Privacy Policy

Effective date: 24 October 2026

Confirmly ("we", "us") is a product of New Suhail Garments, Shop 12-D, Sohail Garments, Rang Mahal, Lahore 54000, Pakistan. Confirmly is a Shopify app that sends WhatsApp messages to a store's customers about their orders. This policy explains what data we handle, why, and what rights you have.

Who this policy covers

Merchants are store owners who install Confirmly. Customers are people who place orders in a merchant's store. For customer data, the merchant is the controller and Confirmly acts as the merchant's processor, handling data only on the merchant's instructions.

Data we collect

From the merchant's Shopify store:

• Store domain and the access token that Shopify gives us when the app is installed
• Order details needed to send the message: order number, order total, currency, items, payment method, and tracking number and carrier
• Customer first name and phone number

From WhatsApp:

• The customer's reply (Confirm or Cancel) and the delivery status of each message
• The merchant's WhatsApp Business account identifiers, which the merchant gives us during setup

We do not collect payment card details, passwords, or sensitive personal data.

How we use data

• To send order confirmations, reminders, shipping updates, and (only to customers who opted in) product announcements and catalog messages
• To tag orders in Shopify as confirmed, cancelled, or unconfirmed based on the customer's reply
• To show the merchant message statistics, and to operate, secure and fix the service

We do not sell personal data. We do not use it for advertising and we do not share it with data brokers.

Who we share data with

• Meta (WhatsApp Business Platform) to deliver messages
• Shopify to read orders and write order tags
• Infrastructure providers that host our database and servers (Supabase, DigitalOcean), under their own security and data-processing terms

We may disclose data if the law requires it.

Marketing messages and opt-out

Product and catalog messages are sent only to customers who have given consent. Customers can stop these messages at any time by replying STOP, and we honour that request.

Retention and deletion

We keep message records while the merchant uses Confirmly. If a merchant uninstalls the app, Shopify tells us 48 hours later, and we then delete that store's data. We also process Shopify's customer data requests: when a customer asks a store for their data to be erased, we delete the related message records, and we respond to data-access requests. Merchants and customers can also email us to ask for deletion.

Security

Data is sent over HTTPS, stored in a managed database with restricted access, and access tokens and secrets are kept out of public code. No online service is completely secure, but we take reasonable steps to protect data.

Your rights

Depending on where you live, you may have the right to access, correct, or delete your personal data, or to object to its use. Customers should first contact the store they ordered from. You can also contact us directly and we will help.

Children

Confirmly is a business tool and is not intended for children.

Changes

If we change this policy, we will update the date above. If a change is significant, we will tell merchants by email.

Contact

New Suhail Garments (Confirmly)
Shop 12-D, Sohail Garments, Rang Mahal, Lahore 54000, Pakistan
Email: hello@tryconfirmly.com