Privacy policy

Last updated: 2026-10-20

Overview

CommercePing ("we", "us", "our") sends WhatsApp messages on behalf of your store across the order lifecycle. This policy explains what data we process, why we process it, and your rights.

CommercePing is operated by Ramiz Raja, sole proprietor, trading as Ping Apps Lab. Contact: support@commerceping.com.

Data we handle

We process the data necessary to send order-lifecycle WhatsApp messages, manage your account, and operate the service:

  • Store order data: Customer name, phone number, order details (items, totals, status) — received from your WooCommerce or Shopify store when an order event occurs.
  • WhatsApp reply content: Customer replies to confirmation messages (Confirm / Request cancellation / Need help) — received via Meta webhooks.
  • Account email: Your login/contact email for subscription management and notifications.
  • Per-store connection credentials and tokens: WhatsApp/Meta access tokens and store platform (WooCommerce/Shopify) API credentials, encrypted at rest.

We do not collect payment details (handled by Shopify or the WooCommerce billing provider). All connection credentials and tokens are encrypted at rest. Operational logs and security data are also retained for abuse prevention and debugging.

Purpose and legal basis

  • Send order messages: To deliver order received, COD confirmation, shipped, and delivered WhatsApp messages (contractual necessity).
  • Process replies: To relay customer responses (confirmation, cancellation request, need help) back to your store (contractual necessity).
  • Account management: To authenticate you, manage your subscription, and send service notifications (contractual necessity).
  • Security and abuse prevention: To detect fraud, protect the platform, and comply with Meta platform policies (legitimate interest).

Third-party processors

We use the following processors to provide the service. Each processes data on our behalf under contractual data processing terms:

  • Cloudflare: Hosting (Workers, D1 database, Queues, static assets), TLS termination, DDoS protection. Data stored in Cloudflare's global network.
  • Meta (WhatsApp): WhatsApp Business API for message delivery and webhook reception. Meta receives message content and recipient phone numbers per their platform terms.
  • E-commerce platform (WooCommerce or Shopify): Source of order events and destination for reply metadata. Data flows via your store's webhook/REST API endpoints.
  • Email provider: Transactional email for account notifications, alerts, and support communications (provider to be confirmed; will be a reputable transactional email service).

No selling of data

We do not sell, rent, or trade your data or your customers' data to any third party. Data is used solely to provide the CommercePing service.

Retention

  • Order and message data: retained for the duration of your active subscription plus 90 days after cancellation, then deleted.
  • Account email: retained while your account exists; deleted on request after cancellation.
  • Logs and security data: retained up to 12 months for abuse prevention and debugging.

Your rights

You may request:

  • Access to the data we hold about you.
  • Correction of inaccurate data.
  • Deletion of your data (subject to retention requirements above).
  • Export of your data in a portable format.

To exercise any of these rights, email support@commerceping.com from your account email. We will respond within 30 days.

Security

  • All data in transit encrypted via TLS 1.2+.
  • Store credentials and WhatsApp tokens encrypted at rest in Cloudflare D1.
  • Least-privilege access; no human access to merchant data except for support investigations you authorize.

Changes to this policy

We will post updates on this page with a new "Last updated" date. Material changes will be emailed to your account email at least 30 days before taking effect.

Contact

CommercePing is operated by Ramiz Raja, sole proprietor, trading as Ping Apps Lab.

Email: support@commerceping.com