Privacy policy

QuiqOrder provides WhatsApp commerce automation and online storefront tools for businesses. This policy covers our websites, dashboard, WhatsApp integration, automated agent, ordering, payment, and support services.

For customer conversations and orders, the business you contact determines why your data is processed and QuiqOrder processes it on that business’s behalf. QuiqOrder remains responsible for data used to operate, secure, and administer our own service.

• • Business account data, including names, business details, email addresses, settings, team access, and support communications.
• • WhatsApp connection data, including WhatsApp Business Account and phone-number identifiers, authorization credentials, webhook configuration, and connection status.
• • Customer conversation data, including messages, attachments, profile or channel identifiers, message status, and automation history.
• • Commerce data, including catalog items, carts, delivery details, orders, receipts, payment status, and transaction references. Payment card details are handled by the payment provider and are not stored by QuiqOrder.
• • Storefront and operational data, including domains, published content, inventory, business policies, and fulfillment configuration.
• • Technical and security data, including IP address, browser and device details, webhook events, authentication events, diagnostics, and audit records.

• • Connect and operate an authorized WhatsApp Business account.
• • Receive and send messages, automate replies, display products, manage carts, create orders, collect delivery information, and provide receipts and fulfillment updates.
• • Authenticate users, maintain account preferences, provide support, prevent fraud, and protect the service.
• • Process payments through our payment providers and maintain legally required transaction records.
• • Monitor reliability and improve the product using appropriately limited operational data.
• • Meet legal, regulatory, contractual, and platform-policy obligations.

QuiqOrder enables businesses to communicate with customers only after explicit customer opt-in.

Users can opt out of messages at any time.

QuiqOrder does not support unsolicited or bulk spam messaging.

We request only the permissions required for the features a business chooses to connect. WhatsApp business messaging permission is used to receive and send customer messages. WhatsApp business management permission is used for Embedded Signup, WhatsApp Business Account and phone-number setup, webhook subscription, phone registration, message-template management, and disconnection. Meta credentials are restricted to authorized services and are removed from the business account when the channel is disconnected.

We do not sell personal data. We disclose data only as needed to provide the service, follow instructions from the connected business, comply with law, or protect users and the platform.

• • Meta for WhatsApp messaging, account connection, and webhook delivery.
• • Cloud hosting, database, object-storage, security, monitoring, and communications providers.
• • Payment and fulfillment providers selected by the business or customer.
• • Professional advisers, authorities, or counterparties when legally required or during a properly safeguarded business transaction.

We require service providers to process data only for the contracted purpose and to apply appropriate confidentiality and security controls.

We use access controls, encrypted transport, encryption for sensitive stored credentials and deletion jobs, scoped tenant storage, webhook signature verification, authentication safeguards, audit logging, and restricted operational access. No security measure eliminates every risk, so we also monitor and respond to suspected incidents.

We keep data only for an operational, contractual, security, or legal purpose. Current technical defaults hard-delete message content after seven days, transient provider webhook events after 30 days, completed provider-cleanup jobs after 30 days, and deletion-request records and privacy-preserving tombstones after 400 days. Conversation summaries may remain while an account or customer relationship is active, without the expired message content.

A verified customer deletion removes the matched conversation, messages, attachments, carts, checkouts, automation state, and unpaid order data. Completed paid-order records may be anonymized rather than erased when limited transaction information must be retained for accounting, fraud prevention, disputes, or law. Backups age out under protected backup-retention schedules and are not restored for ordinary product use after a deletion.

A business administrator can open Dashboard → Settings → WhatsApp connection and choose Disconnect. Disconnecting stops future WhatsApp processing, cancels pending WhatsApp automation, removes locally stored WhatsApp credentials, and requests removal of QuiqOrder’s provider subscription. It does not delete the business’s QuiqOrder account, catalog, completed orders, or all historical business data.

A business administrator can permanently delete the QuiqOrder business account from Dashboard → Settings → Security → Delete account and confirm the account password. This removes the tenant account, connected credentials, customer conversations, catalog and tenant files, while queuing provider cleanup and retaining only legally necessary or privacy-preserving deletion evidence.

A WhatsApp customer can use our Data Deletion page, identify the published business storefront and the WhatsApp number used for the conversation, and verify the request using a one-time code delivered in that WhatsApp conversation. The page provides an opaque confirmation code for tracking. Requests can also be sent to our support address if the self-service path is unavailable.

Depending on where you live, you may request access, correction, portability, restriction, objection, or deletion. We verify identity before disclosing or deleting data. Use the Data Deletion page or contact hr@tryquiqorder.com. You may also complain to your local data-protection authority.

We may update this policy when our service or obligations change and will publish the revised date. Privacy and deletion questions can be sent to hr@tryquiqorder.com.