Privacy Policy

Whatme is a Shopify app operated by BeJAM (“we”, “us”). It lets merchants add WhatsApp chat buttons to their online store, so shoppers can start a WhatsApp conversation with the store. This policy explains what information the app handles, why, and how long we keep it.

Information we store

When a merchant installs Whatme, we store on our servers only what the app needs to work:

• The store’s myshopify.com domain.
• The access token that Shopify issues to the app, encrypted, and the permissions the merchant granted.
• When the app was installed or uninstalled.
• The store’s plan (Free or Pro), its Shopify store ID and when we last checked the plan.
• How many times the store’s WhatsApp buttons were clicked each day, grouped by agent, by button (floating or product page) and by type of page, and, for clicks on product pages, by product (its Shopify ID and title). These are counts only: they don’t identify who clicked.

We don’t store names, email addresses, payment details or any information about the store’s customers or visitors.

Information that stays in Shopify

The app’s settings are saved in the merchant’s own Shopify store, as app data: the agents’ names, roles, WhatsApp numbers and pre-filled messages, business hours, the languages each agent appears in, the buttons’ style and where they appear, the greeting message, the plan and the setup guide progress. The agents’ names, roles and WhatsApp numbers are shown to shoppers on the store, which is their purpose; merchants decide what to enter there.

The texts shoppers see (the buttons’ and panel’s texts, the greeting and the agents’ names, roles and messages) are also saved in the store as app content, so the merchant can translate them with Shopify’s translation tools, such as Translate & Adapt. Those translations stay in Shopify. To offer this, the app reads which languages the store has published and whether these texts are already translated into each of them.

Store visitors

Whatme’s buttons run in the visitor’s browser and don’t use cookies. If the merchant turned on the greeting bubble, the browser keeps a note in its session storage that the greeting was shown, so it appears only once per visit; the note never leaves the browser and is cleared when the visitor closes the tab.

When a visitor clicks a WhatsApp button:

• The browser sends us, through Shopify, which agent and which button were clicked, the type of page (for example, a product page) and, on a product page, the product’s ID and title. We add it to the daily counts described above. We don’t keep the visitor’s IP address or any identifier. When the visitor is logged in to the store, Shopify includes their customer ID in the request; we ignore it and never store it.
• If the merchant turned on the Google Analytics option, the button also sends a whatsapp_click event, with the same details, to the analytics tools the merchant installed on their store (Google Analytics, Google Tag Manager or Shopify customer events). That data goes to the merchant’s own accounts, not to us, and is governed by the merchant’s privacy policy.
• WhatsApp opens with the merchant’s pre-filled message, which can include the page’s title and address. The conversation happens in WhatsApp, a service of WhatsApp LLC, between the visitor and the merchant; we don’t take part in it or see it.

Sidekick

Where Shopify’s assistant, Sidekick, is available, the click report has buttons that open Sidekick with a ready-made question. The question includes the report’s numbers (clicks by page, by agent and by product, with the products’ titles) and appears in the conversation as the merchant’s message. It is sent by the merchant’s browser to Shopify only when the merchant clicks one of those buttons; we don’t send anything to Sidekick or receive its answers. Sidekick is a Shopify service governed by Shopify’s terms and privacy policy.

Customer data

Whatme doesn’t request access to customers or orders and doesn’t collect, store or process customer personal data. We still respond to Shopify’s privacy requests (customer data requests and redaction requests), which for Whatme involve no customer data.

Billing

Paid plans are billed by Shopify. To unlock the plan’s features, we check which plan is active through Shopify’s Admin API about once a day and when the merchant opens the app. We never see payment card or bank details.

How we use information

We use the information above only to run the app: to authenticate the merchant, to provide the app’s features and to apply their plan. We don’t sell, rent or share it for advertising.

Service providers

• Shopify, the platform the app runs on.
• Our web hosting provider, which runs the app’s server and database.
• Cloudflare, which delivers and protects the app’s website.

Our hosting provider and Cloudflare may keep standard technical logs, such as IP addresses, to operate and secure their services.

How long we keep information

• When a merchant uninstalls Whatme, we delete the store’s access token right away.
• Click counts are kept while the app is installed, so merchants can see their history.
• When Shopify asks us to erase the store’s data (48 hours after uninstalling), we delete every record of the store, click counts included.
• The app’s own server logs contain the store domain but no tokens or personal data, and are deleted after 90 days.
• The settings the app saves in the merchant’s Shopify store are removed by Shopify when the app is uninstalled.

Security

All connections use HTTPS. Access tokens are encrypted in our database, and requests from Shopify are verified with Shopify’s signatures and session tokens.

Your rights

Merchants can ask us at any time what information we hold about their store, or ask us to correct or delete it, by writing to info@bejam.dev. Uninstalling the app also deletes the store’s data as described above.

Changes to this policy

If we change how Whatme handles information, we’ll update this page and the date at the top.