Privacy Policy

Last updated: July 2026

1. About Us

Megflow ("Company", "we", "us") operates the AI GTM Engineering Platform at www.megflow.com and gtm.megflow.com. Customers subscribe to build, deploy, and run AI agents that automate go-to-market work — account research, meeting preparation, CRM updates, and follow-ups — connected to their existing business systems. This Privacy Policy explains how we collect, use, store, and protect information when you use our platform or subscribe to our services.

2. Information We Collect

We collect the following categories of information when you create an account or subscribe:

• Account information: your name, email address, company name, and authentication details
• Organization data: workspace/company settings and team member access
• Billing information: payment details processed securely by our payment provider — we do not store card or bank data
• Business data you connect: information from CRM, email, calendar, and other integrations you authorize, used only to run your AI workflows
• Usage data: how you interact with the dashboard, workflows created, agent activity, and session information
• Communications: messages you send us via email or chat for support

3. AI Agent & Workflow Data

When you connect a business system or run an AI agent, the relevant data (e.g. company/contact information, meeting details, CRM records) is processed by our AI to produce the requested output — a research brief, a CRM update, a follow-up draft, and so on. This content is stored securely in your workspace and is never shared with other customers or used to train models for anyone outside your organization. You retain full ownership of your business data and everything your workflows produce.

4. How We Use Your Information

We use collected information to:

• Provide and improve access to the Megflow AI GTM Engineering Platform and all its features
• Process your monthly subscription and manage your billing account
• Run AI agents and workflows against the business systems you connect
• Keep your connected CRM, email, and calendar data in sync where your workflows require it
• Send platform updates, subscription receipts, and support communications
• Comply with legal and regulatory obligations in the regions we operate

5. Data Storage & Security

Your account data, connected business data, and workflow outputs are stored on secure cloud infrastructure with encryption at rest and in transit. We implement access controls, audit logging, and regular security reviews. We do not sell your personal data or your business data to any third party.

6. Third-Party Services

To deliver our platform, we use the following third-party providers, each governed by their own privacy policy:

• OpenAI — AI processing for agent reasoning, research, and content generation
• Clerk — authentication and account/session management
• Railway — cloud infrastructure and hosting
• Google, Microsoft, and Zoho — sending outreach email on your behalf, only if you connect your own Gmail, Outlook, or Zoho Mail account (see Section 7 below)
• Our payment provider — subscription billing and payment processing

7. Google API Services User Data

Megflow's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. If you choose to connect your Gmail account under Settings > Email Connections, we request the gmail.send permission solely to send outreach email drafts you have reviewed and approved, from your own mailbox instead of a shared Megflow address. We do not read, scan, or store the contents of your Gmail inbox, and this access is never used for advertising or shared with any third party beyond what is strictly necessary to deliver the message (e.g. our cloud infrastructure provider). You can disconnect this access at any time from Settings > Email Connections in your Megflow dashboard, or directly from your Google Account's Security settings at myaccount.google.com/permissions.

8. Regional Data Regulations

Megflow operates in compliance with applicable data protection laws across the regions we serve, including:

• India: Digital Personal Data Protection Act 2023 (DPDPA) — Indian data principals retain rights over their personal data
• Gulf Region: UAE Federal Decree-Law No. 45 of 2021 (PDPL) and Saudi Arabia PDPL 2021 — data is processed lawfully and transparently
• Southeast Asia: Thailand PDPA, Singapore PDPA, and equivalent regional frameworks
• Europe: General Data Protection Regulation (GDPR) — EU/EEA data subjects have full rights including access, rectification, erasure, and portability
• All regions: We apply data minimisation and purpose limitation across all jurisdictions

9. Data Retention

We retain your account and workspace data for as long as your subscription is active. Workflow history and agent outputs are retained for up to 12 months. Upon account deletion or cancellation, your personal data is removed within 30 days. Anonymised usage data may be retained indefinitely for platform analytics.

10. Your Rights

Regardless of your location, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your workspace data at any time from your dashboard
• Opt out of non-essential communications
• Lodge a complaint with your local data protection authority

11. Cookies

Megflow uses essential cookies to maintain your login session and platform functionality. We do not use tracking or advertising cookies. You can control cookie settings in your browser, but disabling essential cookies may affect platform performance.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice on the platform. Continued use of Megflow after the effective date of changes constitutes your acceptance of the updated Policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at: