Privacy Policy · WhatPro

1. Who we are

WhatPro ("we", "us") is operated from Egypt and provides the WhatPro app for Shopify stores. For the personal data of your customers, the merchant (you) is the data controller and WhatPro acts as your data processor: we process that data only to deliver the service you configured.

For questions about this policy, contact us at info@whatpro.app.

2. Data we collect

From your Shopify store, only what the features you enable require:

Store details — shop domain, store name, contact email, country, currency, timezone and your plan.
Order data — order number, status, totals, payment method, line items, fulfilment and delivery status.
Customer data — name, phone number, email address, shipping address and order history, for the customers your messages are sent to.
Message data — the WhatsApp messages sent and received through your connected number, their delivery status, and any replies or button taps.
Account data — for Team Inbox users: name, email, phone, password hash and session records.
Technical data — IP address, browser type and error diagnostics, used to keep the service secure and working.

3. How we use it

We do not sell your data. We do not use your customers’ personal data to advertise to them, and we do not use it to train AI models.

To send the WhatsApp messages you configured (order confirmations, abandoned-cart reminders, review requests and similar automations).
To show you the results — delivery status, replies, conversations and reporting.
To operate, secure and support the service, including diagnosing errors.
To bill your subscription through Shopify.

4. WhatsApp and Meta

WhatPro runs on the official WhatsApp Business Platform (Cloud API) from Meta. When a message is sent, its content and the recipient’s phone number are transmitted to Meta so it can be delivered, and Meta processes that data under its own terms and privacy policy.

WhatsApp conversation fees are charged by Meta directly, not by WhatPro.

5. Who we share data with

We share data only with the service providers that make the product work:

Meta Platforms — WhatsApp message delivery.
Shopify — the platform your store runs on, and our billing provider.
Railway — application and database hosting (European Union region).
Cloudflare — content delivery, protection, and encrypted database backups.
Resend — transactional email (verification codes, alerts).
Sentry — error monitoring and diagnostics.

6. Where data is stored

Your data is hosted in the European Union (Amsterdam). Encrypted database backups are stored with Cloudflare in the EU and are automatically deleted after 30 days.

WhatsApp access tokens and connected platform credentials are encrypted at rest (AES-256-GCM). All traffic runs over HTTPS.

7. How long we keep it

While the app is installed, we keep your store and message data so the automations and reporting work.
When you uninstall, Shopify notifies us and we delete your store’s data — including messages, conversations and connected credentials — within 48 hours.
When a customer erasure request reaches us through Shopify, we delete that customer’s personal data and anonymise any aggregate records we keep for reporting.
Encrypted backups roll off automatically 30 days after they are taken.

8. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict processing, and to complain to a data protection authority.

If you are a shopper and want your data removed, the fastest route is to contact the store you bought from — they can request erasure through Shopify and it reaches us automatically. You can also email us at info@whatpro.app and we will act on it.

See our Data Deletion page for step-by-step instructions.

9. Security

Access tokens and platform credentials are encrypted at rest, all traffic is encrypted in transit, and access to production systems is limited to those who need it. No system is perfectly secure, but if a breach affects your data we will notify you without undue delay.

10. Cookies

The WhatPro app and dashboard use strictly necessary cookies to keep you signed in and to protect the service. We do not use advertising cookies or cross-site tracking.

11. Children

WhatPro is a business tool and is not directed at children. We do not knowingly collect data from anyone under 16.

12. Changes to this policy

If we make a material change, we will update the date at the top of this page and, where it affects you meaningfully, tell you inside the app or by email.

13. Contact

Questions, requests or complaints: info@whatpro.app.