Privacy Policy

1

Information We Collect

a) Merchant Information

When you install ConfirmQ, we collect:

• Your Shopify store domain and access credentials
• Your name and email address associated with your Shopify account
• Your billing information (processed securely through Shopify’s billing system)

b) Customer Order Data

To send automated WhatsApp messages, we collect and process:

• Customer names and phone numbers from Shopify orders
• Order details including order number, line items, total price, shipping address, and order status
• Checkout information for abandoned cart recovery
• Fulfillment and shipment details

c) WhatsApp Session Data

When you connect your WhatsApp number via QR code, we store:

• Encrypted session credentials to maintain your WhatsApp connection
• Your connected WhatsApp phone number and display name
• Connection status

d) App Usage Data

We collect basic usage data to improve the app including:

• Message logs (sent, delivered, failed)
• Order response data (confirmed, cancelled)
• Customer risk profiles and scoring data
• Automation flow execution logs
• Dashboard analytics data

2

How We Use Your Information

We use the collected information exclusively to:

• Deliver automated WhatsApp messages — order confirmations, shipment updates, abandoned cart recovery, and admin notifications on your behalf.
• Operate app features — including fake order detection, risk scoring, shipment tracking, and automation flows.
• Provide analytics — to show you performance metrics in your dashboard.
• Improve the service — using aggregated, anonymized usage data to improve app performance and features.
• Customer support — to respond to your support requests and troubleshoot issues.

We do not use your data or your customers’ data for advertising, marketing to third parties, or any purpose beyond operating the ConfirmQ service.

3

WhatsApp Data and Account Confidentiality

When ConfirmQ connects to WhatsApp via QR code, we operate as a linked device. Our access is strictly limited to:

• Sending automated messages triggered by Shopify order events
• Receiving poll vote responses from customers to process order confirmations

We do not:

• Read, store, or access your personal WhatsApp conversations
• Access your WhatsApp contacts list
• Read or store any media files from your WhatsApp account
• Interact with your WhatsApp account beyond the automated message delivery required to operate the app

Your WhatsApp session credentials are encrypted and stored securely on our servers. They are never shared with any third party.

4

Data Sharing and Third Parties

ConfirmQ does not sell, rent, or share your personal data or your customers’ personal data with any third parties, except in the following limited circumstances:

• Shopify: We access your store data through Shopify’s official API. Shopify’s own privacy policy governs their handling of your data.
• We use secure database provider for storing app data on our behalf under strict confidentiality agreements.
• Legal requirements: We may disclose data if required by law, court order, or governmental authority.

5

Data Retention

• Active merchants: We retain your store data and customer data for as long as ConfirmQ is installed on your Shopify store.
• After uninstallation: When you uninstall ConfirmQ, your WhatsApp session is disconnected immediately and all store data is scheduled for permanent deletion within 30 days.
• Customer data erasure: Individual customer data can be deleted immediately upon request by contacting support@confirmq.com.

6

Data Security

We implement industry-standard security measures to protect your data:

• All data is stored in encrypted databases with restricted access
• All communications between ConfirmQ, Shopify, and our servers use HTTPS encryption
• WhatsApp session credentials are stored in encrypted form
• Access to production systems is restricted to authorized personnel only
• Regular security reviews are conducted to identify and address vulnerabilities

While we take every reasonable precaution, no system is completely immune to security risks. In the event of a data breach affecting your information, we will notify you as required by applicable law.

7

Customer Rights Under GDPR

If you or your customers are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to Access: Request a copy of all personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data.
• Right to Restrict Processing: Request a limitation on how we process your data.
• Right to Data Portability: Request your data in a structured, machine-readable format.
• Right to Object: Object to our processing of your personal data in certain circumstances.

ConfirmQ implements the Shopify-required GDPR webhooks:

• Customer data requests are fulfilled within 30 days
• Customer data erasure requests are processed immediately
• All shop data is deleted within 30 days of app uninstallation

To exercise any GDPR right, contact us at support@confirmq.com.

8

Cookies and Tracking

ConfirmQ does not use cookies or tracking technologies on your Shopify admin panel. Our website (confirmq.com) may use basic analytics cookies to understand visitor behavior and improve the website experience. You can disable cookies in your browser settings at any time.

9

Children’s Privacy

ConfirmQ is a B2B application designed for Shopify merchants. We do not knowingly collect personal information from individuals under the age of 18. If you believe a minor has provided us with personal information, please contact us immediately at support@confirmq.com.

10

International Data Transfers

ConfirmQ operates servers in Singapore and processes data in compliance with applicable international data transfer regulations. If you are accessing ConfirmQ from outside of our server region, your data may be transferred and stored on servers in a different country. We ensure that any such transfers comply with applicable data protection laws.

11

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of significant changes via email or an in-app notice. The “Last updated” date at the top of this page reflects when the policy was last revised. Continued use of ConfirmQ after changes are posted constitutes your acceptance of the updated policy.

12

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:

📧 Email: support@confirmq.com

🌐 Website: confirmq.com