Privacy Policy

Last updated: February 16, 2026

DataWing ("we", "our", "us") is a Chrome extension that connects Shopify stores to WhatsApp Web, allowing merchants to view customer information while chatting. This Privacy Policy explains how we handle data.

1. Data We Access

When you install DataWing on your Shopify store, we request access to:

• Customer data: Name, email, phone number, and address
• Order data: Order history, payment status, fulfillment status, and line items

This data is accessed through the Shopify Admin API using your store's authorized access token.

2. How We Use Data

We use customer and order data solely to:

• Display customer profiles in the DataWing sidebar on WhatsApp Web
• Match WhatsApp phone numbers to your Shopify customers
• Show relevant order history for customer service purposes

3. Data Storage

• Access tokens are stored securely on our server (Vercel with encrypted environment variables) to authenticate API requests on your behalf.
• Customer data is fetched in real-time from Shopify and temporarily cached in your browser's local storage for performance. We do not permanently store customer data on our servers.
• No data is shared with third parties, used for advertising, or sold.

4. Data Protection

• All communication between the extension, our server, and Shopify uses HTTPS encryption.
• Access tokens are stored with encryption at rest.
• We follow the principle of least privilege. We only request the minimum API scopes needed (read_customers, read_orders).

5. Data Retention

When you uninstall DataWing from your Shopify store, your access token is removed from our server. Cached data in the browser is cleared when you disconnect or uninstall the Chrome extension.

6. Your Rights

You can:

• Disconnect your store at any time via the extension popup
• Uninstall the app from your Shopify admin to revoke all access
• Contact us to request deletion of any stored data

7. Contact

If you have questions about this Privacy Policy, contact us at: support@datawing.ai