Shagofy

1. Information We Collect

• Account information — name, email address, password (hashed), phone number, language and role when you register as a merchant or staff user.
• Store information — store name, branding, product catalog, pricing, inventory, shipping configuration and store policies you enter.
• Order & customer data — orders placed through your storefronts, including customer names, contact details, delivery addresses and purchased items. This data is controlled by the merchant whose store received the order.
• Payment data — payments are processed directly by third-party payment gateways (e.g. Stripe, Paystack). We do not receive or store card numbers, bank credentials, PINs or OTPs on our servers.
• WhatsApp communications — when a merchant connects WhatsApp Business to Shagofy, we store the connected business account identifiers, an encrypted access token, and the messages exchanged so that our AI features can respond. Message content is used solely to operate the requested AI features.
• AI usage data — tool calls and actions performed by the AI on a merchant's behalf are logged for security auditing and abuse prevention.
• Technical data — IP address, browser type and pages visited for security and analytics.

2. How We Use Information

• To provide, operate and improve the Shagofy platform and your storefronts.
• To process orders, payments (via gateways), settlements and notifications.
• To power AI features: understanding merchant instructions, answering customer questions from the real catalog, generating Express Checkout links and escalating conversations to humans.
• To detect fraud, enforce limits and keep the platform secure.
• To communicate service updates, invoices and support responses.

3. WhatsApp & AI Processing

Our WhatsApp features use the official Meta WhatsApp Business Platform. When the AI processes messages:

• Messages are shared with our AI service providers strictly to generate responses and perform store actions the merchant requested or enabled.
• The AI never asks customers for card numbers, PINs, OTPs or other financial credentials; all payments happen through secure checkout links on this platform.
• Merchants can disable the AI features at any time from their dashboard, and customers can request a human agent at any point in a conversation.

4. Sharing of Information

• Payment gateways: to process transactions you choose.
• Meta Platforms Inc.: to deliver WhatsApp messages through the official Business Platform.
• AI providers: message content needed to generate AI responses.
• Hosting, email and infrastructure providers acting under contract.
• Authorities where required by applicable law.

We do not sell your personal data or your customers' personal data.

5. Money, identity and the wallet

• Wallet and payments — when a merchant takes payments with Shagofy we record the amount, the fee, the payment reference, the payer's name and bank as the bank gives them to us, and the terminal used. We never see or store a card number, a bank password, a PIN or an OTP.
• Verification (KYC) — before a merchant can be paid out we collect the business name, the owner's name and date of birth, an identity number, a photograph of an identity document and the bank account to be paid. This is required of anyone handling payments; without it we cannot open a wallet.
• Withdrawals — we keep the bank account paid, the amount, the fee and the provider's reference for each payout.
• Transaction PIN — stored only as a one-way hash, the same way a password is. Nobody at Shagofy can read it.

Verification details are shared with the payment providers and banks that must check them, and with regulators where the law requires. They are never sold or used for advertising.

6. The Shagofy Merchant app

• The app keeps your sign-in token in the phone's secure storage. It is removed when you sign out, and it expires on its own.
• The camera is used only when you scan a barcode or photograph a product or document. Nothing is recorded or uploaded unless you choose it.
• Push notifications need a device token from Google or Apple, which we store to send you payment and order alerts. Turning notifications off in your phone stops them.
• The app does not track you across other apps or websites, and contains no advertising.

7. How long we keep things, and closing your account

You can close your account at any time, in the app under More, or on the web under Profile. When you do, you are signed out everywhere, you cannot sign in again, and your storefronts stop serving shoppers immediately.

We do not delete the record of money that moved. The law in the countries we serve requires anyone handling payments to keep payment, payout and verification records for at least 5 years after the business relationship ends - for tax, for anti-money-laundering checks, and because a shopper can dispute a payment long after a merchant has left. Those records are kept apart from day-to-day use, are not used to contact you, and the personal details in them are erased once that period ends.

Everything else goes with the account: your products, your store pages, your drafts and your marketing lists. A disconnected WhatsApp token is deleted at once. You can ask us at any time what we still hold about you, and we will tell you.

How to close your account

8. Security

We apply industry-standard measures including encryption in transit (HTTPS/TLS), encryption at rest for sensitive credentials (such as WhatsApp access tokens), access controls, audit logging of privileged actions and tenant isolation between merchants.

9. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, export or delete your personal data, and to object to certain processing. Contact us using the details below to exercise these rights.

10. Children

Shagofy is not directed at children under 13 and we do not knowingly collect their data.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be announced on the platform. Continued use constitutes acceptance of the updated policy.

12. Contact Us

Questions about this policy? Contact us at support@shagofy.com.

Questions about this policy? Write to support@shagofy.com.