Privacy Policy

Confirm Zone ("we", "us") is a Shopify app that sends WhatsApp messages to a store's customers: order confirmations, dispatch notices and courier updates. This policy explains what information we handle and why.

Who this applies to

Merchants are the stores that install Confirm Zone. Customers are the people who order from those stores. The merchant decides to send messages to its customers, and we process the data on the merchant's behalf.

Information we collect

• From the merchant's Shopify store: store name and domain, and for each order: order number, customer first name, phone number, delivery address and city, products, total, payment method, courier name and tracking number.
• From the merchant: message templates, settings, courier API keys, and WhatsApp connection details (a linked WhatsApp session, or the Meta WhatsApp Business details the merchant enters: Phone number ID, Business Account ID and access token).
• From customers: their reply to our message (for example "1" to confirm or "2" to cancel, or a button tap).
• Technical records: a log of messages sent, their status and any errors, so merchants can see what happened.

How we use it

• To send the order, dispatch and courier messages the merchant has switched on.
• To record a customer's confirm or cancel reply against their order and send an automatic answer.
• To show the merchant their activity, message history and performance numbers.
• To keep the service secure, prevent abuse and fix problems.

We do not sell personal information and we do not use it for advertising.

Who we share it with

• WhatsApp / Meta, to deliver messages (the customer's phone number and message content).
• Shopify, which provides the store and order data.
• Courier companies, only the services a merchant chooses to connect, to read parcel status.
• Our hosting provider, which stores the data on our servers.

We share data with authorities only when the law requires it.

Storage and security

Data is stored on our own secured server and transferred over HTTPS. Meta access tokens are stored encrypted. Access to administration tools is password protected and limited to us. We keep an encrypted backup of our database every day and retain the latest 14. No system is perfectly secure, but we work to protect your data.

If we ever discover a security incident that affects your data, we will contain it, find out what was affected, fix the cause, and notify affected merchants and the authorities as the law requires, without undue delay. Our full plan is on the Security and Incident Response page.

How long we keep it

Order details, customer phone numbers and message logs are deleted automatically 90 days after they are created. Other data is kept while the merchant uses the app. When a merchant uninstalls, we remove the store's data, including orders, message logs and saved connection details, after Shopify sends us the standard data removal request, and in any case within 30 days.

Your rights

Customers can ask the store (or us) to access, correct or delete the data held about them. Merchants can ask us to delete their store's data at any time. Email us at the address below, or see our data deletion page. If you no longer want to get messages, reply STOP or tell the store.

Children

The service is for businesses and is not directed at children under 13.

Changes

We may update this policy. The date at the top shows when it last changed.

Contact

Confirm Zone, Pakistan. Email: support@conformzone.tech