How WhatsCommerce collects, uses, and protects information when a business and its customers talk to each other over WhatsApp.
WhatsCommerce is a platform that lets businesses ("Business Customers,") sell products, manage customer conversations, and automate support over WhatsApp. This policy explains what happens to information belonging to a Business Customer's own end customers ("you") when they message a WhatsCommerce-powered WhatsApp number, and what happens to a Business Customer's own account information.
WhatsCommerce acts as a data processor for messages and order data handled on behalf of a Business Customer, and as a data controller for the Business Customer accounts and platform usage data described below.
| Category | Examples |
|---|---|
| WhatsApp profile | Phone number, WhatsApp display name |
| Conversation content | Text messages, images, documents, and voice notes sent to a Business Customer's number |
| Commerce activity | Products browsed, cart contents, orders placed, delivery address, payment status |
| Consent status | Opt-in/opt-out state, recorded when you message in, reply STOP, or re-subscribe |
WhatsApp's Business Platform does not give us access to your profile photo or "About" status text — we only ever receive your display name, exactly as WhatsApp sends it to any business you message.
We do not sell message content, contact lists, or order history to third parties, and we do not use your WhatsApp conversations to train third-party advertising products.
WhatsCommerce relies on the following processors to operate. Each receives only what it needs to perform its function:
| Provider | Purpose | What it receives |
|---|---|---|
| Meta (WhatsApp Business Platform) | Message transport | Message content, phone number, delivery status |
| Google (Gemini API) | AI-generated replies, where enabled | The current conversation and relevant catalog/order context — never your full message history beyond what's needed to answer |
| Razorpay | Payment collection | Order amount, order reference — never your raw card or bank details, which go directly to Razorpay |
| Shiprocket | Order fulfillment | Delivery name, address, phone number, order contents |
| Google (Sign in with Google) | Business Customer login, optional | Name and email of the person signing in |
Each of these providers maintains its own privacy policy governing how it independently handles the data it processes for us.
Conversation and order data is retained for as long as the Business Customer's account is active, so that order history, support context, and delivery tracking remain available to both the business and you. A Business Customer may request deletion of a specific customer's data on your behalf at any time (see Section 7). Encrypted WhatsApp Business Account credentials are deleted immediately if a Business Customer disconnects their number.
Opting out is always one message away. Reply STOP to any WhatsApp conversation to withdraw consent to future messages from that business at any time; reply START to resume.
To request a copy or deletion of your data, contact the Business Customer you spoke with directly, or reach us using the details in Section 11 and we will coordinate with them on your behalf.
Business Customers can export, correct, or delete the contact and order records in their own workspace at any time from their dashboard.
No method of transmission or storage is completely secure; we work to protect your information but cannot guarantee absolute security.
WhatsCommerce is intended for use by adults purchasing from or operating a business account, consistent with WhatsApp's own minimum age requirements. We do not knowingly collect data from children under 13, and will delete any such data we become aware of.
We'll update the "Effective" date at the top of this page whenever this policy changes, and post material changes visibly ahead of them taking effect. Continued use of WhatsCommerce, or continuing to message a Business Customer, after a change takes effect means you accept the revised policy.
Questions about this policy, or a data access/deletion request:
privacy@whatsappcommerce.inconfirm inbox
Registered business address to be added here before this policy is relied on for compliance purposes.todo