Connections, permissions, send policies and limits.
In Klik Flow an AI always works as the person who connected it, in one business, within the permissions ticked and that person's role. There is no "system" access that goes around roles.
Connections and businesses
One connection = one person, one business, one AI app, and the permissions ticked at consent. A connection ends when it is disconnected, its lifetime runs out, it goes unused for 30 days, the password is changed, the member is removed, or the package no longer includes the AI Connection.
Permissions per module
Permissions are grouped by module (chats, contacts, landing pages and so on). Tools of a module that is not ticked do not appear in the AI app. A permission your role does not have cannot be granted, and every call checks your role at that moment.
- Phone numbers follow the role's masking, just as in the app.
Send policies
For actions customers or the public can see (replies, chats to new numbers, comment replies and DMs, follow-ups, publishing or unpublishing landing pages, publishing Bio Link, changing a live Smart Link, scheduling or cancelling content, and sending broadcasts), you choose at consent:
- Draft approved by staff (Draf, the default): waits in the Inbox (24 hours), the Comments queue, or the module's Awaiting approval panel (7 days, approved by staff who have the permission for that button).
- Packages with content approval: schedules from the AI enter the Content approval queue, like schedules from staff.
- Confirm in the AI app (Konfirmasi di aplikasi AI): the app asks you first. Apps that cannot ask yet get a draft.
- Direct with limits (Langsung, dengan batas): owners only, for trusted automation.
- Without the package feature "AI may send without staff approval", everything becomes a draft.
- Comment DMs and follow-ups have no draft queue, so they are available only with Confirm or Direct.
Changing data
Tools that change data need the package feature "AI may change data and prepare drafts". Every write call carries an idempotency key from the AI app, so a call repeated after a network drop never runs twice. Pipeline stage automations run only from the Klik Flow app.
- Captions from Klik Flow AI use the business's AI credits, as in the Content editor, and the owner can turn them off.
- Landing page and Bio Link drafts are checked as in the editor: links must be http(s), rich text is cleaned, and the published page does not change until it is published again.
Limits, logs and revoking
Every connection has a per-minute and a per-day call limit. Every call is logged (without message content) and can be seen in Settings › AI Connection › Activity. The Disconnect button ends a connection immediately.