1. Scope
This Privacy Policy explains how ConfirmFlow processes personal data when merchants use our COD operations platform, WhatsApp automation, ecommerce integrations, courier booking, shipment tracking, payment reconciliation, inventory, reporting and related support services.
2. Information we process
- Merchant and account data: name, business details, email, phone number, account roles, subscription and support information.
- Store and integration data: store domain, platform identifiers, access credentials/tokens and configuration required to connect Shopify, WooCommerce, Daraz, couriers and messaging providers.
- Order and customer data: customer name, phone number, delivery address, city, ordered products, amount, payment status, order status and related notes supplied by the merchant or connected store.
- Shipment and financial operations data: courier, tracking number, delivery events, booking responses, courier charges, COD recovery and reconciliation records.
- Communications data: WhatsApp message content, customer replies, message identifiers and sent, delivered or read status needed to provide merchant-requested automation and support.
- Technical data: IP address, browser/session information, timestamps, error logs and security events.
3. Why we use the data
We process the minimum information reasonably required to import and manage orders, confirm or cancel orders, book and track shipments, send merchant-configured transactional messages, operate shared support inboxes, reconcile courier payments, prevent fraud, secure accounts, provide support and maintain service reliability.
4. Merchant responsibilities and customer consent
Merchants control the customer information they connect to ConfirmFlow and are responsible for having a valid lawful basis, providing required notices and obtaining any consent or opt-in required for WhatsApp or other communications. ConfirmFlow must not be used for spam, unlawful marketing or deceptive messaging.
5. Sharing and service providers
We share only the information necessary to perform the service with the merchant's selected ecommerce platform, courier, Meta/WhatsApp or other messaging provider, hosting infrastructure, team inbox and technical service providers. We may also disclose information where required by law, to protect users and the service, or during a lawful business transaction. We do not sell merchant or customer personal data.
6. Data retention
Operational data is retained while a merchant account is active and for as long as reasonably needed to provide reports, resolve disputes, secure the platform and meet legal or accounting obligations. After a verified deletion request or account closure, personal data that is no longer required is deleted or anonymized from active systems within 30 days. Limited residual copies may remain in protected backup rotation for up to 90 days before expiry, unless longer retention is legally required.
7. Security
We use HTTPS for data in transit, access controls, account authentication, webhook validation, restricted credential handling, monitoring and other reasonable technical and organizational safeguards. No internet service can guarantee absolute security, and merchants must keep their credentials confidential and promptly report suspected misuse.
8. Access, correction and deletion
Merchants can update operational data through the portal and may request access, correction, export or deletion. Customers should normally contact the merchant that collected their order data; they may also submit a request through our Data Deletion page. We verify requests before acting to prevent unauthorized disclosure or deletion.
9. International providers
Some connected platforms and infrastructure providers may process information outside Pakistan. Where applicable, data is transferred only as needed to provide the requested service and subject to provider terms and appropriate safeguards.
10. Policy updates
We may update this policy when our services or legal obligations change. The current version and effective date will remain available on this page.
11. Contact
Privacy questions can be sent to info@solutioners.com.pk or to Solutioners Consulting (SMC-Private) Limited at Top Floor 109-West, Sardar Begum Plaza, Jinnah Avenue, Blue Area, Islamabad, Pakistan.