Rastova WhatsApp & SMS Privacy Policy

1. Introduction

This Privacy Policy describes how Rastova ("we," "us," or "our") collects, uses, and protects data when you install and use the Rastova WhatsApp & SMS Shopify application (the "Service"), which enables merchants to send automated SMS and WhatsApp messages to their customers through triggers, campaigns, and templates.

2. Information We Collect

When you install and use Rastova WhatsApp & SMS, we collect information from merchants and customers through the Shopify GraphQL API and via our messaging infrastructure:

From Merchants: shop name, shop domain, email address, shop phone number, Shopify store information, subscription details, and usage statistics.

From Customers: customer name, email address, phone number (in E.164 format), and abandoned cart details.

WhatsApp Connection Data: WhatsApp connection identifier, WhatsApp phone number, WhatsApp Business Account ID (WABA ID), and connection display name.

Message Logs: recipient phone numbers, template names, message IDs, delivery statuses, timestamps, error messages, and charge amounts.

Campaign & Automation Records: template selections, language preferences, variable mappings, audience groups, scheduling data, trigger configurations, execution history, and inbound customer replies.

3. How We Use the Information

We use the collected data to:

Deliver SMS and WhatsApp notifications and personalized messages to customers.

Process and track message delivery across both SMS and WhatsApp channels.

Track abandoned cart conversion rates and campaign performance to help merchants understand results.

Enforce quotas, billing, and rate limits.

Debug and resolve technical issues.

Comply with legal obligations.

4. Sharing of Information

We do not sell your data or your customers' data to third parties for marketing purposes.

We provide customer phone numbers and message content to our third-party SMS provider and to our WhatsApp integration partner (Rasti by Rastova) and Meta's WhatsApp Business Platform solely for the purpose of delivering messages.

We may disclose data if required by law or to protect our rights.

5. Data Storage and Retention

All data is securely stored in our PostgreSQL database.

Message logs, campaign data, and automation records are retained for as long as your account is active and for a reasonable period thereafter for legal and business purposes.

Customers or merchants may request deletion of their data at any time by contacting us at info@rastova.com.

6. Data Security

We apply industry-standard security measures to protect all collected data from unauthorized access, disclosure, or misuse. This includes encrypted transmission, access controls, and secure infrastructure.

7. Your Rights

Merchants and customers may request access to, correction of, or deletion of their data at any time.

To exercise these rights, please contact us at info@rastova.com.

8. Merchant Responsibilities

As a merchant using the Service, you are responsible for:

Complying with all applicable data protection and privacy laws (e.g., GDPR, CCPA).

Obtaining proper consent from recipients before sending SMS or WhatsApp messages.

Providing your customers with accurate privacy disclosures about how their data is used.

Honoring opt-out and unsubscribe requests.

9. Compliance

We comply with Shopify's data protection requirements, Meta's WhatsApp Business Platform policies, and relevant privacy laws.

10. Contact

For questions or requests related to this Privacy Policy, please contact us at info@rastova.com.