Privacy Policy

01 Who we are

DataWing ("DataWing," "we," "us," or "our") provides a browser extension and related services that bring Shopify and WooCommerce customer context into WhatsApp Web and WhatsApp Business. This Privacy Policy applies to our website at datawing.ai, our Chrome extension, and any related services that link to this policy (together, the "Service").

By installing the extension or using the Service, you agree to the practices described here. If you do not agree, please do not use the Service.

02 Information we collect

We collect only what we need to make the Service work. This falls into the categories below.

Account & billing information

When you create an account or start a trial, we collect your name, email address, and authentication details. Payments are processed by our payment provider (Stripe); we do not store full card numbers on our servers. We receive only limited transaction details, such as the last four digits and billing status.

Store data (accessed via your authorization)

When you connect your store, you grant DataWing permission to read the data needed to display customer context. For Shopify, you authorize access through Shopify's official OAuth flow. For WooCommerce, you provide a read-only REST API key (Consumer Key & Secret) that you generate in your own WordPress admin. Depending on what you approve, this may include:

• Customer records: names, contact details, and lifetime value
• Orders: order numbers, line items, totals, and status
• Fulfillment & shipping: tracking numbers and delivery status
• Products and abandoned checkouts (including recovery checkout links)

We request read access to surface this information; we do not modify your store data. You can revoke this access at any time by removing the app from your Shopify admin, or by deleting the API key in your WooCommerce settings.

WhatsApp chat context

The extension runs locally in your browser on top of WhatsApp Web / WhatsApp Business. To match a conversation to the right customer, it reads identifiers visible in the open chat, such as the contact's phone number or name. DataWing does not store the content of your WhatsApp messages on our servers, and we are not affiliated with or endorsed by WhatsApp or Meta.

Voice-note transcription

If you use the voice-to-text feature, the audio from a customer's voice note is sent to our transcription provider to produce readable text. Audio is processed to generate the transcript and is not retained by us after processing.

Usage & diagnostic data

We collect limited technical information (such as extension version, browser type, feature usage events, and error logs) to keep the Service reliable and improve it. Where required, this is aggregated or pseudonymized.

03 Extension permissions

Chrome asks you to approve certain permissions when you install the extension. Here is what each one is for:

04 How we use information

We use the information we collect to:

• Display your store's customer context inside WhatsApp and power features like smart snippets, order links, abandoned-cart recovery, voice transcription, and inbox triage
• Create and manage your account, trial, and subscription
• Provide customer support and respond to your requests
• Maintain, secure, troubleshoot, and improve the Service
• Send service-related communications (and, with your consent where required, product updates)
• Comply with legal obligations and enforce our terms

We do not sell your personal information or your customers' data, and we do not use it for third-party advertising.

05 Legal basis for processing

Where the GDPR or similar laws apply, we process personal data on these bases: performance of a contract (to provide the Service you signed up for), legitimate interests (to secure and improve the Service), consent (where you have given it, such as optional communications), and legal obligation (to comply with applicable law).

If you are a Shopify or WooCommerce merchant using DataWing, you are typically the data controller for your customers' data, and DataWing acts as a data processor handling that data on your behalf and under your instructions.

06 How we share information

We share information only in the limited circumstances below, never for sale.

• Service providers (subprocessors) who help us run the Service, such as cloud hosting, payment processing (Stripe), and speech-to-text transcription. They may access data only to perform services for us and are bound by confidentiality and data-protection obligations.
• Legal & safety: when required by law, subpoena, or to protect the rights, property, or safety of DataWing, our users, or the public.
• Business transfers: if DataWing is involved in a merger, acquisition, or sale of assets, data may be transferred as part of that transaction, subject to this policy.

07 Storage & security

We protect your information with industry-standard safeguards. Data is encrypted in transit (TLS) and at rest, access is restricted to authorized personnel on a need-to-know basis, and we maintain monitoring and access controls around our systems.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a breach affecting your personal data, we will notify you and the relevant authorities as required by law.

08 Data retention

We retain personal information for as long as your account is active or as needed to provide the Service. When you disconnect your store or close your account, we delete or de-identify the associated data within a reasonable period, except where we must retain it to comply with legal obligations, resolve disputes, or enforce our agreements. Voice-note audio is not retained after transcription.

09 Your rights & choices

Depending on your location, you may have the right to access, correct, export, restrict, or delete your personal data, and to object to certain processing. You can:

• Disconnect your store at any time (remove the app from your Shopify admin, or delete the API key in your WooCommerce settings), which stops further data access
• Uninstall the extension, which removes locally stored data from your browser
• Request access or deletion of your data by contacting us (see Contact us)

We will respond to verified requests within the timeframe required by applicable law. You also have the right to lodge a complaint with your local data-protection authority.

10 International data transfers

DataWing operates online and may process and store data in countries other than where you live, including the United States. Where we transfer personal data across borders, we use appropriate safeguards (such as Standard Contractual Clauses) as required by applicable law.

11 Children's privacy

The Service is intended for businesses and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

12 Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you through the Service or by email. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

13 Contact us

If you have questions about this policy or how we handle your data, reach out:

• Email: privacy@datawing.ai
• Web: datawing.ai

We're happy to help with any privacy or data request.