Privacy Policy
Last updated: August 25, 2026
Information we process
Depending on the features enabled by a merchant, we process:
- Merchant account details, store domain, and installation information.
- Shopify product, customer, order, fulfillment, and checkout data needed for the configured workflows.
- WhatsApp phone identifiers, customer phone numbers, message content, delivery statuses, and consent records.
- Encrypted Shopify and Meta credentials, billing status, usage, support, and audit records.
How we use information
We use information to authenticate merchants, connect their Shopify store, retrieve live catalog and order data, route messages to the correct store, provide chatbot and inbox features, send approved WhatsApp messages, enforce consent and usage controls, provide support, and meet Shopify and Meta platform requirements.
Sharing and providers
We send relevant information to Shopify and Meta only to provide the feature requested by the merchant. Shopify remains responsible for Shopify checkout and payment processing. Meta delivers WhatsApp messages and controls its own platform policies, pricing, and retention practices. If a merchant enables AI features, limited store facts and conversation context can be sent to Anthropic or the configured fallback model provider to generate the requested response. Squadkin does not use Shopify merchant or customer data to train a shared model. We do not sell customer personal information.
Security and retention
Provider credentials are encrypted at rest with versioned keys, access is scoped by connected store, and routine logs exclude tokens, message bodies, raw webhook payloads, and customer contact details. Routine message content is automatically minimized after the configured retention period (365 days by default), subject to shorter deletion requests or a legal obligation to retain specific records. Merchants may request deletion as described on our data deletion page.
Merchant responsibility
The merchant controls the customer relationship and must obtain the required permissions and WhatsApp opt-ins before sending business-initiated messages. Merchants should not submit sensitive information that is not needed for the service.
Your choices
Subject to applicable law, merchants and customers may request access, correction, export, restriction, objection, or deletion. Marketing consent can be withdrawn at any time, including by sending STOP. Service and order-update consent are recorded separately from marketing consent.
Contact
Privacy questions and requests should be sent to support@squadkin.com.