Privacy policy

Confirmo (“we”) provides a service to store owners (“merchants”). For a store's customer data, the merchant is the owner and controller of that data; we process it on the merchant's behalf only to provide the service.

Merchant account data: name, mobile number, email if added, and a password stored as a one-way hash that no one can read.

Store data: name, country, currency, settings, products, and team members with their roles.

Store customers' data: name, phone number, address, order details, and the WhatsApp confirmation messages and the customer's replies.

Data from Meta when a merchant connects WhatsApp: the WhatsApp Business Account ID, phone number ID, display name, and an access token. The token is stored encrypted and is never shown to anyone.

Technical data: operational logs without personal data (no phone numbers or messages in logs), and the usage data needed for billing.

Contact form data: your name, WhatsApp number, store link and message, so we can reply to you.

To send confirmations and reminders from the merchant's number, understand customer replies, and update order status.

To track deliveries, compute ad reports (such as cost per delivered order), and send delivered orders to Meta when the merchant turns on the Conversions API.

For account security, abuse prevention, billing and support.

We don't sell data, and we never use one store's customer data for advertising or for any other store.

When a customer's reply isn't a clear button tap, we send only the reply text and the order details needed to Google Gemini to understand the intent (confirm, change, cancel, question). We send no more than necessary, and when the reading isn't certain the decision goes to the merchant for review.

Meta (WhatsApp Cloud API) to deliver messages, Google (Gemini) to understand replies, our hosting and infrastructure providers (such as Cloudflare), and the couriers the merchant chooses to connect (such as Bosta).

Within a store, each team member sees only what their role allows, and customer phone numbers stay masked unless the merchant grants access.

We may disclose data when the law requires it.

Store customers' personal data (name, phone, address) is deleted 90 days after the order.

Merchant account and store data is kept while the account is active and deleted within 30 days of an account deletion request, except what the law requires us to keep (such as invoices).

Each store's data is isolated at the database level itself, WhatsApp tokens are encrypted (AES-256-GCM), all traffic is encrypted (HTTPS), and every team member has defined permissions.

You can ask for a copy of your data, to correct it, or to delete it. If you're a customer of a store that uses Confirmo, contact the store first since it owns your data, or contact us and we'll pass your request on.

Detailed deletion instructions are on the “Data deletion” page.

If we change this policy we'll update the date above, and for significant changes we'll notify merchants in the dashboard.