Privacy Policy

1. Who we are

REMFlow AI is a real-estate messaging, contact, campaign, automation, and AI-assistance platform operated by Next One Marketing in Malaysia. Workspace owners control how their teams use the service and are responsible for the customer communications and contact data they upload or connect.

2. Information we process

• Account and workspace information, including names, email addresses, roles, and authentication records.
• Connected WhatsApp Business information, such as business account, phone-number, template, and connection identifiers.
• Contacts, consent records, suppression status, tags, listings, viewing details, campaigns, and assignments supplied by workspace users.
• Conversation content and attachments, including text, images, documents, and voice notes sent or received through connected channels.
• AI assistant instructions, desired outcomes, knowledge files, generated drafts, and evaluation results.
• Security, delivery, audit, device, and operational logs needed to protect and operate the service.

3. How we use information

We process information to provide the shared inbox, contact management, template messaging, campaign controls, automation, AI assistance, human handoff, reporting, support, fraud prevention, security, and legal compliance. We do not sell personal data.

4. WhatsApp and AI processing

Workspace owners choose which WhatsApp Business accounts and AI providers to connect. Messages may be sent to Meta to operate WhatsApp Business Platform features and to the selected AI provider when an authorised user enables AI drafting or replies. AI output can be inaccurate and should be reviewed by a person for property availability, pricing, appointments, negotiations, deposits, financing, contracts, and legal matters.

5. Service providers and international processing

We may use service providers for cloud hosting, databases, message delivery, AI processing, email, monitoring, security, and customer support. These providers process information only to provide their services to us or the workspace owner. Depending on the connected services, information may be processed outside Malaysia with appropriate contractual and security safeguards.

6. Retention and deletion

Conversation message bodies are retained for up to 180 days by default unless a workspace setting, contractual requirement, or law requires a different period. Consent evidence, suppression records, security events, billing records, and audit information may be retained longer where necessary to honour opt-outs, prevent abuse, resolve disputes, or meet legal obligations. Backups are removed through their normal rotation cycle.

7. Your choices and rights

Depending on your relationship with a workspace and applicable law, you may ask to access, correct, export, restrict, or delete your personal data, or withdraw consent for marketing. Workspace contacts should first contact the business that messaged them. You may also follow our data deletion instructions or email j3rry85@gmail.com.

8. Security and responsibilities

We use access controls, encryption, workspace isolation, audit records, and delivery safeguards designed to protect information. No method is completely secure. Workspace owners must protect their accounts, limit team access, maintain lawful contact sources, honour opt-outs, and promptly report suspected misuse.

9. Changes and contact

We may update this policy when our product, providers, or legal duties change. Material changes will be reflected by a new effective date. Questions can be sent to j3rry85@gmail.com.