We prioritize transparency, security, and confidentiality. This policy outlines how ConfirmIt processes
merchant and buyer data to deliver pre-shipment verification while strictly complying with global privacy
standards.
📅 Last Updated: August 31, 2026🛡️ Data Protection Practices🔒 Transparent Governance
Encrypted Data Pipeline
TLS 1.3 & AES-256 Secure
🔒
Merchant Data Isolated
01
1. Introduction
ConfirmIt Inc. ("ConfirmIt", "we", "us", or "our") operates the automated pre-shipment Cash on Delivery
(COD) order confirmation platform and API suite. We provide e-commerce merchants ("Merchants") with
automated WhatsApp verification, buyer intent analytics, address validation, and logistics integrations.
This Privacy Policy explains our practices regarding the collection, storage, processing, transfer, and
protection of personal information when Merchants connect their stores (e.g. via Shopify, WooCommerce, or
custom API endpoints) and when end-customers ("Buyers") interact with our automated WhatsApp confirmation
flows.
📌 Key Compliance Summary
ConfirmIt acts primarily as a Data Processor on behalf of our Merchants (the Data
Controllers). We process Buyer phone numbers, delivery addresses, and order payloads solely to deliver
verification services and prevent RTO fraud.
02
2. Information We Collect
To perform real-time verification and supply RTO risk scoring, ConfirmIt collects two main categories of
information:
Account Information
Full name, business email address, phone number, company name, store URL, and account credentials.
Billing & Store Config
Payment gateway tokens, invoice addresses, subscription tier, API keys, and webhook configuration.
Customer & Delivery Data
Buyer phone number (WhatsApp enabled), recipient name, shipping address, city, state, postal code, and
IP address.
Order Payloads & Telemetry
Order ID, total value, item breakdown, WhatsApp button responses (Confirmed/Cancelled), and delivery
logs.
03
3. How We Use Information
We process data strictly for business and operational purposes required to render our platform
capabilities:
Executing WhatsApp Verification: Dispatching automated 1-tap confirmation or
cancellation requests directly to the Buyer’s WhatsApp phone number upon checkout.
Automating Order Status Updates: Tagging, updating, or holding orders inside the
Merchant's e-commerce backend (Shopify / WooCommerce / 3PL API) based on Buyer responses.
Calculating RTO & Fraud Risk Scores: Analyzing address completeness, phone
validity, past return history, and velocity patterns to alert Merchants of potential non-genuine
orders.
Platform Analytics & Service Maintenance: Monitoring system uptime, message
throughput, delivery performance, and resolving infrastructure errors.
⚠️ Strict Data Monetization Ban
ConfirmIt never sells, rents, monetizes, or trades Merchant customer lists or Buyer
phone numbers to third-party ad networks or data brokers.
04
4. Cookies & Tracking Technologies
We use essential cookies and lightweight browser telemetry on our website and Merchant dashboard to ensure
smooth authentication and security:
Essential Session Cookies: Required to maintain secure Merchant login sessions,
prevent Cross-Site Request Forgery (CSRF), and save UI preferences.
Performance & Analytics Tags: Aggregated, non-personally identifiable
telemetry to measure page speed, feature adoption, and user navigation bottlenecks.
Merchants can control or disable non-essential cookies via browser settings. Note that disabling essential
cookies may impact dashboard access.
05
5. Data Security & Storage
ConfirmIt implements physical, technical, and administrative safeguards designed to protect sensitive
payload data against unauthorized access, loss, or disclosure:
Core Data Protection Principles
🔒
Encrypted Transit
All data in transit is protected using standard TLS 1.3 protocol
standards.
🛡️
Tenant Isolation
Logical database separation prevents cross-merchant data leakage.
🧹
Automated Purging
Buyer payloads automatically anonymized after verification completion.
Our platform infrastructure is hosted in secure, tier-3 cloud data centers operating redundant backups and
strict access logging controls.
06
6. Third-Party Services & Sub-Processors
To deliver our services seamlessly, ConfirmIt partners with verified third-party technology
sub-processors adhering to stringent privacy SLAs:
Meta Platforms Inc. (WhatsApp Business Cloud API): Used to route and deliver
official interactive WhatsApp verification messages to Buyers.
E-Commerce Integrations (Shopify, WooCommerce): API connectors used to read order
hooks and push verification status tags.
Cloud Infrastructure Providers (AWS / GCP): Cloud hosting, database clusters, and
secure serverless function execution.
07
7. User & Customer Rights
Merchants and Buyers hold specific data privacy rights regarding their stored records:
📄 Access & Portability
Request a copy of personal data stored on our systems in a structured
machine-readable format.
🗑️ Right to Erasure
Request deletion of Merchant account details or Buyer record history from
our active databases.
🚫 Messaging Opt-Out
Buyers can reply "STOP" to any WhatsApp verification message to instantly
opt out of automated dispatches.
08
8. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect technological advances, service updates, or
regulatory shifts. When changes are made, we will update the "Last Updated" timestamp below.
CURRENT VERSION EFFECTIVE:August 31, 2026
09
9. Contact Information & Data Officer
For questions, privacy inquiries, data deletion requests, or data protection rights execution, please
contact our Data Protection Office:
