Effective and last updated: September 24, 2026
This policy explains how Metrics AI Innovation Lab, operating under the Metrics brand ("Metrics", "we", "our", or "us"), processes information when businesses use Flow AI to operate customer-facing AI agents, qualify leads, manage campaigns, and connect approved business systems.
This policy applies to Flow AI and its administration dashboard, APIs, AI agents, and connected messaging services. A business using Flow AI generally decides why and how its customer data is processed and acts as the data controller. Metrics generally processes that data on the business's instructions as a data processor. Metrics is the controller for account, billing, security, and service-administration data that it collects for its own legitimate operations.
Depending on the features configured by a business, Flow AI may process:
We process information to:
Flow AI only connects services that an authorized business user configures. Information may be processed by Meta and WhatsApp, configured AI model providers such as Anthropic or OpenAI, cloud infrastructure providers, messaging providers, and business systems selected by the customer. These providers process information under their own terms and privacy policies. We may also disclose information to professional advisers, competent authorities when legally required, or in connection with a corporate transaction subject to appropriate safeguards. We do not sell personal information.
We process information as needed to perform our agreements, follow a customer's documented instructions, protect the service and its users, comply with law, and pursue legitimate operational interests where those interests are not overridden by individual rights. Where consent is required, the business using Flow AI is responsible for obtaining and recording valid consent before it sends information to Flow AI or starts a marketing conversation. Customers must provide appropriate notices, configure the service lawfully, limit access to authorized personnel, and avoid submitting sensitive information unless its processing has been expressly agreed and legally permitted.
Flow AI uses information received from Meta and WhatsApp only to provide the functionality requested and authorized by the connected business, such as onboarding business assets, sending or receiving messages, reading authorized advertising performance, and reporting permitted conversion events. For closed-loop reporting, Flow AI may send Meta an event name, time, deduplication identifier, the authorized WhatsApp Business Account identifier, and the click-to-WhatsApp identifier supplied by Meta. It does not include conversation content in that conversion-event payload. Metrics does not sell Meta Platform Data, build independent advertising profiles from it, or use it for unrelated surveillance. Access is limited to the permissions and assets authorized by the business and is removed or restricted when the connection is revoked or no longer required.
When a business connects a Facebook Page, Flow AI receives messages that people send to that Page on Messenger, the sender's name and profile picture where Meta provides them, and message delivery events. Flow AI uses this information only to reply on the business's behalf, show the conversation to the business, and hand the conversation to the business's staff. Replies sent outside Messenger's standard 24-hour messaging window are sent only by a human agent, and only where the business has enabled that option.
A person can ask for their data connected to Flow AI through Meta to be deleted by removing the Flow AI app from their Facebook settings (Settings and privacy > Settings > Business integrations, or Apps and websites, depending on the current Facebook layout), or by emailing the address in the Data deletion requests section below. When Meta notifies Flow AI of a deletion request, Flow AI returns a confirmation code and a status page as required by Meta's data deletion callback, and deletes or anonymizes the related data within 30 days, unless the law requires keeping it for longer.
Businesses must follow WhatsApp and other channel rules, including template, timing, consent, and opt-out requirements. Flow AI must not be used to send unsolicited marketing messages. A person may ask the business to stop messaging at any time. The business is responsible for promptly honoring that request and maintaining any suppression record needed to prevent further unauthorized contact.
Flow AI may send relevant conversation content and business-provided context to the AI model selected by the business. Businesses control which models and integrations they enable. AI-generated responses can be reviewed, restricted, paused, or handed to a human according to the configured workflow. Qualification scores and signals are decision-support outputs. Businesses remain responsible for consequential sales, eligibility, pricing, contractual, or other decisions and should provide meaningful human review where required by law or the circumstances.
We retain information for the period required to provide the service, meet the business's documented instructions, maintain security and audit records, and satisfy legal obligations. Retention can vary by data type, customer configuration, and agreement. We delete or anonymize information when it is no longer needed, subject to lawful exceptions and backup lifecycles.
We use technical and organizational safeguards designed to protect information, including access controls, encrypted transport, secret management, tenant separation, audit logging, and restricted production access. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.
Connected providers may process information in countries other than the one where it was collected. Where required, Metrics and its providers use contractual and organizational safeguards for international data transfers.
Depending on applicable law, individuals may have rights to access, correct, delete, restrict, or object to processing of their personal information, or request a portable copy. Requests concerning data controlled by a Flow AI customer should first be directed to that business. We support customers in responding to valid requests. Individuals may also have the right to complain to the data-protection authority that applies to them.
To request deletion of information associated with Flow AI, email info@metrics.com.eg with the subject "Flow AI data deletion request" and include the relevant business name and phone number or account identifier. We may need to verify the requester's identity and authority. When another business is the data controller, we will route or coordinate the request with that business.
Flow AI is a business service and is not directed to children. Businesses must not intentionally use Flow AI to collect children's personal information without an appropriate legal basis and safeguards.
We may update this policy as Flow AI, connected providers, or legal requirements change. The date at the top identifies the latest version. Material changes will be communicated through an appropriate service or business channel.
Metrics AI Innovation Lab, operating under the Metrics brand
Cairo, Egypt
info@metrics.com.eg
metrics.com.eg
