Privacy Policy

A Shopify app that sends WhatsApp messages asking a store’s cash-on-delivery customers to confirm or cancel their orders, built on the WhatsApp Business Platform (Cloud API). Problems with the store’s own setup are shown to the merchant in the app, and a few, such as WhatsApp not being connected, are also emailed.

It is operated by Muhammad Hassaan Javed, a sole proprietorship in Pakistan trading as CodWatchdog. Data questions go to support@codwatchdog.com.

• Order phone number, read from Shopify via the read_customer_phone API scope, for the sole purpose of sending WhatsApp messages asking the customer to confirm or cancel their order, through the merchant's own WhatsApp Business Account.
• Meta's identifiers for WhatsApp messages to and from the store's number. They contain the phone number of whoever sent or received each message, in a form that can be decoded, including people who message the store without having ordered.
• The store owner's email address, which Shopify gives us, to send the merchant CodWatchdog's emails and to record who confirmed the checkout wording.
• Each order's number and amount, which the message shows. The amount is removed with the phone number.
• We do not keep a customer's name, email or address.
• We do not use cookies, trackers, or analytics on customer-facing messages.

Solely to deliver the messaging functionality merchants install the app for. See the merchant terms for the full processor and controller relationship.

We do not keep customers’ names. Shopify withholds them from us, and the names Meta includes in its notifications, such as the WhatsApp name of a customer who replies, are not stored.

A customer’s phone number is stored with each of their orders, and with a record of whether that store may message them. Once an order is settled (the customer answered, it was marked unanswered after its reminders, or we stopped trying to send it), the phone number stored with it is removed after the history period of the store’s plan: 7 days on Free, 90 days on Guard, 12 months on Watch. The plan used is the one named in the latest notice Shopify sent us about the store’s subscription, whether or not it was paid for, and Free if there was none. The order’s outcome stays, with Meta’s identifier for the last message it was sent as, which still encodes the number (below). An order that is never settled, such as one whose customer replied STOP before answering, keeps its phone number while the store uses CodWatchdog.

The record of whether the store may message a customer is kept while the store uses CodWatchdog; if the customer replied STOP, it says that store must not message them again.

Meta’s message identifiers contain the phone number of the message’s sender or recipient in a form that can be decoded: the latest one stays with each order while the store uses CodWatchdog, and those in the notifications Meta sends us stay in our log for up to 12 months, the longest history any store’s plan keeps, even after a customer’s or the store’s data is erased.

Everything else tied to a store is deleted 48 hours after it uninstalls the app, when Shopify asks us to.

Stored in a managed Postgres database with encryption at rest and TLS in transit. The merchant’s WhatsApp and Shopify access tokens are also encrypted by the app with AES-256-GCM. Access is limited to the founder; no other staff or shared credentials exist.

• Merchants: uninstalling the app triggers deletion of your store's data.
• Customers: replying STOP to a store's message is recorded, and CodWatchdog does not message them for that store again while the store uses it.

Questions about this policy, or a request to see, export, or delete your data: support@codwatchdog.com.