Summary
- AGNUS TECH LLC runs this website and Zaply, an app that connects Shopify stores to WhatsApp.
- These pages run no analytics and have no forms. The hosting service sets cookies when delivering them.
- Zaply handles store and customer data so merchants can talk to their customers on WhatsApp. For customer data, the store decides how it is used.
- Zaply sends marketing messages only to people who opted in, and records an opt-out when someone replies STOP.
- When used, Zaply’s AI assistant sends conversations to the configured AI provider to write replies. Merchants can switch it off.
- To ask about or delete your data, email admin@agnustechnology.com or read the data deletion instructions.
Who we are and what this covers
AGNUS TECH LLC (“Agnus”, “we”) is a Wyoming limited liability company. This policy covers:
- this website, agnustechnology.com; and
- Zaply, our app for Shopify stores, which connects a store to WhatsApp through Meta’s WhatsApp Business Platform.
It doesn’t cover Shopify, Meta, WhatsApp or a store’s own website. They have their own privacy policies.
Who decides how data is used
For information about a store’s customers (“shoppers”), the store (“merchant”) decides why and how Zaply uses it, and we process it on the merchant’s behalf. In data protection terms the merchant is the controller and we are its processor; under Brazil’s LGPD, the controlador and the operador. If you are a shopper, the store you bought from is usually the first place to ask.
For information about merchants and their teams, and for this website, Agnus Tech LLC decides how it is used.
This website
Agnus’s company website contains static pages with no analytics or advertising scripts, no third-party scripts or fonts, and no forms. The hosting service sets cookies when delivering the pages.
If you email us, we receive your email address and what you write, and we use them to reply. Like any website, the service that hosts it processes technical information such as IP addresses to deliver pages, and may keep it in server logs.
Data about merchants and their teams
When a store uses Zaply, we hold:
- Store details from Shopify: the shop domain, store name and shop email, plus store settings and policies the assistant uses to answer customers.
- Access tokens for the store’s Shopify account and WhatsApp Business Account, stored encrypted.
- WhatsApp connection details from Meta: the WhatsApp Business Account ID, phone number ID, display number and when the number was connected.
- AI settings, including any AI provider keys the merchant adds, stored encrypted.
- Support conversations with the Zaply team and the contact details given in them.
- Purchases in the app, if any. Shopify processes the payment; we receive a record of the purchase, not card details.
We use this to provide Zaply, connect the store to Shopify and WhatsApp, answer support requests, keep the service secure and meet legal obligations.
Data about a store’s customers
Depending on the features a merchant uses, Zaply processes:
- Contact details: WhatsApp phone number, WhatsApp profile name and picture link, and the name and email address that come from Shopify.
- Messages: the content of WhatsApp messages sent and received through Zaply, including media and delivery and read statuses, and internal notes written by the store’s team.
- Consent records: for each opt-in, the phone number, the consent text shown, its language and version, where it was collected and when, and each later change such as a STOP reply. If the shopper is signed in, the Shopify customer ID; for storefront opt-ins, the page, product and cart reference; for checkout opt-ins, the checkout reference and first items. We don’t store an IP address or browser details with an opt-in.
- Shopping data: carts and checkouts (items, value and checkout link) and orders (items, status, delivery details and addresses) that Zaply receives from Shopify.
- Sending records: which templates and campaigns were sent to which number, and when.
Zaply uses this to send the messages the merchant sets up, show conversations to the store’s team, check consent before marketing messages, let the AI assistant answer questions, and show the merchant how messages performed.
The storefront chat button counts clicks only as daily totals, without personal data.
AI features
Zaply’s AI assistant can answer customers’ questions for the store, and merchants can switch it off. The order lookup checks that the requesting phone number matches the number on the order.
To write a reply, Zaply sends an AI provider the customer’s message, the recent conversation, the customer’s and store’s names, relevant product, stock and policy information, and any order or contact details the assistant looks up. If cart reminders are personalised with AI, the customer’s name and cart items are sent too. Merchants can switch off store search and AI personalisation separately.
