Wpdify Chat — Privacy Policy

Last updated: 1 October 2026

Wpdify Chat is a Shopify app that adds a chat window to a store's website and delivers the messages to the store's Wpdify CRM account. The app is provided by Booster Wizard Teknoloji A.Ş. (“Wpdify”).

For the data of store visitors and customers, the store that installs the app is the data controller; Wpdify processes this data on the store's behalf and instructions (data processor).

1. Data we process

About the store: store address and name, the store's public contact email, domains, app settings and the access tokens issued by Shopify (stored encrypted).
About visitors who use the chat: the messages and images they send; their name, email and phone if they fill in the pre-chat form; the time and text of the consent they give; the page where the chat started and the language.
About customers signed in to the store: their Shopify customer ID, name, email and phone (read from Shopify; they are not asked to fill in a form).
Order information: when requested through “Track my order” or by the store's team in its panel, the order's status, items, total and shipment tracking are read from Shopify at that moment; the app does not store order information. Addresses are not shown.
Contact form copy: if the store turns this setting on, a copy of the fields successfully sent from the store's contact form.
IP address: used only for momentary rate limiting to prevent abuse and not stored by the app; kept in server access logs for at most 11 days.

2. Purposes

To provide the chat between the store and visitors and deliver messages to the store's Wpdify CRM panel.
To show visitors the status of their orders and let the store's team see related orders to help the customer.
If the store keeps this setting on and the visitor gives consent, to add the contact details they leave to the store's Shopify customers. Existing customer records are never changed; no marketing consent is assumed.
To keep the service secure, prevent abuse and meet legal obligations.

3. Retention

A conversation (messages, images, visitor record, pre-chat and consent details) is deleted 12 months after its last activity. The record of a visitor who never wrote a message is deleted after 30 days.
When a store uninstalls the app, the store's data is deleted upon Shopify's shop data erasure request (about 48 hours after uninstalling).
Records of Wpdify staff access to personal data are kept for 12 months.

4. Data requests and your rights

Visitors and customers can send requests about their data (access, correction, deletion, etc.) to the store they shopped at. When the store creates a “request customer data” or “erase personal data” request in Shopify, it reaches us and is processed within 30 days.
You can also contact us directly: info@boosterwizard.com. Your rights under the Turkish Personal Data Protection Law (KVKK) and, where applicable, the GDPR are reserved.

5. Service providers we share data with

Shopify (e-commerce platform and app proxy).
Cloudflare (network security and delivery for our app's address).
Hetzner Online GmbH, Germany (application server) and TRN Teknoloji — TRN Cloud, Turkey (database).
Data is not sold or shared with third parties for advertising or marketing.

6. Security

Communication between browsers, Shopify and our servers is encrypted with HTTPS. Shopify access tokens are stored encrypted on the server (AES-256-GCM).
Requests to the app are verified with Shopify's signature. Staff access to personal data is limited by role and logged.

7. Changes and contact

We may update this policy; the current version is always on this page.
Booster Wizard Teknoloji A.Ş., Halkalı Merkez, Halkalı Cd. No:281 D:22 No:34, 34303 Küçükçekmece / Istanbul, Turkey. Email: info@boosterwizard.com. Security reports: info@boosterwizard.com.