ChatMyStore Privacy Policy
Last updated: 19 October 2026
Who we are: ChatMyStore, Pakistan. Full details are in section 10. Contact: hello@chatmystore.com.
ChatMyStore is a WhatsApp assistant for Shopify store teams. This policy explains what we collect, why, who we share it with, and how long we keep it.
1. Who this policy covers
- Merchants and their team members who install ChatMyStore and chat with it on WhatsApp.
- Suppliers whose name and phone number a merchant saves in ChatMyStore.
- The merchant's customers (shoppers), whose data we read from Shopify in a small number of cases (section 3).
For shoppers' data, the merchant is the controller and ChatMyStore processes it on the merchant's behalf.
2. What we collect from merchants and their teams
| Data | Why |
|---|---|
| Store address on Shopify, store time zone | To connect to the store and say "today" in the store's time |
| Shopify access keys | To read and change the store when a team member asks. Never shown to anyone |
| Team members' names, WhatsApp numbers and roles | To know who is talking and what they're allowed to do |
| Messages sent to ChatMyStore and its replies | Recent chat history, so the assistant understands follow-ups |
| Product photos sent to create products | To write the product listing. The photos stay with WhatsApp and go to Shopify; we keep only a reference to them and the draft text |
| A log of actions (e.g. "price changed", "order shipped") | So owners can see who did what |
| Settings (alert times, quiet hours, couriers) | To work the way the team chose |
| Plan and usage counts | Billing and plan limits |
3. Shoppers' data (the merchant's customers)
ChatMyStore reads shoppers' data only to do what a team member asks:
- Cash-on-delivery confirmation: when a team member taps "Ask customer", we read the shopper's first name and phone number from the order's shipping address. We use them to build a ready-made WhatsApp message that the team member sends from their own WhatsApp. We do not save the name or phone number.
- Orders and products: order numbers, items, totals and payment status, to answer questions and send alerts. These alerts don't include shoppers' names, emails or phone numbers.
We never sell shoppers' data, never use it for marketing, and never message shoppers ourselves.
4. Suppliers
When a merchant saves a supplier, we store the supplier's name, WhatsApp number and notes. We use them only so the merchant can send restock orders. The merchant is responsible for having the supplier's permission.
5. Who we share data with
We share data only with the services ChatMyStore needs to work:
| Service | What it gets | Why |
|---|---|---|
| Shopify | Requests to read and change the store | The store lives there |
| Meta (WhatsApp Business Platform) | Messages between ChatMyStore and team members | Delivering messages |
| AI providers: DeepSeek (main) and Anthropic (backup, used when DeepSeek is unavailable) | The team member's message, recent chat history and the store data needed to answer | Understanding and answering requests |
| Railway (hosting) | Everything in section 2, stored on its servers in the United States | Running ChatMyStore |
Where the AI providers process data:
- DeepSeek stores and processes the data it receives in China. How DeepSeek handles that data is set by its own terms and privacy policy at deepseek.com.
- Anthropic processes data in the United States. How Anthropic handles it is set by its commercial terms and privacy policy at anthropic.com/legal.
Shoppers' names and phone numbers are never sent to the AI providers.
We don't sell data, and we don't share it with advertisers.
6. How long we keep data
- Chat history: only the most recent messages per person. Older messages are deleted automatically.
- Action history, copies of alerts we sent, and finished product drafts: deleted automatically after 90 days.
- Expired confirm buttons and invite codes: deleted a day after they expire.
- Team, suppliers, restock history and settings: while the store uses ChatMyStore.
- Shoppers' names and phone numbers: not stored at all.
- When a store uninstalls: we stop accessing the store straight away. 48 hours later, Shopify asks us to delete the store's data, and we delete everything we hold for that store: team, chat history, suppliers, logs, settings and usage.
- Backups: deleted data can remain in backups for up to 31 days, until they expire.
7. Security
- All data is sent over encrypted connections (HTTPS/TLS).
- Our hosting provider, Railway, is SOC 2 Type II certified.
- Only the founder can access the servers and database, with two-step login.
- Roles inside ChatMyStore limit what each team member can see and do.
8. Your rights
Depending on where you live, you may have the right to see, correct, export or delete your data, and to object to how it's used.
- Merchants and team members: write to hello@chatmystore.com.
- Shoppers: contact the store you bought from. Shopify passes their requests on to us, and we act on them.
We reply within 30 days.
9. Changes
If we change this policy, we'll update the date at the top and tell store owners on WhatsApp before the change takes effect.
10. Contact
Atif Taskeen, trading as ChatMyStore, Pakistan. Email: hello@chatmystore.com