Privacy policy

Digital Shop is a shop-management platform operated by Ayan Poonawala. Shop owners use it to manage storefronts, products, orders and related customer communication.

Information we process

Owner and staff accounts contain names, login identifiers, password hashes, roles and account status. Store records contain shop names, contact numbers, descriptions, locations, opening hours and uploaded images. Information selected for a storefront is visible to people who visit that storefront.

Customer orders and enquiries can include phone numbers, selected products or services, quantities, prices, discounts, coupon codes and order status. Restaurant orders may include a table number. When customer-management features are enabled, a shop may record customer names, numbers, notes, tags and evidence of messaging consent or opt-out.

If WhatsApp Cloud messaging is enabled for a connected business number, Digital Shop processes incoming messages, sender numbers, message identifiers, timestamps and delivery status. Messages and replies may be stored for the connected shop's inbox and communication history.

Browser push notifications are optional. When a visitor subscribes, we store the browser's push endpoint and subscription keys for the relevant shop. Visitors can turn notifications off in their browser settings.

How information is used

We use information to provide account access, display storefronts, process and manage orders, serve images, send requested notifications, support shop communication, maintain service security and respond to support or deletion requests. A phone number in an order is not by itself permission for marketing messages.

Service providers and shop access

Netlify hosts the web app and Render hosts the API. The configured database provider stores application records. ImageKit stores and delivers uploaded images. Meta processes WhatsApp Cloud API messages. Browser push services deliver push notifications. These providers may process information in countries other than the user's country under their own terms and privacy practices.

Shop owners and authorized staff can access records permitted by their account role. Platform administration can manage accounts and stores. WhatsApp inbox access is limited to the shop connected to the number. Do not upload personal information into publicly displayed product or storefront images.

Storage and deletion

Records remain in the service while needed to operate the shop, unless removed through available controls or an accepted deletion request. Removing a shop takes it offline and gives the owner a 30-day restoration window. After that window, the service's scheduled cleanup is designed to purge the shop's database records. Immediate deletion may be available through platform administration. Uploaded image copies, backups and provider-held records are separate and must be considered during a deletion request; database deletion alone does not guarantee that every provider copy is erased.

Archived customer-management records may retain consent or opt-out information to prevent unwanted messaging. Operational records remain while needed for the service, requests and applicable legal obligations. Ask us about a specific record.

Your choices and contact

You can decline push notifications, revoke them in your browser, ask the shop to stop messaging you, and request access, correction or deletion of your information. A shop customer should identify the relevant shop so the request reaches the correct record. Account owners can use the platform's account and store controls.

Privacy contact: ayankhan9822@gmail.com. Never send a password, access token or identity document in a deletion request unless a secure, necessary verification process is arranged.

Ayan Poonawala handles privacy and deletion requests and aims to respond within seven days. ImageKit images are removed on request; automatic image deletion is not currently available. Provider backups may remain under their retention practices.