Privacy Policy

This Privacy Policy explains how Commerce Engine(“the Service,” “we,” “us,” or “our”), operated by Katuula Joel, collects, uses, stores, and protects information when merchants connect their business messaging accounts and when their customers interact with the AI assistant. Commerce Engineis an AI-powered commerce assistant that lets businesses (“Merchants”) connect their own WhatsApp Business phone numbers so that an automated AI assistant can receive and respond to messages from their end customers on their behalf.

By connecting an account to Commerce Engine or by messaging a business that uses Commerce Engine, you acknowledge the practices described in this policy.

• Merchants — businesses that connect their WhatsApp Business account and phone number to Commerce Engine to automate customer conversations and orders.
• End customers— people who send messages to a Merchant’s connected WhatsApp Business number and interact with the AI assistant.

From Merchants (during onboarding)

• Account and business identifiers obtained through Meta’s WhatsApp Embedded Signup flow, including your WhatsApp Business Account (WABA) ID, business phone number ID, and business portfolio ID.
• An access token issued by Meta that authorizes Commerce Engine to send and receive messages on your behalf. This token is stored encrypted at rest and is never exposed to your customers or to other Merchants.
• Your product catalog and business configuration that you provide so the AI assistant can answer questions and take orders.
• Contact details you supply, such as your name and email address.

From end customers (during conversations)

• Message content you send to a Merchant’s connected number (text, interactive selections, shared location, and similar), which is processed to generate a relevant AI response and to fulfil orders.
• Your WhatsApp phone number and WhatsApp profile name, as provided by Meta with each inbound message, used to maintain conversation continuity and to link an order to you.
• Order and delivery details you provide during a conversation, such as items, quantities, and a delivery address.

Automatically

• Technical metadata such as message identifiers and timestamps, used for deduplication, reliability, and troubleshooting.

• To route inbound messages to the correct Merchant and their AI assistant.
• To generate AI responses, answer product questions, and help end customers place and manage orders.
• To send responses back to end customers over the Merchant’s connected WhatsApp Business number.
• To enable Merchant staff to view conversations and intervene manually (human-in-the-loop) where needed.
• To operate, secure, debug, and improve the Service.
• To comply with applicable law and Meta platform requirements.

We process information to provide the messaging and ordering service that a Merchant has engaged us for and that an end customer initiates by messaging the Merchant. Merchants are responsible for having a lawful basis to use Commerce Enginewith their customers and for informing their customers that an AI assistant may handle their messages.

Messages may be processed by large language models to interpret intent and generate replies. We send only the information necessary for the assistant to respond (such as the current message, relevant conversation context, and the Merchant’s catalog). We do not sell your data, and we do not use end-customer message content to train third-party foundation models.

We do not sell personal information. We share information only as follows:

• With the Merchant you are messaging — the Merchant can see the conversation and order details, as they are the business you are transacting with.
• With Meta / WhatsApp— message delivery flows through the WhatsApp Business Platform, subject to Meta’s own terms and privacy policy.
• With service providers that help us operate the Service (for example, cloud hosting and AI model providers), bound by confidentiality and data-protection obligations.
• Where required by law, or to protect the rights, safety, and security of users and the Service.

We retain conversation and order data for as long as needed to provide the Service to the Merchant and as required for legitimate business or legal purposes. Merchant access tokens are retained only while a connection is active and are deleted when a Merchant disconnects. A Merchant may request deletion of their data, and end customers may contact us or the relevant Merchant to request deletion of their conversation data.

We use industry-standard measures to protect information, including encryption of sensitive credentials at rest, encrypted transport (HTTPS/TLS), access controls, and internal service authentication. No method of transmission or storage is completely secure, but we work to protect your information and to limit access to those who need it to operate the Service.

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact us using the details below, or contact the Merchant you have been messaging.

Commerce Engine is intended for use by businesses and adult customers. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can remove it.

Information may be processed and stored in countries other than your own. Where we transfer information across borders, we take steps to ensure it remains protected consistent with this policy.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be reflected on this page.

If you have questions about this Privacy Policy or how your information is handled, contact us at katuula@gmail.com.