Privacy Policy · Konnectify

This Privacy Policy explains how Konnectify (operated by Goftech Solutions — “Konnectify”, “we”, “us”) collects, uses, shares and protects personal data when you use our platform, website and APIs (the “Service”).

Konnectify is a business-to-business SaaS that helps e-commerce merchants manage their stores — order management, courier/shipment booking, point of sale, a WhatsApp customer inbox, marketing analytics, expenses, purchase orders, reporting and staff management. We act in two distinct roles:

Data controller — for the account data of the merchants and staff who sign up to use Konnectify.
Data processor — for the store, order and end-customer (shopper) data we process on behalf of each merchant. The merchant is the controller of that data; we process it only on their instructions and to provide the Service.

1. Data we collect

A. Merchant & staff account data (we are the controller)

Account information: name, email, phone number, hashed password, organization details.
Billing information: subscription plan, invoices and payment records. Billing is processed manually/offline; we do not store full card numbers.
Integration credentials: encrypted API keys, access tokens and device sessions for the services you connect (Shopify, WooCommerce, couriers, WhatsApp, Meta). These are encrypted at rest and never shared.
Usage & device data: dashboard activity, log data, IP address, browser and operating system — used for security, diagnostics and improving the Service.

B. Store & customer data we process for you (we are the processor)

When you connect a Shopify or WooCommerce store, we receive and process the personal data of your customers (shoppers) contained in your orders, strictly to power the features you use:

Name — to address customers in order notifications and to print courier/shipping labels.
Email — stored as part of the order record and shown to you for order management and customer identification.
Phone number — to send WhatsApp order notifications on your behalf, to book couriers, and to maintain your customer records.
Shipping & billing address — to book shipments and fulfil orders.
Order details — line items, totals, status and related metadata for order management, your CRM and reporting.

We read orders created after a store is connected — we do not import historical order history. We do not use this customer data for our own purposes, and we never sell it.

2. How and why we use data

Provide the Service — operate your dashboard, sync orders, book shipments, run your POS and customer inbox.
Customer communication — send transactional WhatsApp order notifications (confirm/cancel/tracking) to shoppers on your behalf.
Store management & fulfilment — generate courier labels, manage orders and inventory, and maintain your customer/CRM records.
Account & billing — authenticate users, manage subscriptions, and send service notifications.
Security & improvement — protect the platform, prevent abuse and improve performance.
Legal compliance — meet our legal and regulatory obligations.

We do not sell personal data, and we do not use shopper data for advertising or for any purpose other than providing the Service to the merchant.

3. Shopify protected customer data

For merchants on Shopify, we comply with Shopify’s Protected Customer Data requirements. We request only the customer fields we need (name, email, phone, address), use them solely for the purposes described above, apply data minimisation, and honour Shopify’s mandatory privacy webhooks for customer and shop data erasure (see Data Deletion).

4. WhatsApp & Meta connections

If you connect WhatsApp, your number is linked either through the Meta WhatsApp Cloud API or by scanning a QR code (a device session). We use this connection only to send and receive messages for your account — primarily transactional order notifications and your customer inbox. Connection tokens/sessions are encrypted and can be revoked at any time. If you connect Meta (Facebook/Instagram) Ads for analytics, we request read-only permissions; those tokens are encrypted and revocable in your Meta Business settings at any time.

5. Service providers & sub-processors

We share data only with the providers needed to run the Service, under appropriate confidentiality and data-protection obligations:

Shopify & WooCommerce — the stores you connect (the source of order data).
Meta / WhatsApp — messaging and ads analytics for connected accounts.
Courier partners (e.g. PostEx, Leopards Courier) — to book and track the shipments you create.
Email / SMTP provider — to deliver account and notification emails.
Error-monitoring & cloud hosting providers — to operate and safeguard the platform.

We do not sell or rent personal data to third parties.

6. Data retention & deletion

We keep personal data only as long as needed to provide the Service or as required by law.
Customer (shopper) data — retention period: we retain a shopper’s personal data (name, email, phone, address and order details) only while the merchant’s store remains connected and the data is needed to provide the Service. We do not keep it beyond that connected relationship. It is erased when the store is uninstalled (Shopify shop/redact, processed ~48 hours after uninstall) or on a per-customer erasure request (Shopify customers/redact), and we never import historical orders created before the store was connected.
You can request deletion of your account and data at any time — see Data Deletion. Deletion is handled as a manual request by contacting us.
For Shopify merchants, when you uninstall the app we automatically erase the store’s data in response to Shopify’s shop/redact request, and we erase individual customers in response to Shopify’s customers/redact requests.
Limited records (e.g. invoices) may be retained where required for tax or legal compliance, without keeping unnecessary personal content.

7. How we protect data

Encryption in transit — all traffic is served over HTTPS/TLS.
Encryption of sensitive credentials at rest — integration tokens, device sessions and one-time codes are stored encrypted.
Access controls — multi-tenant isolation, role- and permission-based access, and two-factor authentication on login.
Monitoring — activity logging and error monitoring to detect and respond to issues.

8. International processing

Your data may be stored and processed on secured servers operated by our hosting providers. Where data is transferred across borders, we take steps to ensure it remains protected consistent with this policy.

9. Your rights

Subject to applicable law, you may request to access, correct, export or delete your personal data, or object to or restrict certain processing. To exercise these rights, contact us at support@konnectify.net. If you are a shopper of a store using Konnectify, please contact that merchant (the controller of your data); we will assist them in fulfilling your request.

10. Children

The Service is intended for businesses and is not directed to individuals under 18. We do not knowingly collect data from children.

11. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, by notifying you.

12. Contact us

Questions or privacy requests: support@konnectify.net
Goftech Solutions — Islamabad, Pakistan.