Privacy Policy

Information we process

• Store and account details: shop domain, store name, contact email, currency, timezone and installation identifiers used to operate the app.
• Order and customer data: the Shopify event data needed for the notifications you configure, including order references, totals, line-item titles, customer name and phone number, and shipping or payment details used by the selected template.
• Connected WABPO store data: when the commerce connection is active, the app also synchronizes authorized customer records (names, phone numbers, emails, tags, recorded marketing preferences, order count and total spent), orders and shipping addresses, payments/refunds, fulfillment and tracking details, checkouts and recovery links, and product/variant, price and inventory information. Initial and later reconciliation can include authorized recent order history and the store catalogue.
• Connection information: the selected QR or Official method, WhatsApp number, provider project and account identifiers, connection status and encrypted credentials needed to maintain the connection.
• Templates and activity: saved content, variable mappings, automation settings, recipient number, rendered message, provider references, status, timestamps and error information. Delivery and read states are based on provider reports.
• Opt-out information: normalized phone number, source and timestamps needed to enforce a stop request. Supported Official inbound events may be processed for suppression; WAWCD is not a complete copy of the merchant’s WhatsApp inbox.
• Billing information: Shopify subscription identifiers, plan and period status, message usage and reservations, and the WABPO project entitlement needed to provide the purchased service. WAWCD does not collect your payment card details in this Shopify app.
• Support: information you choose to provide when contacting us. If the WABPO support widget is available, it may process visitor/session identifiers, page context and submitted contact details or messages to handle your request.

How we use it

We process this information to send your configured transactional messages, maintain the connection, show delivery activity, enforce opt-outs and allowances, synchronize purchased access, protect the service and respond to support or verified privacy requests. The active commerce connection also maintains customer, order, checkout and catalogue context in your linked WABPO project for its connected-store and customer-service functions. We do not sell Shopify customer data or disclose it to third parties for advertising, and we do not use it for unrelated marketing broadcasts.

Merchants are responsible for obtaining the permissions required by law and WhatsApp. WAWCD does not independently establish that permission from Shopify order attributes. QR messages include a self-service opt-out link; merchants should also monitor their account and promptly honor direct stop requests.

Services that process information

• Shopify: supplies authorized store/order data, hosts the embedded app experience and handles app subscription approval and billing.
• WAWCD Cloud: manages QR-linked sessions and receives the recipient number and configured content needed for QR delivery.
• WABPO: provides the Official connection, project linking, templates, messaging and receipt processing. It receives the project, recipient, message/template values and references for those functions, and the connected store data described above when the commerce connection is active. It also processes project entitlement data for included plan access and support-widget interactions when used.
• Meta / WhatsApp: processes Official business-account setup, template review, WhatsApp message delivery, delivery/read status and applicable messaging charges.
• Vercel and Neon: provide hosted application/request processing and database services for the hosted app.

The data synchronized to WABPO can extend beyond the variables in an individual message template. It depends on the active commerce connection and the Shopify permissions granted to the app. These providers may operate in countries different from your own and retain records under their applicable service terms. Contact us for information about your processing arrangement.

Retention and deletion

• Customer-identifying message activity in the WAWCD application database is scheduled to be redacted after 90 days. Non-identifying delivery results may remain for reporting.
• Webhook and delayed-job payloads are cleared after processing succeeds or finally fails. Terminal job and webhook deduplication records are removed after 30 days.
• Active opt-out records remain while the app is installed so a stop request is not lost; they are removed for a verified customer or shop redaction request.
• Protected-data access records contain only keyed hashes, actions and timestamps rather than raw names, phone numbers, emails or message bodies, and are removed after 12 months.
• Subscription, entitlement and usage records are kept as needed to operate the account, prevent duplicate allowance use and resolve billing, then handled by the shop deletion process and applicable recordkeeping obligations.
• Completed privacy-request identifiers and requested order IDs are cleared after handling. Retention enforcement depends on the app’s background processing.

We process Shopify’s customer-data request, customer-redaction and shop-redaction webhooks. Customer-data requests are recorded for response to the merchant. Customer redaction removes or redacts matching local identifiers, message content, suppression records and pending sends. Shop redaction schedules provider cleanup and deletion of the shop’s local app data.

Disconnecting Shopify stops that connection’s app sends. It does not delete a separately held WABPO account, project, wallet, templates or independent subscription. Local redaction does not by itself erase records retained independently by Meta or another delivery provider; processor deletion requests require coordination with the relevant provider.

Your requests

Customers can ask their merchant or contact us to request access, deletion or messaging opt-out. We verify requests before disclosing or deleting information and coordinate with the merchant or provider where necessary. Do not send credentials, payment card details or unnecessary customer records in a support request.

Contact

For privacy questions or requests, email support@wawcd.com.