OrderPing Privacy Policy

OrderPing ("the app") is built and operated by Infinitx Labs (sole trader, registered in Australia), reachable at support@infinitxlabs.com. The app sends order confirmation and shipping messages to a store's customers over WhatsApp on behalf of the store owner (the "merchant").

The roles

The merchant who installs OrderPing is the controller of their customers' personal information. Infinitx Labs processes that information only to provide the app's service to the merchant.

Information the app processes

• Order information: order number, order ID, order total and currency, payment method type, and fulfillment status — received from Shopify when an order is placed or fulfilled.
• Customer contact details: the customer's first name and phone number, as entered at checkout — used solely to compose and deliver the WhatsApp messages the merchant has enabled.
• Message records: the content, delivery status, and timestamps of messages sent and received (for example a customer's CONFIRM or CANCEL reply), kept so merchants can see what was sent and so usage can be counted against the merchant's plan.
• Store settings: the store's domain, chosen message language, and app configuration.

The app does not collect customer email addresses, full addresses beyond what Shopify provides in the order payload, payment card details, passwords, or browsing data. The app contains no advertising or analytics trackers.

How messages are delivered

Messages are delivered through the official WhatsApp Business Platform operated by Meta Platforms, Inc. The customer's phone number and the message content are transmitted to Meta for delivery, subject to WhatsApp's business terms. No other third parties receive personal information. We never sell personal information.

Retention and deletion

• Data is retained while the app is installed on the merchant's store.
• When a customer requests erasure, Shopify's customers/redact process triggers automatic anonymisation of that customer's records (phone number, name, and message contents are removed).
• When the app is uninstalled, Shopify's shop/redact process triggers automatic deletion of all of the store's data — orders, messages, and settings.
• Customer data requests relayed by Shopify (customers/data_request) are fulfilled within 30 days.

Security

Data is encrypted in transit (TLS) and stored on access-controlled infrastructure. Webhook requests are verified with cryptographic signatures before processing.

Customers

If you received a WhatsApp message from a store using OrderPing, that store is responsible for your order data. Contact the store directly for privacy requests, or email us and we will assist. Replying CANCEL to a confirmation message cancels that order confirmation; messages are only sent about orders you placed.

Agreement

This page is the data processing agreement between Infinitx Labs and each merchant using OrderPing. By installing the app you agree to the practices described here: we process only the data listed above, only for the purposes stated, and delete it as described when you uninstall or on request.

Changes and contact

Material changes to this policy will be reflected on this page with an updated date. Questions: support@infinitxlabs.com.