Privacy Policy

1. Who we are

The Service is operated by ECOM SOLUTIONS LLC, a limited liability company registered in the State of Wyoming, United States, with a registered address at 30 N Gould St, Ste R, Sheridan, WY 82801, USA. For the purposes of the EU/UK General Data Protection Regulation (GDPR), ECOM SOLUTIONS LLC is the data controller for personal data of our account holders (merchants), and a data processor acting on behalf of merchants with respect to their end-customers’ data.

2. Scope of this policy

This policy applies to: (a) merchants and their team members who create and use a confirmed account; (b) visitors to confirmed.live; and (c) end-customers of merchants whose order and contact data is processed through the Service in order to confirm orders via WhatsApp. It does not apply to third-party websites, platforms, or services that we link to or integrate with, which have their own privacy policies.

3. Data we process

3.1 Data you provide (merchants)

• Account data: name, business name, email address, phone number, password, and billing details.
• Store connection data: API keys, store identifiers, and settings you provide to connect Converty, Shopify, or other supported platforms.
• Support & communications: messages you send us and their contents.

3.2 End-customer data (processed on behalf of merchants)

• Order data: order number, order value, products, order status, and delivery details.
• Contact data: the end-customer’s name and WhatsApp/phone number, used to send the order-confirmation message.
• Message data: the content of WhatsApp messages exchanged for order confirmation, and their delivery/read status.

3.3 Data collected automatically

• Usage & device data: IP address, browser type, device information, pages visited, and timestamps.
• Cookies & similar technologies: used to keep you signed in, remember preferences, and measure performance. You can control cookies through your browser settings.

4. WhatsApp & Meta data

confirmed uses the WhatsApp Business Platform (Cloud API) provided by Meta Platforms, Inc. ("Meta") to send and receive order-confirmation messages. When you use this feature:

• End-customer phone numbers and message content are transmitted through Meta’s infrastructure in order to deliver messages. Meta acts as a sub-processor for this data and processes it under its own terms and policies.
• We only send outbound business messages to end-customers where a valid basis for contact exists (for example, a recent order placed with the merchant) and in accordance with the WhatsApp Business Messaging Policy.
• We do not use WhatsApp data for advertising, and we do not sell WhatsApp message content.

5. How & why we use data

6. Legal bases for processing (GDPR)

Where GDPR applies, we rely on the following legal bases:

• Performance of a contract — to provide the Service you or the merchant have requested.
• Consent — where required, for example for certain outbound WhatsApp messages or marketing. Consent can be withdrawn at any time.
• Legitimate interests — to secure, maintain, and improve the Service, provided these interests are not overridden by your rights.
• Legal obligation — to comply with applicable laws, tax, and accounting requirements.

7. How we share data

We do not sell personal data. We share data only:

• With sub-processors that help us operate the Service (see Section 8), under contractual data-protection obligations.
• With the merchant whose store generated the order (for end-customer data).
• When required by law, legal process, or to protect rights, safety, and security.
• In connection with a merger, acquisition, or sale of assets, with appropriate safeguards.

8. Sub-processors

We use a limited number of trusted third parties to provide the Service. These currently include:

A current list of sub-processors is available on request by contacting us at the address in Section 17.

9. International data transfers

We are based in the United States and may process data in the US and other countries. Where personal data of individuals in the EEA, UK, or Switzerland is transferred outside those regions, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (SCCs) or equivalent mechanisms.

10. Data retention

We retain personal data only for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. End-customer order and message data is retained on behalf of the merchant and is deleted when the merchant deletes it, closes their account, or requests deletion, subject to legal retention requirements.

11. Security

We implement appropriate technical and organisational measures to protect personal data, including encryption in transit (HTTPS/TLS), access controls, and monitoring. No method of transmission or storage is completely secure, but we work continuously to protect your data.

12. Your rights

Depending on your location, you may have the right to: access your data; correct inaccurate data; delete your data; restrict or object to processing; data portability; and withdraw consent. To exercise these rights, contact us (Section 17). If you are an end-customer of a merchant, you may also contact the merchant directly. You have the right to lodge a complaint with your local data protection authority.

13. How to request deletion of your data

You can request deletion of your personal data at any time by emailing privacy@confirmed.live with the subject line "Data Deletion Request". We will verify your request and delete the relevant data within 30 days, unless we are legally required to retain it. Merchants can also delete end-customer data directly from within their confirmed dashboard.

14. California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, to request its deletion, to correct it, and to opt out of the "sale" or "sharing" of personal information. We do not sell your personal information. You will not be discriminated against for exercising your rights. To make a request, email privacy@confirmed.live.

15. Children

The Service is intended for businesses and is not directed to individuals under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

16. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

17. Contact us

If you have any questions about this Privacy Policy or our data practices, or to exercise your rights, please contact: