Privacy Policy

Last updated: March 29, 2026

1. Introduction

NextConfirmAI ("we", "our", "us") provides an automated WhatsApp-based order confirmation service for e-commerce merchants. This Privacy Policy explains how we collect, use, store, and protect information when you use our service, whether as a merchant (store owner) or as an end customer receiving order confirmation messages.

2. Information We Collect

From Merchants:

  • Store information (Shopify domain, store name)
  • API credentials for Shopify and WhatsApp Business (stored securely, used solely for service operation)
  • Account contact information

From End Customers (via WhatsApp):

  • Phone number (as provided by the merchant's Shopify order)
  • Customer name and shipping address (from the Shopify order)
  • WhatsApp messages sent in response to order confirmation requests
  • Order details: product information, order value, order status

3. How We Use Information

We use collected information exclusively to:

  • Send order confirmation messages via WhatsApp on behalf of the merchant
  • Classify customer intent (confirm, cancel, modify, or escalate) using AI
  • Update order status in the merchant's Shopify store
  • Route unclear or complex requests to the merchant's human review queue
  • Generate aggregated analytics and confirmation rate reports for merchants

4. WhatsApp Message Handling

We use the official WhatsApp Business Cloud API (provided by Meta Platforms, Inc.) to send and receive messages. All messages are sent using Meta-approved templates for business-initiated conversations. We store message content for conversation context and merchant review. We do not use WhatsApp messages for advertising or share them with unrelated third parties.

5. Third-Party Services

Our service integrates with the following third-party providers:

6. Data Retention

We retain order and conversation data for a maximum of 90 days after the last interaction, unless the merchant requests earlier deletion. Aggregated, anonymized analytics may be retained longer for service improvement. Merchants can request deletion of all their data at any time.

7. Data Security

We implement industry-standard security measures including encrypted data transmission (TLS), secure credential storage, access controls, and regular security reviews. API tokens and secrets are stored encrypted and are never exposed in logs or analytics.

8. Your Rights

You have the right to:

  • Access: Request a copy of the data we hold about you
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your data
  • Objection: Object to processing of your data
  • Portability: Request your data in a machine-readable format

To exercise any of these rights, contact us at contact@nextconfirmai.ma.

9. Children's Privacy

Our service is not directed at individuals under the age of 16. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify merchants of material changes via email. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact Us

For any questions or concerns about this Privacy Policy or our data practices, contact us at:

NextConfirmAI
Email: contact@nextconfirmai.ma
Marrakech, Morocco