How we process your store data.

This Merchant Data Agreement (“Agreement”) applies to every merchant who uses HeyHomie, including merchants who install the HeyHomie app from the Shopify App Store and connect their Shopify store. It forms part of our Terms & Conditions and sits alongside our Privacy Policy. If anything here conflicts with those documents on the processing of your store data, this Agreement wins.

• You, the merchant, are the data controller (the “Data Fiduciary” under India’s Digital Personal Data Protection Act, 2023) for your store data and your customers’ personal data.
• HeyHomie is your data processor. Homepreneur Solutions Pvt. Ltd. processes that data only on your behalf and only to deliver the features you turn on.
• By installing or using HeyHomie you agree to this Agreement on behalf of your business.

We access only the data each feature needs. When you connect Shopify, Shopify shows you the exact permissions before you approve them.

Store data

• Products, variants, prices, photos, collections and inventory
• Orders, payment status, fulfilments, tracking, returns, refunds and cancellations
• Discount codes and product reviews from review apps you use

Customer data

• Name, phone number, email address and delivery address, only where a feature needs them (for example, to send an order update on WhatsApp or to fill in checkout for a shopper who came from WhatsApp)
• WhatsApp marketing consent and opt out records

Store activity

• Visits, product views, carts and checkout steps of shoppers who arrive from your WhatsApp messages, collected through Shopify’s own customer events and only where the shopper’s privacy choices allow it

Messaging data

• WhatsApp conversations, message templates and delivery status for your WhatsApp Business number

We process your data only to:

• Send the WhatsApp messages you set up, such as order confirmations, shipping and delivery updates, cart reminders and broadcasts
• Open your own store and checkout for shoppers who tap a link in WhatsApp, with their details filled in
• Show you each shopper’s journey and the results of your messages
• Keep your catalogue, orders and stock in sync between your store and HeyHomie
• Provide support, keep the service secure and fix problems

We neversell or rent your data, use your customers’ data for our own marketing, share it with other merchants, or use it for advertising or profiling outside the features you enable.

• Collect the consents your customers need to give before you send them marketing messages on WhatsApp, and honour opt outs. HeyHomie records opt ins and opt outs and syncs them with your Shopify store.
• Use HeyHomie in line with WhatsApp’s Business and Commerce Policies and the laws of the markets you sell into.
• Give us only data you are allowed to share, and tell us if your instructions change.

We apply technical and organisational measures that match the sensitivity of the data:

• Encryption in transit (TLS) and encryption at rest, including for access tokens
• Least privilege access: only staff who need the data for support or operations can reach it, and every access is logged
• Regular reviews of staff access, removed promptly when roles change
• Encrypted backups and separate test and production environments
• Personal data kept out of links and web addresses
• Monitoring, vulnerability management and a documented incident response plan
• Confidentiality obligations for everyone who works on HeyHomie

We use a small number of trusted providers to run the service. Each is bound by data protection terms at least as protective as this Agreement.

• Meta Platforms, for the WhatsApp Business Platform that delivers your messages
• Our WhatsApp Business Solution Provider, which connects HeyHomie to the WhatsApp Business Platform
• Google Cloud, for hosting, databases and storage
• Cloudflare, for network security and content delivery
• AI model providers, only if you turn on AI replies, to draft responses to your customers’ messages
• Checkout, payment and shipping providers you connect, such as your checkout app or courier aggregator, only to deliver the feature you enabled

You can request the current named list at any time by writing to privacy@heyhomie.me. We will tell you before adding a sub processor that handles your customers’ personal data, so you can object.

We store and process data in India wherever possible. Some providers, such as Meta for WhatsApp delivery, may process data in other countries. Where that happens, we rely on the provider’s contractual safeguards and only transfer what the feature needs, in line with applicable law.

If one of your customers asks to see or delete their data, we help you respond. For connected Shopify stores we act on Shopify’s privacy requests automatically:

• Customer data request: we prepare the data we hold about that customer for you
• Customer deletion request: we delete that customer’s personal data from HeyHomie, including journeys and conversations
• Store deletion request: we delete the store’s data after you uninstall

We complete these within 30 days and aim to do so within 7.

If we become aware of a personal data breach affecting your data, we will notify you without undue delay and in any case within 72 hours, tell you what happened, what data was involved and what we are doing about it, and help you meet your own notification duties.

• We keep your data while you use HeyHomie.
• You can export your contacts, conversations and orders at any time.
• If you uninstall the HeyHomie Shopify app, messages stop straight away. We keep your data for 48 hours so you can reinstall without losing setup, then delete the data we received from Shopify within 30 days. Backups rotate out within the same 30 days.
• If you close your HeyHomie account, we delete your data as described in our Privacy Policy.
• Your WhatsApp Business number always remains yours.

If you choose to offer products to HeyHomie resellers, we show resellers the product details you select (title, photos, description, your price and an indication of stock). Resellers never see your customers’ data, your costs or your exact stock levels, and you can stop sharing any product at any time. Orders from resellers are created in your store so you fulfil them as usual.

On request, we will give you the information reasonably needed to show that we meet this Agreement, including answers to security questionnaires, and help with data protection assessments that relate to our service.

This Agreement is governed by the laws of India, including the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000. Where your customers are in other regions, we also apply the principles of the EU General Data Protection Regulation to the processing we do for you. We may update this Agreement as the law or our service changes; we will post the new version here and tell you about material changes in advance.

Questions about this Agreement or your data: privacy@heyhomie.me. Homepreneur Solutions Pvt. Ltd., Clayworks, Vaishnavi BVS Senate, 178/2, Bannerghatta Rd, Dollar Layout, Phase 4, Bilekahalli, Bengaluru, Karnataka 560078.