Privacy Policy

Last updated: 2026

What this app does

Notil connects to your Shopify or Nuvemshop store and sends WhatsApp messages to your customers about their own orders (order confirmation, shipping updates, payment reminders and abandoned cart recovery) from your own WhatsApp Business number, using Meta's WhatsApp Cloud API with Coexistence.

What data we collect and why

Store data: your store's ID or address, domain, contact email and the access tokens for your Shopify or Nuvemshop API. We use them to read order and checkout information, register the webhooks the app relies on, and tell you about your account.
Order and checkout data: order ID and status, and your customer's name and phone number, read from your platform's API only when needed to send one of the messages listed above.
Message log: a record of the messages Notil sends (phone number, content, time, delivery status), so you can follow deliveries.
Customer replies: messages your customers send to your WhatsApp number reach Notil through Meta. They are read only to honor a request to stop receiving messages (for example "STOP") and are not stored. Only the opt-out itself is kept, so that it is respected.
WhatsApp connection details: your WhatsApp Business Account ID, phone number ID and access token, used to send messages on your behalf.

We do not collect passwords or full payment card details. Card payments are processed by Stripe, and Shopify processes charges for stores billed through Shopify.

Advertising cookies on the website

We use the Meta Pixel on Notil's public pages to measure visits and how well our ads work. We also use Meta's Conversions API to report store sign-ups, trial starts and confirmed subscription payments. Meta receives technical data about the visit, such as IP address, browser, page URL and cookie identifiers, a pseudonymous identifier and, for payments, the amount and currency. Advertising attribution is kept for up to 90 days. We do not send order, message or customer data from connected stores through the pixel.

To opt out, block cookies for notil.app in your browser or write to notil.whatsapp@gmail.com and we will stop measuring your store. Opting out does not stop you from using Notil and does not delete data Meta has already received.

Who else sees this data

Meta (WhatsApp Cloud API) processes every message sent or received, under its own data policies.
Shopify or Nuvemshop is the source of the order and checkout data. See your platform's privacy policy for how it handles that data on its side.
We do not sell your data. Meta also receives the advertising data described above when you allow it.

Retention and deletion

Store data is kept while the app is installed. In the message log, the customer's phone number and the text of each message are removed 180 days after sending. If you uninstall the app, all data tied to your store is deleted within 30 days. If one of your customers asks your platform to delete their personal data, their phone number and message content are also removed from our records automatically. The list of people who asked to stop receiving messages is kept while the app is installed, so the request continues to be respected.

Support chat conversations (the "Help" button) are kept for up to 24 months. They may be answered by an artificial intelligence assistant and are passed to our team through Telegram when you ask to talk to a person. Visits to the website are counted without cookies and without storing the IP address, and those records are deleted after 13 months.

If a customer asks for a copy of the data we hold about them, that request is currently logged for manual handling by our support team rather than fulfilled automatically. Contact us below if you are waiting on one.

Contact

Questions about this policy or a data request: notil.whatsapp@gmail.com