Skip to main content
Magic Wishlist Magic Wishlist

Magic Whatsapp Button Privacy Policy

Last updated: August 26, 2026

Magic Whatsapp Button is a Shopify application developed and operated by Magic Apps, LLC. This Privacy Policy explains what information we collect, how we use it, and how we protect it when you install or use Magic Whatsapp Button on your Shopify store.

1. Information We Collect

When you install and use Magic Whatsapp Button, we handle the following information:

From Shopify (required to operate the app)

  • Shop domain and OAuth session data needed to authenticate your store (for example, shop identifier and access token)
  • Optional staff account details provided by Shopify during login (for example, name and email), when available

From your app settings (configured by you in the app admin)

  • WhatsApp phone number
  • Default pre-filled message
  • Button position (bottom-left or bottom-right)
  • Button color
  • Whether the button is shown on mobile or desktop

These settings are stored as an app-owned shop metafield on Shopify so your storefront theme extension can display the button.

What we do not collect

  • We do not collect shoppers' names, phone numbers, or message content
  • We do not track or store button impressions, clicks, or other usage analytics
  • We do not intercept or process WhatsApp conversations

When a shopper clicks the button, they are sent to WhatsApp or WhatsApp Web. Any conversation happens directly between you and the shopper on Meta's platform.

2. How We Use Your Information

We use the information described above only to:

  • Authenticate your store and run the embedded app admin
  • Save and load your WhatsApp button settings
  • Display the WhatsApp button on your storefront when the theme app extension is enabled
  • Open WhatsApp with your configured number and pre-filled message when shoppers click the button
  • Respond when you contact us for support

We do not sell, rent, or trade your data or your shoppers' data. We do not use your data for advertising on other platforms.

3. Data Storage & Security

Where data is stored

  • OAuth session data is stored in our application database (PostgreSQL)
  • Button settings are stored in your Shopify store as an app-owned shop metafield

Security

  • Data in transit is protected using encrypted connections (HTTPS/TLS)
  • Access to our systems is limited to authorized personnel who need it to operate and support the app

Retention and deletion

  • We retain OAuth session data while the app is installed on your store
  • When you uninstall the app, or when Shopify sends a mandatory compliance webhook (including shop/redact), we delete session data associated with your store in accordance with Shopify's app data requirements
  • App configuration stored in Shopify metafields is handled according to Shopify's app and compliance policies when the app is removed or a compliance webhook is received

We may retain limited information only where required by law.

4. Third-Party Services

Magic Whatsapp Button relies on the following third parties:

Shopify We access your store through Shopify's official APIs under the Shopify Partner Program terms.

WhatsApp / Meta When shoppers click the button, they are directed to WhatsApp or WhatsApp Web, operated by Meta. We do not control Meta's privacy practices. Review Meta's policies for how they handle data on their platform.

We do not share your data with other third-party services for advertising or marketing.

5. Your Shoppers' Data

Magic Whatsapp Button does not collect shoppers' personal information. Shoppers interact with a link on your storefront and then communicate with you directly through WhatsApp.

You are responsible for how you handle shopper communications on WhatsApp. We act as a service provider for the limited technical data needed to display the button and store your configuration.

GDPR / privacy law compliance

We implement Shopify's mandatory compliance webhooks: customers/data_request, customers/redact, and shop/redact. Because we do not store shopper personal data, these requests typically require no shopper data export from our systems.

6. Cookies & Tracking

On your storefront

The WhatsApp button is a standard link with CSS styling. The app does not set third-party tracking cookies and does not use local storage for tracking on your storefront.

In the app admin

The embedded admin uses session cookies required by Shopify's authentication system.

Our marketing website, if separate from the app, is not covered by the storefront behavior described above.

7. Your Rights

Depending on your location, you may have rights regarding your personal data, including access, correction, portability, or deletion.

To exercise these rights, contact us at support@getmagicapps.com.

As a merchant, you can also use Shopify's customer privacy tools for shopper data requests. We respond to Shopify compliance webhooks within the timeframe required by Shopify.

8. Children's Privacy

Magic Whatsapp Button is a business-to-business service for Shopify merchants. We do not knowingly collect information from children under 13 (or the equivalent minimum age in your jurisdiction). If you believe a child has provided us with personal information, contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through a notice in the app admin before the changes take effect.

10. Contact Us

If you have questions about this Privacy Policy: