Privacy Policy

Last Updated: June 20, 2026

This Privacy Policy explains how our WhatsApp AI CRM & Automation App ("we", "us", "our") collects, uses, processes, and shares personal data obtained from Shopify merchants ("Merchants") who install the App, and the customers ("Customers", "end-users") who interact with the storefront widgets or message the Merchant on WhatsApp.

For the purposes of applicable data protection laws (including GDPR and CCPA), the Merchant is the Data Controller of Customer personal data, and we act as the Data Processor operating under the Merchant's instructions.

1. Personal Data We Collect

A. Data Collected from Merchants

When a Merchant installs the App and configures the dashboard, we collect:

• Shop Credentials: Permanent Shopify domain (shop.permanent_domain), shop name, owner email address, country, and Shopify offline OAuth access tokens.
• WABA Credentials: Meta WhatsApp Cloud API Phone Number ID, WhatsApp Business Account ID, and WhatsApp System User Access Tokens.
• App Settings: Custom AI bot system prompts, playbooks (SOPs), quick replies, color schemes, sizes, position choices, exclusions, and configuration fields.
• Staff Accounts: Names, roles, emails, and passwords of your staff members authorized to access the dashboard inbox.

B. Data Collected from Customers (End-Users)

When a Customer interacts with the storefront widget or messages the Merchant's WhatsApp number, we collect:

• Identifier Data: WhatsApp ID/Phone Number (waId in E.164 format) and WhatsApp profile display name.
• Message Content: The body text, media attachments (images, video, documents, audio), canned buttons clicked, and emoji reactions.
• Shopify Order Info: Order histories, return authorizations, tracking codes, and coupon details retrieved from Shopify to resolve the Customer's automated support requests.

2. How We Process Personal Data

We use and process the collected data solely to perform the services requested by the Merchant, including: