WASP Privacy Policy

Last updated: 29 Dec 2025

WASP – Order Confirmation (“the App”, “we”, “us”, or “our”) is a Shopify application that automates order confirmation and cancellation by sending WhatsApp messages to customers.
This Privacy Policy explains how we collect, use, store, and protect personal information when merchants install or interact with our App.


1. Information We Collect

When you install and use WASP, we may access and store the following information from your Shopify store as permitted by your app permissions:

Store Information

  • Store name

  • Store domain

  • Store contact information

  • Shopify API credentials necessary for secure integration

Order Information

  • Order ID

  • Customer name

  • Customer phone number

  • Order status

  • Order line items

  • Order total amount

  • Shipping address (if available)

Customer Information

  • Customer name

  • Phone number (used only to send WhatsApp confirmation messages)

  • Customer ID

  • Customer’s preferred language (if available)

WhatsApp Metadata

We may receive limited metadata related to the delivery or status of WhatsApp messages, such as:

  • Message sent or delivered status

  • Customer confirmation or cancellation selection

We do not access or store the content of customer replies beyond confirmation or cancellation.


2. How We Use Your Information

We use the information collected to:

  • Send WhatsApp order confirmation messages

  • Mark orders as confirmed or cancelled in your Shopify store

  • Automate order processing and reduce return-to-origin (RTO)

  • Provide customer support

  • Improve the functionality of the App

  • Ensure compliance with Shopify’s API usage guidelines

We do not sell, share, or use personal information for advertising or marketing.


3. Data Storage & Retention

We store only the minimum data required for the App to function:

  • Store identifiers

  • Access tokens (encrypted)

  • Message logs (confirmation/cancellation events)

  • Automation settings configured by the merchant

Order details and customer phone numbers are retrieved from Shopify only when needed and not permanently stored, except for logs required for functionality and troubleshooting.

We retain information only for as long as the merchant continues to use the App.
When the App is uninstalled, we automatically delete:

  • All access tokens

  • All stored store settings

  • All logs tied to that shop

  • Any message metadata

Uninstall webhook triggers immediate cleanup.


4. Data Sharing and Third-Party Services

We may share limited data with the following services to enable WhatsApp messaging functionality:

1. WhatsApp / Meta Platforms

Used solely for sending automated WhatsApp messages.
Shared data includes:

  • Customer phone number

  • Message template ID

  • Order reference details (if included in the template)

2. Hosting Providers

Our backend is hosted on Render.com, which securely stores:

  • Encrypted API tokens

  • Logs

  • App configuration data

Render complies with industry-standard security practices.

We never sell, rent, or share data with advertisers or unrelated third parties.


5. Security

We take data protection seriously and implement:

  • HTTPS encryption

  • Token encryption

  • Shopify OAuth security requirements

  • HMAC verification for all webhook and API requests

  • Strict access control

  • Automatic deletion on uninstall

However, no method of transmission or storage is 100% secure.


6. Access to Your Data / Correction / Deletion

You may request:

  • A copy of the data we store about your shop

  • Correction of inaccurate data

  • Manual or immediate deletion (in addition to automatic uninstall cleanup)

Use the contact information below to request these actions.


7. Children’s Privacy

This App is not intended for children under the age of 13, and we do not knowingly collect personal information from children.


8. Changes to This Privacy Policy

We may update this policy from time to time.
Continued use of the App after any modifications constitutes acceptance of the updated Privacy Policy.


9. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact:

LevLocal – WASP Support Team
Email: support@levlocal.agency
Website: https://levlocal.agency