Privacy Policy

Effective date: October 18, 2026

Pingmerce operates WhatsApp Restock Alert at https://pingmerce.com. This policy explains how we process personal data for Shopify merchants, their shoppers, and prospective customers. When we process shopper data on a merchant's instructions, the merchant is the controller and Pingmerce acts as its processor or service provider. We act as controller for account, security, support, and legal-compliance data we manage for our own operations.

Data we process

• Shop domains, Shopify installation sessions, merchant account context, and app settings.
• Encrypted Twilio or Meta messaging-provider credentials supplied by merchants.
• Shopper phone numbers, consent timestamps, product and variant identifiers, notification status, delivery attempts, and timestamps.
• Security and access audit records that identify the shop, authorized actor, action, time, and record count without storing raw phone numbers.
• Support and privacy-request information that merchants or shoppers provide to us.

We do not intentionally collect shopper names, addresses, payment data, or order history.

Shopify storage and transition

The Shopify-storage version keeps restock requests, encrypted phone numbers, consent records, delivery jobs, and encrypted privacy responses in private, app-managed metaobjects within the merchant's Shopify account. Authorized merchants can view and manage these records through the app. They are not published to the storefront. Our application still accesses and processes this data in memory to provide the service and transmit requested alerts.

Pingmerce's database retains installation sessions, merchant settings, encrypted provider credentials, aggregate usage and security events, and shop-level processing locks. Legacy customer records from the previous storage model may remain until migration, reconciliation, separately authorized deletion and recovery-history expiry have been verified. Until then, we do not claim that our database contains no customer information.

Purposes and legal instructions

We process data only to collect an expressly requested restock alert, send a one-time notification when inventory returns, manage subscribers, prevent abuse, troubleshoot delivery, provide analytics to the merchant, satisfy privacy requests, secure the service, and calculate plan usage. We do not use shopper data for advertising, unrelated marketing, profiling, or automated decisions with legal or similarly significant effects.

Consent and choices

The storefront widget requires an affirmative checkbox before a phone number is accepted, and the server records the consent time. Shoppers can withdraw a pending request or request access/deletion through the relevant merchant or by contacting ghasankececi@gmail.com. Merchants can delete subscriptions in the app and can respond to Shopify privacy requests through the Privacy requests page.

Sharing and subprocessors

We share a phone number and approved notification content only with the merchant-selected provider, Twilio or Meta WhatsApp Cloud API, to deliver the requested notification. Shopify processes installation, authentication, billing, webhook data, and the merchant's private customer records. Cloudflare Workers processes request data in memory; D1 stores merchant configuration, installation and aggregate operational data, plus any legacy data still subject to the transition described above. These providers process data only as necessary to operate and secure the service. We do not sell, rent, or share personal data for cross-context behavioral advertising.

International transfers

Shopify, the selected messaging provider, and infrastructure providers can process data in countries outside the shopper's location. We require applicable contractual and technical safeguards from providers and support merchants' lawful transfer requirements as described in our Data Processing Addendum.

Retention and deletion

Restock subscription records are retained for no longer than 365days from collection, regardless of status, and can be deleted earlier when no longer needed. Encrypted privacy-response files are retained for no longer than 90 days. Access audit records are normally retained for 365 days. Encrypted D1 recovery history expires after seven days on our current Cloudflare plan. Verified customer-redaction requests delete matching accessible Shopify records. Uninstallation revokes application access and stops further notifications; Shopify-held records and backups follow Shopify's applicable lifecycle. Merchants should delete unwanted records before uninstalling and can contact us for assistance. We cannot promise post-uninstall access to Shopify data.

Security

Shopper phone numbers, prepared privacy responses, and messaging credentials are encrypted at the application layer with AES-256-GCM using separated keys. Production connections require HTTPS and database TLS. Production storage and backups are encrypted and access/export actions are audited. Our access policy requires least-privilege staff access, MFA, and separation of test and production data. See our Security page for more information.

Data rights and requests

Depending on applicable law, individuals can request access, correction, deletion, restriction, portability, or objection. Submit requests through the relevant merchant or email ghasankececi@gmail.com. We can request information needed to verify and route the request. Shopify's mandatory privacy webhooks are also supported.

Security reports and complaints

Report suspected security issues to ghasankececi@gmail.com. Privacy questions and complaints can be sent to ghasankececi@gmail.com. Individuals can also contact their applicable data-protection authority.

Merchant agreement and updates

Our Data Processing Addendum applies when we process personal data on a merchant's behalf. We may update this policy when the service or legal requirements change and will publish the new effective date on this page.