ShopWa privacy policy

What ShopWa stores

The settings you enter on ShopWa's Settings page (your WhatsApp number, pre-filled message, greeting, and the button's position, color, and devices) are saved in your Shopify store as private app data (an app-data metafield). Your theme reads them to show the button. Only ShopWa can read or change them, and Shopify deletes them when you uninstall the app.

When you install ShopWa, Shopify issues the app an access token for your store. ShopWa's own database stores:

• Your shop's myshopify.com domain
• The access token and refresh token Shopify issues to the app (with their scope and expiry), used only to save your settings, to read your published theme's settings, and to remove webhook subscriptions left by earlier versions of the app
• Your chat button's last known setup state (whether it is turned on and whether a number is set) and its display options (position, distance from the bottom, color, and which devices it shows on), so the app can show your status the moment it opens
• The number of taps on your chat button per day, as plain counts with nothing about who tapped
• Whether you have hidden the setup guide or the note on the Settings page

That is everything. ShopWa's database does not keep your WhatsApp number, your messages, or the names, email addresses, or any other personal information of you, your staff, or your customers.

What ShopWa reads but does not store

To show whether the chat button is turned on, ShopWa reads your published theme's settings file (config/settings_data.json) using the read_themes permission. If that file can't be read, ShopWa may load your store's public homepage to check whether the button is present. ShopWa keeps only the result (whether the button is turned on), as described above, and shares nothing. If you set up the button in the theme editor with an earlier version of ShopWa, those settings are copied once into the app data described above.

Shopify also sends ShopWa notifications about your shop, such as when the app is uninstalled or its permissions change, and Shopify's privacy requests (customer data requests and data erasure). ShopWa uses them only to keep the data above current or to delete it, and doesn't store their contents.

Your storefront and your customers

The chat button is a link to WhatsApp (wa.me) with your number and an optional pre-filled message. It loads nothing from ShopWa or anyone else when a page opens, sets no cookies, and uses no browser storage.

When a customer taps the button, and only if they allow analytics in your store's privacy settings (Shopify's Customer Privacy API), the button sends one count to ShopWa through your store's own address (Shopify's app proxy). The count carries no information about the customer. Shopify may add a customer ID to requests from logged-in customers; ShopWa ignores it and doesn't store it. ShopWa never knows who taps the button or what they write.

When a customer taps the button, WhatsApp opens and the conversation takes place in WhatsApp, between you and your customer. WhatsApp's own privacy policy applies to that conversation.

Data minimization and staff access

ShopWa requests one permission, read_themes (saving its own app data needs no extra permission), and collects only the data listed above. It uses no third-party analytics, advertising, or tracking tools in the app or on your storefront; its only measurement is the daily tap count described above.

Access to ShopWa's database is limited to the people who operate the app and is used only to keep it running and to answer support requests. ShopWa staff do not access your Shopify admin unless you invite us as a collaborator for support, and that access ends when you remove it.

Where data is kept and who processes it

ShopWa runs on Fly.io servers in the United States (New Jersey), on encrypted storage, so your shop's data is transferred to and stored in the United States. Shopify provides the platform the app runs in. We don't sell, rent, or share your data with anyone else.

ShopWa's servers keep short-lived technical logs (the request path, response status, and timing, never query strings, tokens, or personal data) to find and fix faults. If you email us, we keep your message and email address to answer you.

Retention and deletion

When you uninstall ShopWa, Shopify notifies the app and ShopWa immediately deletes everything it stores about your shop, including tap counts. Shopify also removes the chat button from your theme and deletes the app data that holds its settings. Shopify's shop data erasure request, sent 48 hours after uninstalling, deletes anything that remains.

Because ShopWa stores no customer data, there is nothing to export or erase for customer data requests; ShopWa still acknowledges Shopify's customer data request and erasure webhooks.

Your rights

Wherever you live, you have the right to access, correct, or delete the data ShopWa holds about your shop, and to object to or restrict its processing. To make a request, email zakounf@gmail.com; we answer within 30 days. You can delete all ShopWa data at any time by uninstalling the app. If you are in the European Economic Area, the United Kingdom, or another region with a data protection authority, you may also complain to that authority.

Changes to this policy

If ShopWa's data practices change, we will update this page and the date above before the change takes effect.

Contact

Email: zakounf@gmail.com