Privacy Policy

Pieceflow is a multi-tenant messaging and automation platform operated by OtiumLabs (“we”, “us”, “our”). This Privacy Policy explains what data we collect when you use Pieceflow, why we process it, who we share it with, and how you can delete it.

Contact: support@otium-labs.com

This policy covers:

• Account holders and workspace members who use Pieceflow
• End-customer conversation data that workspace owners process through connected channels (for example WhatsApp)
• Visitors to our marketing site who contact us

Workspace owners are typically the data controller for their customer conversations. OtiumLabs acts as a processor for that content and as a controller for Pieceflow account and billing data.

Account profile: name, email address, avatar, plan tier, and authentication sessions.

Workspaces & membership: workspace settings, roles, invites, and team membership.

Conversations & contacts: inbox threads, contact records, and message content stored for each workspace so teams can reply, automate, and review history.

Media attachments: images, audio, documents, and other files stored in object storage.

Integrations & OAuth: channel configuration (for example WhatsApp Business Account IDs and tokens), Google OAuth tokens for Sheets / Drive / Calendar, and optional email SMTP settings.

AI & knowledge: AI usage logs, agent configuration, and knowledge-base metadata / vector embeddings used to power replies when enabled.

Usage & operations: message and AI token usage logs, workflow run history, and diagnostic logs needed to operate and secure the service.

Billing: subscription and payment metadata processed by Stripe (we do not store full card numbers).

• Provide, maintain, and improve Pieceflow
• Deliver and receive messages on connected channels (including WhatsApp via Meta)
• Run automations, templates, and AI-assisted replies you configure
• Sync data to integrations you connect (for example Google Sheets)
• Authenticate users, enforce roles, and secure workspaces
• Bill subscriptions and provide usage visibility
• Respond to support requests and legal obligations

We do not sell personal data. We do not use customer conversation content to train third-party foundation models for unrelated purposes.

We use trusted processors to run Pieceflow, including:

• Meta (WhatsApp) — message delivery and inbound customer messages when WhatsApp is connected
• Google — Sheets / Drive / Calendar integrations and Gemini-powered AI features when enabled
• OpenAI — embeddings for knowledge-base indexing and retrieval when enabled
• Stripe — subscription checkout and billing customer records
• Hosting & storage — Postgres, Redis, object storage, and Qdrant for application data, media, and vectors

When you connect WhatsApp through Pieceflow as a Meta Tech Provider flow, Meta may also process your business and customer messaging data under Meta’s WhatsApp Business Platform terms and policies. Messaging fees may be billed by Meta directly to your WhatsApp Business Account.

Depending on your location, we process data based on: performance of a contract (providing the service), legitimate interests (security, product improvement, fraud prevention), consent (where required for optional integrations or marketing), and legal obligations.

Inbox conversations, contacts, and media remain while the workspace is active. Deleting a workspace removes that workspace’s data from Pieceflow (subject to short-lived backups and logs).

Usage logs and completed workflow run records are eligible for cleanup after approximately 90 days (configurable via our retention settings).

Account deletion removes your login, sessions, personal Google connections associated with your user, and workspaces you own (including that workspace’s conversations and related data). Memberships in workspaces owned by others are removed; those workspaces remain.

Subject to applicable law, you may:

• Correct profile information
• Delete your account after email verification (and owned workspaces)
• Request access to or deletion of workspace data you control
• Object to or restrict certain processing

In-product: signed-in users can delete their account at Account → Privacy.

By email: send a deletion or access request to support@otium-labs.com from the email on your Pieceflow account. Include your account email and, if relevant, workspace name. We will verify ownership and process the request within a reasonable period (typically within 30 days).

If you remove Pieceflow’s access via Meta / Facebook settings, you may also use this section as instructions for requesting deletion of data obtained through Meta login or WhatsApp Embedded Signup.

We use industry-standard measures such as encrypted transport (HTTPS), access controls, tenant-scoped data queries, and secret management for integration tokens. No method of transmission or storage is 100% secure; please protect your account credentials and invite only trusted teammates.

Data may be processed in the regions where we and our subprocessors operate. Where required, we use appropriate safeguards for cross-border transfers.

Pieceflow is intended for business use. We do not knowingly collect personal data from children under 16.

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Material changes may also be communicated in-product or by email.

Privacy questions or requests: support@otium-labs.com

Related: Terms of Service