Privacy policy

Vouchship (“Vouchship”, “we”, “us”) is a Shopify application that helps merchants confirm cash-on-delivery orders over WhatsApp. This policy explains what data we handle, why, and the rights you have. We have written it in plain language on purpose.

It covers three groups of people: merchants who install Vouchship, shoppers who receive messages from a store using Vouchship, and visitors to vouchship.com.

1. The short version

• We process the minimum order data needed to confirm COD orders: order number, order value, and the shopper’s name and phone number.
• Phone numbers and access tokens are encrypted at rest. We never sell data. We never use shopper data for advertising or profiling.
• Order data is deleted or anonymised within 90 days. Uninstalling the app stops all messaging immediately and schedules deletion of the store’s data.
• Messages are sent from the merchant’s own WhatsApp Business Account, and the merchant pays Meta directly for them. We never message a shopper for our own purposes.
• Our website uses no tracking cookies.

2. Data we process for merchants

When you install Vouchship on your Shopify store, we collect and store:

• Account data: your store domain, the email address you sign up with, your plan, and your app settings.
• Connection credentials: the Shopify access token for your store and your WhatsApp Business Account identifiers and access token. These are encrypted at rest.
• Billing status: your subscription is charged by Shopify through Shopify Billing. We never see or store your card or bank details.
• Support communication: emails you send to hello@vouchship.com.

We use this data to run the service you installed, to bill you through Shopify, and to help you when something breaks. That is all.

3. Data we process about shoppers

When a cash-on-delivery order is placed on a store that uses Vouchship, Shopify sends us a webhook containing order details. From it we process:

• Order number, order value, and ordered items (to compose the confirmation message)
• The shopper’s first name and phone number (to send the WhatsApp message)
• The shopper’s reply (confirm, cancel, pay, or silence) and message delivery status

We act as a processor (or “service provider”) of this data on behalf of the merchant, who is the controller. We use it for exactly one purpose: confirming the order the shopper placed. We do not use shopper data for marketing, advertising, profiling, or model training, and we never sell it.

Retention: shopper-level order data is deleted or irreversibly anonymised within 90 days of the order. Aggregated statistics that contain no personal data (for example, “orders confirmed this month”) are kept for the merchant’s dashboard.

Opt-out: a shopper who replies STOP to any message is added to a do-not-message list for that store and will not be messaged by that store through Vouchship again.

4. If you received a WhatsApp message from a store using Vouchship

The message came from the store you ordered from, sent through their own WhatsApp Business Account, because you placed a cash-on-delivery order with them. Vouchship provides the software; the store decided to send it. You can reply STOP to opt out of further messages from that store, and you can contact the store directly, or us at hello@vouchship.com, to exercise your data rights. We will pass any request we receive to the relevant merchant and support them in honouring it.

5. Website visitors

vouchship.com is a static site. We use cookieless, aggregate analytics (page views, country, referrer) that identify no individual. If you submit your email in the early-access form, we store that email and use it only to contact you about Vouchship’s availability. Unsubscribe is one click or one reply.

6. Who we share data with (subprocessors)

We share data only with the services required to operate Vouchship:

• Shopify (order webhooks, billing, order tags)
• Meta Platforms (WhatsApp Business Platform, to deliver messages from the merchant’s own account)
• MongoDB Atlas (encrypted database hosting)
• Cloudflare (website and network infrastructure)
• Our server hosting provider (application servers)

Each receives only what its function requires. We do not share, rent, or sell personal data to anyone else. We may disclose data if the law genuinely requires it, and we will tell the affected merchant unless legally forbidden from doing so.

7. Security

Access tokens, WhatsApp credentials, and shopper phone numbers are encrypted at rest (AES-256-GCM). All data moves over TLS. Access to production systems is restricted and logged. Phone numbers and names are excluded from application logs by design. No system is perfectly secure, but minimising what we store, encrypting what remains, and deleting it on schedule is the core of how Vouchship is built.

8. International transfers

Vouchship serves merchants globally. Data is stored on infrastructure that may be located outside your country. Where laws such as the EU/UK GDPR apply, transfers rely on recognised safeguards such as standard contractual clauses provided by our subprocessors.

9. Your rights

Depending on where you live (including under the EU/UK GDPR, India’s DPDP Act 2023, and the California CCPA/CPRA), you may have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict its processing, and to complain to a supervisory authority.

• Merchants: email hello@vouchship.com from your registered address, or simply uninstall the app to trigger deletion.
• Shoppers: contact the store you ordered from (the data controller) or email us and we will assist.

We answer verified requests within 30 days. We honour Shopify’s mandatory data-request and redaction webhooks automatically.

10. Children

Vouchship is a business tool and is not directed at children under 16. We do not knowingly collect children’s data; if you believe a store has used Vouchship to message a child, contact us and we will act.

11. Changes

If this policy changes in a meaningful way, we will update the date above and notify merchants by email or in-app notice before the change takes effect.

12. Contact

Vouchship (operating from India) hello@vouchship.com