowlzy.com. We respond within 14 days.
Data Processing Agreement
If you are an enterprise customer who needs a signed DPA, request one at our contact below. Our standard DPA covers PDPA 2010 (Malaysia) and GDPR (EU) where applicable.
Sub-processors:
- Meta — WhatsApp Business Cloud API (message delivery)
- Supabase — primary database (messages, bookings, account data)
- Hostinger — hosting for our backend services, including the automation that processes incoming messages
- Cal.com — calendar booking (when you use Cal.com)
- Google Workspace — calendar booking (when you use Google Calendar)
- Language model providers (currently OpenAI) — generating the AI's replies, with no customer message data retained beyond generating that reply
Contact
CENLEX DIGITAL SDN. BHD. (operating as Flowlzy)
Malaysia
Email · info@flowlzy.com
WhatsApp · +60 10-404 5820
This policy supersedes all prior versions. We will notify you of material changes via email + dashboard banner.