shield
Your Privacy Matters
Privacy Policy
We are committed to protecting your personal data and your customers' data. This policy explains exactly what we collect and why.
Last Updated: April 5, 2026 · Effective: April 5, 2026
info
1. Overview & Who We Are
Woo WA Plug is a WhatsApp automation platform for WooCommerce stores. It enables merchants to send automated WhatsApp notifications to their customers for order confirmations, shipping updates, and OTP verification.
This Privacy Policy applies to the Woo WA Plug web application, including all dashboard pages, APIs, and backend services hosted under this domain.
🔑 Key Principle
We collect only what is strictly necessary to provide the service. We do not sell your data. We do not share customer phone numbers with third parties other than the WhatsApp API required to deliver messages.
database
2. Data We Collect
Account Data:
- Username and hashed password for dashboard login
- Email address (if provided during registration)
Store Configuration:
- WooCommerce store URL, Consumer Key, and Consumer Secret (encrypted at rest)
- WhatsApp phone number linked to your business device
- Message templates you customize
Customer Data (from your WooCommerce store):
- Customer name and WhatsApp phone number — used solely to deliver order notifications
- Order ID and order status — used to trigger the correct message template
- This data is never stored permanently beyond what is needed in the notification logs
Notification Logs:
- Record of each message sent: recipient number, message content, send status, and timestamp
- Logs are retained for audit trail purposes and are only accessible by you
tune
3. How We Use Your Data
- To deliver the service: Sending WhatsApp messages to your customers on your behalf
- To persist your settings: Storing your WooCommerce credentials and WhatsApp device link so you don't need to re-enter them
- To maintain audit logs: Tracking which messages were sent, to whom, and their delivery status
- To authenticate you: Verifying your login on the dashboard
- To improve reliability: Monitoring errors to fix issues faster
We do not use your data for advertising, profiling, or any purpose beyond operating the service.
chat_bubble
4. WhatsApp API & Meta
Woo WA Plug uses the WhatsApp Business API (via third-party gateway providers) to deliver messages. By using this service, you agree to:
⚠️ Your Responsibility
You are responsible for ensuring you have valid consent from your customers to receive WhatsApp messages. Sending unsolicited messages may violate WhatsApp policies and local regulations.
Phone numbers and message content are transmitted to the WhatsApp API gateway solely to deliver messages. This data is not retained by the gateway beyond the delivery transaction.
storefront
5. WooCommerce Integration
Your WooCommerce API credentials (Consumer Key and Consumer Secret) are stored securely in our database to enable webhook-triggered automations. These credentials are:
- Used only to verify incoming order webhooks from your store
- Never shared with any third party
- Deletable at any time via the Store Sync dashboard
We recommend creating a dedicated API key with the minimum permissions required (Read/Write for Orders).
lock
6. Data Storage & Security
- All data is stored in a MySQL database on a secured server
- Passwords are hashed using modern algorithms — never stored in plain text
- API connections use HTTPS/TLS encryption in transit
- Database access is restricted to application-level credentials only
- Sessions are managed server-side with PHP session tokens
While we implement industry-standard security practices, no system is 100% immune. In case of a data breach, we will notify affected users promptly.
share
7. Data Sharing
We do not sell, rent, or trade your personal data. Data is only shared in the following circumstances:
- WhatsApp API Gateway: Phone numbers and message content are sent for delivery only
- Legal compliance: If required by law, court order, or governmental authority
- Service continuity: If the service is transferred to a new owner, users will be notified in advance
history
8. Data Retention
- Account data: Retained while your account is active. Deleted within 30 days of account deletion request.
- Notification logs: Retained for up to 90 days by default. You can clear logs from the Audit Logs page.
- WooCommerce credentials: Deleted immediately when you click "Disconnect Store"
- WhatsApp device: Cleared from our records when you click "Disconnect" in the WhatsApp Portal
verified_user
9. Your Rights
Depending on your location, you may have the following rights:
- Access: Request a copy of all data we hold about you
- Correction: Update inaccurate information via the dashboard
- Deletion: Request complete deletion of your account and data
- Portability: Export your notification logs via the Audit Logs page
- Objection: Opt out of any non-essential data processing
To exercise any of these rights, contact us at the address below. We respond within 30 days.
cookie
10. Cookies & Browser Storage
Woo WA Plug uses minimal browser storage:
- PHP Session Cookie: Required for authentication. Expires when you log out or close your browser.
- localStorage (non-sensitive): Stores your username display and WooCommerce settings as a performance cache. Never stores passwords or tokens.
- No tracking cookies: We do not use Google Analytics, Facebook Pixel, or any third-party tracking.
child_care
11. Children's Privacy
Woo WA Plug is a business tool intended for adults and business operators. We do not knowingly collect data from persons under 18 years of age. If you believe a minor has created an account, contact us immediately for removal.