Privacy policy
1. Who we are
Sigura: COD Confirmation ("Sigura", "we", "us") is a Shopify app operated by Niche Kit, Cairo, Egypt. It helps a store that takes Cash on Delivery (COD) orders confirm them with the customer over WhatsApp.
Sigura has two kinds of users. Merchants install the app on their Shopify store. Customers are the people who place orders in that store. This policy explains what we do with the data of both.
For the merchants' own account data we are the data controller. For the data of a store's customers we are only a processor: the merchant decides why and how that data is used, and we process it on the merchant's instructions. If you are a customer and want to exercise a privacy right, please contact the store you ordered from first (see section 9).
2. What data we process
We do not collect payment card data, customers' email addresses, browsing behaviour or advertising identifiers. We do not use analytics or tracking cookies.
We ask Shopify only for the permissions we need: reading and writing orders (to read the order, add tags, write the confirmation note, and cancel an order when the merchant has turned that option on).
| Whose data | What | Why |
|---|---|---|
| Merchant | Shop domain, the Shopify access token Shopify gives us, app settings, and the WhatsApp Cloud API credentials the merchant pastes in (phone number ID, business account ID, access token, optional app secret). | To run the app for that store and send messages through the merchant's own WhatsApp account. |
| Customer | Order number and total, the customer's phone number, first name (used only to fill the message and not stored), delivery country and city, the products and quantities of the order, and the payment method name (to recognise COD). | To send the order confirmation message and tag the order. |
| Customer | Replies to our messages (a Confirm or Cancel tap, free-text replies) with timestamps; the latest free-text message a customer sends is kept, encrypted, until the merchant marks it handled or the retention period ends, and what the customer types into the address form: building, floor, apartment, landmark or area, an optional alternate phone number, the contact preference (call before arrival, do not call, call someone else), and the confirmation that the address is correct. | To complete the confirmation, write the details back to the order, and let the merchant and courier reach the customer. |
| Customer | A map location, only if the merchant switches this optional step on. It is off by default. | To help locate the delivery address. |
| Both | Message delivery records: message type, WhatsApp message ID, status (sent, delivered, read, failed) and any error text. Short-lived technical logs. | To show the merchant what was sent, and to fix problems. |
3. How we use it
We do not sell personal data. We do not use it for advertising, we do not build profiles that cross stores, and we never share one merchant's customers' data with another merchant.
- To send the confirmation messages the merchant has configured, collect the customer's answers, and update the Shopify order (tags, note and, if the merchant chose it, cancellation).
- To send reminders and follow-ups at the times the merchant set.
- To show the merchant the status of each order and message.
- To keep the service secure, fix faults and answer support requests.
4. Where the data comes from
Order data comes from the merchant's Shopify store. Replies and form answers come from the customer. Credentials come from the merchant.
5. Who we share it with
We use a small number of service providers (sub-processors). Each processes data only to provide its service to us, and the table below lists them. We may disclose data if the law or a valid legal request requires it, and we will tell the merchant unless the law forbids it. If we change sub-processors we will update this page before the change takes effect.
| Provider | What they do | Data involved |
|---|---|---|
| Shopify Inc. | Hosts the store and the app's embedded admin, sends us webhooks, and exchanges data through its API. | Order and shop data. |
| Meta Platforms (WhatsApp Business Platform, Cloud API) | Delivers the WhatsApp messages from the merchant's own WhatsApp Business account to the customer. Meta handles message content under its own terms and privacy policy. | Customer phone number, message content and delivery status. |
| Fly.io (Frankfurt, Germany) | Runs the application servers. | All data above, in encrypted form where noted in section 7. |
| a managed PostgreSQL database in the same region | Stores the data. | All data above, in encrypted form where noted in section 7. |
6. International transfers
Our servers are in Fly.io (Frankfurt, Germany). Merchants and customers are in many countries, so data is transferred across borders. Meta and Shopify operate their own global infrastructure. Where the law requires a transfer mechanism, we use the one set out in our Data Processing Agreement (/dpa).
7. Security
- Phone numbers, address details, map locations and WhatsApp credentials are encrypted in our database with AES-256-GCM before they are stored, in addition to encryption in transit (HTTPS/TLS).
- The encryption key is kept in the server's secret storage, not in the code or the database.
- Access to customer data is limited to the people who need it to run and support the app.
- We keep test and production data separate.
- We have a written incident response procedure and will notify affected merchants without undue delay after we confirm a breach affecting their data.
- No system is perfectly secure. If you believe your data is at risk, tell us at the address in section 11.
8. How long we keep it
- Order, reply and message records are deleted automatically after the retention period the merchant chooses in the app settings (default 90 days).
- When a merchant uninstalls the app, we delete the WhatsApp credentials, scheduled jobs and sessions immediately, and everything else when Shopify sends the shop erasure request (about 48 hours after uninstall).
- When Shopify tells us to erase a customer's data, we delete that customer's records.
- Encrypted backups, if any, are deleted on their normal schedule and are not used to restore deleted data.
9. Rights of customers and merchants
Depending on where you live (for example under the GDPR, Egypt's Personal Data Protection Law, or Saudi and UAE data protection laws), you may have the right to access, correct, delete, restrict or object to the processing of your personal data, and to receive a copy of it.
Customers: the store you ordered from decides how your data is used. Contact the store. We assist stores in answering these requests, we process the three Shopify privacy requests (data request, customer erasure, shop erasure), and on request we give the store a copy of the data we hold about a customer.
Merchants: contact us at the address in section 11 for access, correction, export or deletion of your account data.
Customers can stop WhatsApp messages from the store at any time by telling the store or by blocking the business number in WhatsApp.
10. Cookies, children and changes
The embedded app uses the session tokens Shopify provides and does not set advertising or analytics cookies.
The service is for businesses. It is not directed at children and we do not knowingly process children's data except as part of an order placed through a store.
We may update this policy. We will change the date at the top and, for material changes, notify merchants in the app or by email.
11. Contact
Niche Kit, Cairo, Egypt. Email: support@nichekit.app.