Merchant Data Processing Terms

The installing merchant is the data controller for their customers' personal data. CodWatchdog acts as a data processor, processing personal data only on the merchant's instructions (via the app's configured behavior) and only for the purpose stated below.

• Order phone number (read_customer_phone: the shipping, order, customer or billing phone, in that order), used solely to send WhatsApp messages asking the customer to confirm or cancel their order, through the merchant's own connected WhatsApp Business Account.
• No other customer field (name, email, address) is requested or kept.

Phone data is used only for the WhatsApp order-messaging purpose above. It is never used for marketing, sold, shared with data brokers, or used to train AI or ML models.

• Meta Platforms, Inc. (WhatsApp Business Platform): message delivery.
• Neon, Inc.: Postgres database hosting, encrypted at rest and in transit.
• Vercel Inc.: application hosting and deployment.
• Plus Five Five, Inc. (Resend): email delivery to merchants.
• Shopify: the platform CodWatchdog is distributed through and authenticates against.

• A merchant can request deletion of their store's data at any time by uninstalling the app, which triggers Shopify's shop/redact deletion flow.
• A merchant can request an export or explanation of what is stored by contacting support@codwatchdog.com.

CodWatchdog is a trade name of Muhammad Hassaan Javed, a sole proprietorship in Pakistan. Muhammad Hassaan Javed is the legal business name, owner, and sole operator of this service.