Zaply supports xAI and OpenAI, including OpenAI for indexing store content and customer questions for search. A merchant can connect their own account with OpenAI, Anthropic or Google. The provider used depends on the service and merchant configuration; the enabled providers must be confirmed before this draft takes effect.
Service providers
These providers appear in Zaply’s supported integrations and deployment documentation. The list reflects the code as of the date above; the providers enabled in production must be confirmed before this policy takes effect.
| Provider | What it does | Data involved |
|---|---|---|
| Shopify | The platform Zaply runs on; app purchases | Store, order and customer data |
| Meta | WhatsApp Business Platform: sends and receives messages, reviews templates | Phone numbers, messages, templates |
| Render | Hosts Zaply’s servers, database and queues | All Zaply data |
| xAI | Supported AI provider | Conversations and store data described above |
| OpenAI | Optional AI provider and search indexing | Conversations, questions and store content |
| Anthropic, Google | Only when a merchant connects their own account | As for the default provider |
| Resend | Sends support emails | Support conversations |
| Sentry | Error monitoring, when enabled | Technical details of errors, which can include parts of requests |
| Review platforms | Only when a merchant connects one (Judge.me, Loox, Yotpo, Stamped, Google or Trustpilot) | Details needed to request or match a review, such as an email address |
Where data is stored
Agnus Tech LLC is a US company. Zaply’s deployment documentation describes hosting on Render in the United States. The production locations and any international data transfers must be confirmed before this draft takes effect.
How long we keep data
The reviewed code does not define a global retention schedule. Retention periods and backup/log practices need owner confirmation before a final policy is published. The following deletion paths are present in the reviewed integration:
- When a store uninstalls Zaply, its Shopify access token is deleted straight away.
- About 48 hours after an uninstall, Shopify asks Zaply to erase the store’s data, and Zaply deletes the store’s records from its database.
- When a store asks Shopify to erase a customer’s data, Zaply deletes that customer’s order records. Other records are deleted only when they are linked to the customer’s Shopify profile, which isn’t always the case.
- Files a merchant exports from Zaply are removed after 7 days.
These steps don’t remove copies in database backups or service logs kept by our providers. The data deletion instructions explain how to ask us to delete data by email.
Your choices and rights
If you are a shopper
- To opt out of a store’s marketing messages, send STOP as its own message in the store’s WhatsApp chat. PARAR, SAIR, CANCELAR, CANCEL, UNSUBSCRIBE, DESCADASTRAR and REMOVER also work.
- To see, correct or delete your data, contact the store. You can also email us.
- If a store sends your data request through Shopify, Zaply receives it but doesn’t send the data automatically yet. Email us for a copy.
If you are a merchant
- You can switch off the AI assistant, remove the storefront blocks and uninstall Zaply at any time.
- For anything else, email us.
Depending on where you live, laws such as the GDPR in the European Union or the LGPD in Brazil may give you rights to access, correct, delete or move your data, and to object to or limit how it is used. To make a request, email admin@agnustechnology.com. We may ask you to confirm the data is yours before acting on it.
Security
- Shopify and WhatsApp access tokens, and AI keys merchants add, are encrypted with AES-256-GCM before they are stored.
- Shopify and Meta webhooks are checked against their signatures before Zaply acts on them.
- The public opt-in endpoint accepts only requests signed by Shopify, and limits how many it takes.
- Support staff passwords are stored as bcrypt hashes.
No system is perfectly secure. If you think you’ve found a security problem, email us.
Cookies
This website has no analytics or advertising scripts. Its hosting service sets cookies when delivering the pages. This draft does not yet describe the host’s cookie lifetimes or all of its technical data practices.
The Zaply app in Shopify admin uses a few first-party cookies to keep merchants and support staff signed in, and browser storage for display preferences such as the theme. On the page where a merchant connects WhatsApp, it loads Meta’s JavaScript SDK, which may set Meta’s own cookies. The app also loads Shopify App Bridge and Google Fonts. It uses no analytics or advertising cookies.
The storefront opt-in block and chat button set no cookies.
Changes and contact
When we change this policy, we’ll update this page and the date at the top.
Questions or requests: AGNUS TECH LLC, admin@agnustechnology.com.