Terms and Conditions

1. What the service is

AllFlow is a platform for planning and building software with AI assistants —including agents that write code and open pull requests— and for running WhatsApp surveys and conversations, including customer satisfaction measurement.

The service is provided “as is” and may change: we add, modify or discontinue features to improve it or for technical, legal or security reasons.

2. Your account

• Credentials are personal. You are responsible for keeping them secure and for everything that happens under your account.
• You may invite other people and assign them roles. Whoever administers the organization decides who gets in and with which permissions.
• Tell us immediately if you detect unauthorized use of your account.

3. Plans, prices and payments

The current plans and prices are those published at allflow.biz/plans, which forms part of these terms.

Payments are processed by Paddle as merchant of record. AllFlow does not store card numbers or financial data: we receive the subscription status and a customer identifier from the provider.

Subscriptions renew automatically for successive periods unless you cancel before the end of the current period. Cancellation stops the renewal; it does not refund the period already paid.

We may update prices with at least 30 days' prior notice by email or inside the platform. If you disagree, you may cancel before the new price takes effect.

4. Acceptable use

You may not use AllFlow to:

• Send unsolicited messages, to people who have not consented, or who have asked not to be contacted again.
• Breach Meta's or WhatsApp's policies, including the WhatsApp Business messaging policy.
• Impersonate another person or organization, or send misleading communications.
• Attempt to access the data, accounts or projects of another organization.
• Resell or redistribute the service without a written agreement with us.
• Interfere with the platform, overload it, or attempt to bypass its limits and access controls.
• Breach applicable law.

5. WhatsApp messaging and your contacts

This is the most important part of these terms, because it is where your responsibility and ours separate.

When you send a survey or a message to your contacts, you are the controller of that communication: you must have their consent and comply with applicable regulations and Meta's policies. AllFlow provides the technical mechanism —it records consent, honours opt-outs and stops writing to anyone who opted out— but the legal basis to contact that person is yours.

We may suspend sends if we detect a pattern that puts the WhatsApp account, the platform or third parties at risk. A number blocked by Meta affects everyone, so when in doubt we prefer to stop and tell you.

6. Your content and generated code

The content you upload —briefs, tasks, projects, tickets, files and the repositories you connect— is yours and your customers'. You grant us a limited, non-exclusive licence, solely to provide the service: to process it, store it and show it back to you.

The code the agents generate is yours, as are the proposals and plans the platform produces.

AllFlow retains the platform, its software, its brand and everything that already existed before you uploaded your content.

7. Third-party integrations

By connecting services such as GitHub, Vercel, Neon, Supabase or Meta, you authorize us to operate on your behalf with the credentials you give us, solely to provide the service.

You are responsible for having the right to use those credentials and accounts. The operation of those services is not up to us: if a third party changes its API, its availability or its prices, the service may be affected.

8. Personal data

The processing of personal data is described in the Privacy Policy, which forms part of these terms.

In the surveys and messages you send on behalf of your organization, you are the controller and AllFlow acts as processor, following your instructions.

9. The data of your apps' users

This section applies when you build an app with AllFlow and that app's end users leave their data —for example, the contact form on its landing page, or a sign-up—. That data reaches AllFlow and you manage it from the app's CRM.

You are the controller of that data. AllFlow is the processor: it processes the data on your behalf, following your instructions and solely to provide you the service —receiving it, storing it, showing it to you in the CRM and notifying you when a new one comes in—.

AllFlow does not sell that data, does not disclose it to third parties beyond the sub-processors that run the platform, does not use it for advertising or for its own purposes, and does not provide it to model providers to train their artificial intelligence models.

10. Sub-processors, retention and your duties

The sub-processors involved in this processing are the ones that run the platform's infrastructure: Vercel, which hosts it and runs its tasks, and Neon, the PostgreSQL database where the contacts and their events live. If we add or change a sub-processor for this processing, we reflect it in the Privacy Policy and update its date.

• Retention: contacts and their events are kept for as long as you keep the app, unless you delete them earlier.
• Deletion: deleting a contact also deletes its event history, and it cannot be undone.
• Archiving an app does not delete its CRM: the contacts are still there when you reactivate it. Deleting the app does delete its contacts and their events.
• Legal basis: you must have a legitimate basis to collect the data of your app's users and to process it the way you do.
• Your own policy: your app needs its own privacy policy, telling its users who the controller is and how to exercise their rights. AllFlow may provide suggested wording; adapting and publishing it is your responsibility.
• User requests: you resolve them, because you are the controller. If they reach us, we forward them to you and assist you.
• Data that does not belong there: the app must not send passwords, credentials or payment method data to the CRM.

11. Availability and support

We do what is reasonable to keep the platform available and we answer queries through the support channels. We do not guarantee uninterrupted availability, nor that the results of generated software will be what you expect, nor that a third party will approve a template or an integration.

12. Limitation of liability

To the extent permitted by law, we are not liable for indirect damages, lost profits, or loss of data or business opportunities. Total liability for a claim is limited to the amount you paid for the service in the previous twelve months.

Nothing above limits liability for wilful misconduct or gross negligence, nor any rights the law grants irrevocably.

13. Suspension and termination

You may close your account whenever you want. Before doing so, export whatever you need: once closed, data is deleted according to the retention periods in the Privacy Policy.

We may suspend or terminate the service for a breach of these terms, non-payment, or a risk to the platform, other customers or third parties. Where possible, we give notice beforehand and a chance to fix it.

14. Changes to these terms

If we modify these terms, we update the date in the header. If the change is significant, we notify you by email or inside the platform before it takes effect. Continuing to use the service after that date means you accept them.

15. Governing law

These terms are governed by the laws of the Republic of Chile. Any dispute will be submitted to the competent courts of Santiago, Chile.