Privacy Policy for WebPhone
Last Updated: July 28, 2025
WebPhone Team ("we," "us," or "our") is committed to protecting the privacy and security of our users and their customers. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our application (the "App") integrated with Shopify stores. By using the App, you agree to the terms of this Privacy Policy.
1. Information We Collect
We collect information to provide and improve our services. The types of information we may collect include:
a. Information Provided by Shopify Merchants
When you install or use our App on your Shopify store, we may collect:
- Store Information: Store name, domain, and contact details (e.g., email address).
- User Account Information: Information about the Shopify account holder, such as name and email address, provided through Shopify’s OAuth process.
- Customer Data: If applicable, customer data such as names, email addresses, phone numbers, or order details, as authorized by the merchant during app installation.
b. Automatically Collected Information
We may collect certain information automatically when you use the App, including:
- Usage Data: Information about how you interact with the App, such as features used, time spent, and navigation patterns.
- Device Information: Device type, operating system, IP address, and unique device identifiers.
- WebRTC and Notification Data: For features like calls or messaging, we collect signaling data (e.g., ICE candidates, SDP) and notification preferences to facilitate communication.
c. Push Notification Data
If you enable push notifications via Firebase Cloud Messaging (FCM), we collect:
- FCM Tokens: Unique tokens to send notifications to your device.
- Notification Interaction Data: Information about how you interact with notifications (e.g., whether you tap or dismiss them).
2. How We Use Your Information
We use the collected information to:
- Provide and maintain the App’s functionality, such as processing orders, enabling messaging, or facilitating WebRTC-based calls.
- Send push notifications about incoming calls, messages, or app updates, as configured by the user.
- Improve and personalize the App experience, including analyzing usage trends.
- Communicate with you, including responding to inquiries or providing support.
- Ensure the security of the App by detecting and preventing fraud or unauthorized access.
- Comply with legal obligations and Shopify’s requirements.
3. How We Share Your Information
We do not sell or rent your personal information. We may share information in the following circumstances:
- With Shopify: To integrate with Shopify’s platform and provide services (e.g., accessing store data via Shopify APIs).
- Service Providers: With trusted third-party providers (e.g., Firebase for notifications) that assist in operating the App, subject to strict confidentiality agreements.
- Legal Compliance: When required by law, such as in response to a court order or legal request.
- Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to users.
4. Data Storage and Security
We take reasonable measures to protect your information, including:
- Encryption: Data transmitted via WebRTC and Firebase is encrypted to ensure secure communication.
- Access Controls: Limiting access to personal data to authorized personnel only.
- Secure Storage: Storing data in secure databases with restricted access.
Data is stored on servers located in the United States, and we retain data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law.
5. Your Rights and Choices
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your data, subject to legal obligations.
- Opt-Out: Disable push notifications through your device settings or contact us to opt out of data collection where possible.
To exercise these rights, contact us at info@windowshopper.shop. Shopify merchants can manage customer data permissions via their Shopify admin panel.
6. Third-Party Services
The App integrates with third-party services, including:
- Firebase Cloud Messaging: For push notifications (see Google’s Privacy Policy: https://policies.google.com/privacy).
- Shopify APIs: To access store and customer data as authorized by the merchant.
These services have their own privacy policies, and we encourage you to review them.
7. Cookies and Tracking
The App does not use cookies directly but may use similar technologies (e.g., local storage) to store preferences or session data. You can manage these settings via your device or browser.
8. International Data Transfers
If you are located outside the United States, your data may be transferred to and processed in the United States. We ensure appropriate safeguards, such as Standard Contractual Clauses, for international data transfers.
9. Children’s Privacy
The App is not intended for use by individuals under 16 years of age. We do not knowingly collect personal information from children.
10. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of significant changes via email or through the App. The “Last Updated” date at the top indicates the latest version.
11. Contact Us
For questions or concerns about this Privacy Policy, please contact us at:
- Email: info@windowshopper.shop
- Address: WindowShopper, P.O. BOX 56063-00200, Nairobi, Kenya
By using WebPhone, you acknowledge that you have read and understood this Privacy Policy.