Privacy Policy

Last updated: April 1, 2026

This Privacy Policy explains how Enwany ("we", "us", "our"), operated by Scale Comm, collects, uses, and protects information when you use our Shopify application.

1. Information We Collect

Enwany collects only the minimum data required to provide the Short Address conversion and address recovery services:

• Store domain — Your Shopify store URL (e.g., yourstore.myshopify.com) to identify your account.
• Order shipping addresses — Only shipping addresses for orders with Saudi Arabia (SA) as the country. We do not access or store addresses for other countries.
• Order IDs and order numbers — To track which orders have been processed and display validation logs in your dashboard.
• Customer phone numbers — Used to contact customers via WhatsApp when their shipping address cannot be automatically validated (WhatsApp Address Recovery feature). Phone numbers are only accessed for Saudi orders that fail geocoding.
• Customer names — Used to personalize WhatsApp address recovery messages sent to customers.
• Customer email addresses — Used for customer identification and as a fallback contact method for address recovery.

We do not collect payment information, browsing behavior, or any personal data beyond what is listed above.

2. How We Use Your Information

• To geocode Saudi shipping addresses and retrieve the National Short Address using the HERE Technologies Geocoding API.
• To save the Short Address to your Shopify order as a metafield, and optionally to order notes and tags.
• To contact customers via WhatsApp when their shipping address cannot be automatically resolved, requesting them to provide or confirm their National Short Address (WhatsApp Address Recovery).
• To personalize WhatsApp recovery messages using the customer's name.
• To display validation logs and usage statistics in your Enwany dashboard.
• To enforce plan limits and manage your subscription.

3. Third-Party Services

Enwany uses the following third-party services to provide its functionality:

• HERE Technologies Geocoding API (here.com/privacy) — We send the Saudi shipping address to HERE's servers to perform geocoding and retrieve the National Short Address. HERE does not retain this data beyond the API request.
• Meta WhatsApp Cloud API (whatsapp.com/legal/privacy-policy) — When a shipping address cannot be automatically validated, we send the customer's phone number to the WhatsApp Cloud API to deliver an address recovery message. Messages are sent only when the merchant has WhatsApp recovery enabled in their Enwany settings. Meta processes this data in accordance with their own privacy policy.

We do not sell, rent, or share your data with any other third parties.

4. Data Storage & Retention

Your data is stored securely in our database hosted on Railway (PostgreSQL with SSL/TLS encryption). We retain:

• Validation logs — Retained for as long as you have an active Enwany subscription.
• WhatsApp conversation records — Stored temporarily during the address recovery process and retained in validation logs for your dashboard. Conversation records are deleted along with all other data when you uninstall the app.
• Customer phone numbers and names — Not stored permanently. Used in real-time during order processing and WhatsApp recovery, and referenced only within validation log entries (order number and resolution status). Raw phone numbers and names are not retained in our database after the recovery conversation is completed.

When you uninstall Enwany, all your data (settings, logs, WhatsApp conversation records, and session data) is permanently deleted within 48 hours via our GDPR-compliant shop/redact webhook.

5. GDPR Compliance

Enwany implements all required Shopify GDPR webhooks:

• customers/data_request — We respond with any data we hold related to the specified customer, including any WhatsApp conversation records associated with their orders.
• customers/redact — We delete any data associated with the specified customer, including validation logs and WhatsApp conversation records.
• shop/redact — We delete all data associated with the store within 48 hours of uninstallation.

6. Data Security

• All data in transit is encrypted via HTTPS/TLS.
• Database connections use SSL encryption.
• Authentication is handled via Shopify's OAuth protocol.
• Access to order data is limited to the minimum required API scopes (read_orders, write_orders).
• WhatsApp messages are sent through Meta's encrypted WhatsApp Cloud API infrastructure.

7. Your Rights

You have the right to:

• Access the data we hold about your store.
• Request correction of inaccurate data.
• Request deletion of your data at any time.
• Enable or disable WhatsApp Address Recovery in your Enwany settings, controlling whether customer phone numbers are used.
• Withdraw consent by uninstalling the App.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page.

9. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

Scale Comm
Email: info@scalecomm.net