ChatZi – Privacy Policy

1 Introduction

ChatZi ("we", "our", or "us") is a Shopify application that embeds a WhatsApp chat widget on your online store, allowing your customers to initiate WhatsApp conversations directly from your storefront.

This Privacy Policy explains what information we collect when you install and use ChatZi, why we collect it, how we use it, and the choices you have regarding your information. By installing ChatZi from the Shopify App Store, you agree to the practices described in this policy.

We follow Shopify's API terms, Partner Program Agreement, and applicable data protection legislation including the GDPR and CCPA.

2 Information We Collect

We collect only the minimum information necessary to operate the widget.

Category	Data points	Source
Store information	Shop domain, shop name, email address, plan name, primary locale & currency	Shopify Admin API (on install)
Widget configuration	WhatsApp number, widget label, color, position, visibility rules, enabled status	Merchant-entered via ChatZi settings
Billing	Subscription plan choice, billing status	Shopify Billing API
App usage events	Widget enabled/disabled timestamps, settings change log	ChatZi app activity

We do not collect: customer personal data, payment card information, order details, browsing history, or any data not listed above. The WhatsApp conversation itself takes place entirely on WhatsApp's platform and is not accessible to us.

3 How We Use Your Information

To install, configure, and display the WhatsApp widget on your storefront.
To authenticate your Shopify session and maintain app security.
To process and manage your subscription through Shopify Billing.
To send transactional notifications (e.g., billing status changes).
To diagnose technical issues and improve app performance.
To comply with Shopify's mandatory data privacy compliance webhooks.

We do not use your data for advertising, sell it to third parties, or use it for any purpose not listed here.

4 Data Sharing & Third Parties

We share your information only as necessary to operate the app:

Shopify – as a Shopify app, all data flows comply with Shopify's Privacy Policy.
Hosting infrastructure – our servers run on secure, industry-standard cloud infrastructure. Server providers act as data processors under signed data processing agreements.
WhatsApp / Meta – the WhatsApp widget link is constructed client-side in the merchant's browser. We do not transmit any data to WhatsApp or Meta on your behalf.

We will disclose information if required by law, court order, or to protect the rights and safety of our users.

5 Data Retention & Storage

We retain your store information and widget configuration for as long as ChatZi is installed on your store. If you uninstall the app, we delete all associated store data within 30 days, except where we are required by law to retain it longer.

All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Access to production databases is restricted to authorised personnel only.

6 Your Rights as a Merchant

Depending on your jurisdiction (including EEA, UK, and California), you have the right to:

Access – request a copy of the data we hold about you.
Rectification – request correction of inaccurate data.
Erasure – request deletion of your data ("right to be forgotten").
Portability – request your data in a portable, machine-readable format.
Object – object to processing of your data in certain circumstances.

To exercise any of these rights, email us at privacy@chatzi.app. We will respond within 30 days (or the legally required timeframe for your region).

Shopify also provides automated data request handling via the customers/data_request, customers/redact, and shop/redact compliance webhooks, which we implement.

7 Cookies & Tracking

The ChatZi Admin panel (inside Shopify) uses session cookies set by Shopify for authentication purposes only. The storefront widget script does not set any cookies, fingerprint visitors, or track customer behaviour on your store.

8 Children's Privacy

ChatZi is designed for use by Shopify merchants (businesses) and is not directed at children under the age of 13. We do not knowingly collect personal information from children.

9 Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via the ChatZi app dashboard and update the "Effective date" at the top of this page. Continued use of the app after changes are posted constitutes your acceptance of the updated policy.

+ Additional Resources

These links can help you learn more about data privacy and the ChatZi app: