NoteConfirm

Privacy Policy

Last updated: October 7, 2026

This policy explains how Lunum Apps (“NoteConfirm”, “we”) handles data when you install or use NoteConfirm with your Shopify store.

1. Data we process

We may process store, product, order, customer, and configuration data needed to confirm orders over WhatsApp. This can include customer name, address, and phone number when present in an order, plus operational logs, connection status, and confirmation results.

2. How we use data

We use data to run automations, send merchant-requested messages, process replies, show results, and maintain service security and operation. We do not sell data or use it outside providing and improving NoteConfirm, except where required by law.

3. Connected providers

NoteConfirm depends on Shopify, NoteConfirm WhatsApp Unofficial API, and an external AI provider that acts as our sub-processor for managed AI. To classify a reply, we send that provider the sanitized reply text and language; the request does not include order data. The provider processes this data on our behalf under a data processing agreement and does not use it to train its models. Merchants must review templates, consent, and settings before enabling messages.

4. Retention and deletion

WhatsApp conversation content (message and reply text) is automatically deleted 30 days after creation. We keep the associated operational data (confirmation status, phone number, timestamps) while the store uses the service and as needed for security, reporting, support, or legal compliance. Request access, correction, or deletion at [email protected]. Requests may be subject to legal, security, and backup constraints.

When Shopify forwards a customer erasure request for your store, we delete the matching order confirmations, queued and sent messages, buyer replies, and WhatsApp contact records for those orders and that phone number; for a contact who opted out we keep only a minimal suppression marker so that person is not messaged again. Customer data access requests forwarded by Shopify are answered by email to the store contact, with that customer's data attached.

5. Deletion on cancellation

If a paid subscription is cancelled, all store data is deleted at the end of the current billing period. If a Starter trial is cancelled, data is deleted immediately. We keep only a minimal anonymized record (hashed store identifier, deletion date, reason, and the trial order and AI call counters) to prevent trial abuse; the store domain itself is not kept in clear in that record. You can reactivate a plan before the paid deletion date to keep your data. The 30-day conversation-content retention above still applies while the service is active; this deletion event is additional, not a replacement.

6. Security

We apply reasonable technical and operational controls to protect data. No connected service guarantees absolute security or uninterrupted availability.

7. Merchant responsibility

Merchants are responsible for a lawful basis and consent to contact customers, clear opt-out mechanisms, and compliance with applicable privacy, consumer protection, and messaging laws.

8. Changes and contact

We may update this policy by publishing a new update date. For privacy questions, contact [email protected].

WhatsApp is a trademark of Meta Platforms, Inc. NoteConfirm is not affiliated with or sponsored by WhatsApp or Meta.