Privacy Policy

Last updated: June 26, 2026

This Privacy Policy explains how Storefront Platform ("Storefront", "we", "us") collects, uses, and protects information when merchants and their customers use our WhatsApp commerce platform. This page is maintained by Storefront to answer common privacy questions about our service.

1. Who we are

Storefront is a Meta Tech Provider that helps Nigerian businesses sell on WhatsApp. Merchants connect their WhatsApp Business account through Meta's Embedded Signup and use our AI agent, catalog, and payment tools to serve their customers.

2. Information we collect

  • Merchant account data: name, email, business name, phone number, password hash.
  • WhatsApp Business data (via Meta): WhatsApp Business Account ID, phone number ID, business name, and an access token used solely to send and receive messages on the merchant's behalf.
  • Catalog data: products, services, prices, and images the merchant uploads.
  • Conversations: messages exchanged between the merchant's WhatsApp number and their customers, including customer phone numbers and message content, so the AI can reply and the merchant can see history.
  • Transactions: orders, bookings, quotations, and payments processed through Paystack.
  • Usage data: logs, device info, and analytics to keep the service reliable and secure.

3. How we use information

  • Provide the WhatsApp automation, AI replies, catalog, orders, payments, and payouts.
  • Authenticate merchants and protect against fraud and abuse.
  • Send transactional notifications (payment received, payout sent, trial expiry).
  • Improve our product, models, and customer support.
  • Comply with legal obligations.

4. Sharing

We share data only with the service providers we need to operate:

  • Meta (WhatsApp Cloud API) — to deliver and receive messages.
  • Paystack — to process payments and bank payouts.
  • Hosting and infrastructure providers — to run the platform.

We do not sell personal data.

5. Data retention

We keep account, catalog, and transaction data for as long as the merchant uses Storefront, plus a reasonable period afterwards for legal and accounting requirements. Conversation history is retained while the merchant's account is active. Merchants can request deletion at any time.

6. Security

Data is encrypted in transit, access is restricted by row-level security, and sensitive secrets are stored server-side. No system is perfectly secure, so we encourage merchants to use strong passwords and protect their devices.

7. Your rights

You can request a copy of your data, correct inaccurate data, or request deletion by emailing support@storefrontcommerce.lovable.app or using our Data Deletion page.

8. Children

Storefront is not directed to children under 13 and we do not knowingly collect their data.

9. Changes

We may update this policy. The "Last updated" date at the top reflects the latest version.

10. Contact

Questions? Email support@storefrontcommerce.lovable.app.