Privacy Policy

1. Scope

This Privacy Policy explains how OBSYX collects, uses, stores, and protects merchant and customer-related information when merchants install and use the OBSYX Shopify application and its related WhatsApp, Messenger, and storefront automation features.

2. Information We Process

Depending on the features used by the merchant, OBSYX may process:

• Store information such as shop domain and configuration settings.
• Product and catalog information needed for recommendations and responses.
• Order information used for operational flows and reporting.
• Customer phone numbers when required to continue conversations, WhatsApp recovery flows, or customer support interactions.
• Messenger Page IDs, Page names, sender identifiers, webhook event metadata, and encrypted Page access tokens when the merchant connects Messenger.
• Widget interaction events needed to operate and improve the service.

3. How We Use Information

• Provide customer support and automated commerce interactions.
• Enable WhatsApp follow-up and cart recovery workflows requested by the merchant.
• Enable official Messenger webhook handling and inbound reply flows requested by the merchant.
• Generate product recommendations and conversational responses.
• Operate billing, authentication, security, and application reliability functions.
• Provide merchants with operational reporting related to app usage.

4. Minimum Necessary Processing

OBSYX is designed to process the minimum amount of personal information needed to provide its merchant-facing functionality. In its current public app distribution, OBSYX requests only the Shopify access scopes and customer-related information needed to support merchant-facing support, recommendation, reporting, storefront automation workflows, and official Messenger reply handling.

5. Data Sharing

OBSYX does not sell customer personal information. Information may be processed by infrastructure and communication providers acting on behalf of OBSYX solely to deliver the service, including hosting, analytics, messaging, and security providers.

6. Retention

OBSYX retains information only for as long as necessary to operate the service, support merchants, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods are reviewed periodically and data that is no longer needed is deleted or anonymized where appropriate.

7. Security

OBSYX uses reasonable administrative, technical, and organizational safeguards to protect personal information, including encryption in transit, restricted access, environment separation, and incident response procedures.

8. Merchant Responsibilities

Merchants are responsible for ensuring that their use of OBSYX complies with applicable law, including customer notice, consent, and communication requirements for WhatsApp, Messenger, support, and marketing-related messages.

9. Shopify Privacy Webhooks and Requests

OBSYX supports Shopify privacy compliance workflows, including data request and data deletion webhooks, and will process applicable requests in accordance with Shopify requirements and applicable law.

10. Contact

For privacy questions or requests related to OBSYX, contact the support or privacy contact listed in the Shopify App Store listing or provided by the merchant account owner.