Data Processing Addendum

Roles

For your customers' order data, you (the merchant) are the controller and CommercePing, a product by Ping Apps Lab, is your processor. We act only on your instructions, which are the settings you choose in the app and the Terms.

Scope and purpose

We process your customers' name, phone number, and order details such as order number, items and total. We do this only to send the order-lifecycle WhatsApp messages and relay customer replies back to your store.

• We do not sell the data, use it for marketing, or build profiles from it.
• The shipping address is read live from your store when needed. We keep only a one-way hash of it, not the address itself.

Subprocessors

• Cloudflare: hosting, database and queues.
• Meta WhatsApp Cloud API: message delivery.
• Zoho Mail: transactional email to merchants.
• Your commerce platform (Shopify or WooCommerce): its APIs are the source of order data.

We will update this list on this page before adding a new subprocessor that handles customer data.

Security measures

See the security section of our Privacy policy. We keep an internal data loss prevention and backup policy, summarized there, and review it every quarter or after an incident.

Retention

Order and message data is kept while your subscription is active and for 90 days after cancellation, then deleted. See the Privacy policy for other data.

Deletion

Data is deleted automatically when you uninstall the app, through Shopify's shop/redact and customers/redact webhooks. You can also ask us to delete it by emailing [email protected].

Data subject requests

If a customer asks you for access, correction or deletion of their data, we help you respond. For Shopify stores we handle the customers/data_request webhook. Otherwise email us and we will help.

Personal data breach

If we become aware of a personal data breach affecting your data, we notify you without undue delay and in any case within 72 hours. The notice says what happened, which data is affected, and what we are doing about it.

International transfers

Processing happens on the Cloudflare global network, so data may be handled in several countries. Meta handles message delivery under its own terms.

Changes and contact

We may update this addendum and will change the date above when we do. Material changes are emailed to your account email. Questions: [email protected].