a product of Notify CRM, operated by Notify CRM Team
Notify CRM ("Notify CRM," "we," "us," or "our") is a WooCommerce order-management and WhatsApp notification service. Notify CRM is operated by Naveed Sajid, a sole proprietor based in Pakistan, registered with Pakistan's Federal Board of Revenue (FBR). Naveed Sajid is the data controller responsible for the personal data described in this policy, unless stated otherwise below.
This policy explains what information Notify CRM collects, how it is used, who it may be shared with, and the choices you have. It also explains how we handle "Platform Data" received through Meta's WhatsApp Business Platform and Facebook Login for Business, as required by Meta's Platform Terms.
Notify CRM interacts with two categories of individuals, and this policy applies to both:
When a Store Owner installs the plugin and completes registration in the Store tab, verifies a plan, or manages their account, the plugin sends the following to our server at api.hustletoevolve.com:
| Data | When it is sent |
|---|---|
| Store name, store URL | On registration, plan verification, and account actions |
| Owner name and email address | On registration |
| Owner WhatsApp Business phone number | On registration |
| Plugin version, WordPress version, WooCommerce version, PHP version | On registration and periodic plan/version checks, for support and compatibility purposes |
| Subscription/plan status and billing reference (via Paddle) | When a paid plan is purchased or renewed |
| Facebook Page ID/name, Instagram account ID/username | On connecting Facebook/Instagram via Facebook Login for Business |
| Catalog authorization and catalog ID | On connecting a Meta catalog |
Our servers automatically log standard technical information for security and diagnostics, such as IP address, request timestamps, and basic device/browser information, consistent with normal web server logging practices. This information is retained only as long as necessary for security and troubleshooting.
Notify CRM is registered with Meta as a Tech Provider and uses Facebook Login for Business and the WhatsApp Business Platform (Cloud API) so that Store Owners can connect their own WhatsApp Business Account and send order notifications. When a Store Owner uses the "Connect WhatsApp Business" flow (Meta's Embedded Signup), we request the following permissions, solely to provide the features described:
| Permission | What we use it for |
|---|---|
whatsapp_business_messaging | To send order-status WhatsApp messages (order confirmed, processing, shipped, delivered, cancelled, refunded) to the Store Owner's own customers, on the Store Owner's behalf. |
whatsapp_business_management | To let the Store Owner connect/disconnect their WhatsApp Business Account, submit and manage message templates, and view template approval status. |
manage_app_solution | To operate our Tech Provider / Solution Partner relationship so a Store Owner's WhatsApp Business Account can be linked to our app. |
public_profile | To authenticate the person completing the connection flow. |
| Permission | What we use it for |
|---|---|
| pages_show_list | To show the Store Owner the Facebook Pages they manage so they can choose which Page to connect to the customer-support inbox. |
| pages_messaging | To receive customer Messenger conversations in the Store Owner's inbox and to send the Store Owner's replies to customers who messaged their Page. |
| pages_manage_metadata | To subscribe the connected Page to message webhooks (messages, messaging_postbacks) so customer messages are delivered in real time to the inbox. |
| pages_read_engagement | To display the connected Page's name and basic profile information in the dashboard so the Store Owner can confirm the correct Page is connected. |
| instagram_basic | To identify the Instagram business or creator account linked to the connected Facebook Page (account ID and username) and display it in the dashboard. |
| instagram_manage_messages | To receive customer Instagram direct messages in the Store Owner's inbox and to send the Store Owner's replies. Messages are only read and answered for Instagram accounts the Store Owner explicitly connected; conversations are customer-initiated customer-support and order-related exchanges. |
| Permission | What we use it for |
|---|---|
| catalog_management | To sync the Store Owner's WooCommerce products (name, price, stock, images, description) to their Meta catalog so customers can browse and order products inside WhatsApp chat, and to keep the catalog up to date as products change. |
| business_management | To verify that the catalog and WhatsApp assets a Store Owner connects belong to the same Meta Business Portfolio, preventing cross-tenant access. We do not modify business settings. |
Platform Data received through these permissions is used only to provide the inbox, reply, and catalog features described above. We do not use Platform Data for advertising, we do not sell or license it, and we do not use it to make decisions about eligibility (employment, credit, insurance, housing, education, or similar). If Meta requires us to delete Platform Data — for example, because a Store Owner has revoked our app's access or requested deletion — we delete the corresponding data within the timeframe required by Meta's Platform Terms.
Where this data is stored: WhatsApp, Facebook, and Instagram connection details — including the access tokens generated during these flows — and catalog authorization tokens are stored on servers we operate, encrypted at rest (AES-256). Each Store Owner’s connection is isolated by store identifier. Message content and recipient phone numbers are processed on our servers solely to deliver messages and to track delivery status (sent / delivered / read); they are retained in delivery logs for 90 days for troubleshooting and receipt tracking, then deleted or anonymized. Order data (order contents, products, customer names, shipping addresses, payment information) is never transmitted to our servers and remains in the Store Owner’s own WordPress/WooCommerce database.
How this data is used: Platform Data received from Meta is used only to provide the order-notification and template-management features described above and in our Terms of Service. We do not use Platform Data for advertising, and we do not sell or license Platform Data to third parties. We do not use Platform Data to make decisions about eligibility, such as decisions related to employment, credit, insurance, housing, education, or similar.
If Meta requires us to delete Platform Data — for example, because a Store Owner has revoked our app's access or requested deletion — we will delete the corresponding data within the timeframe required by Meta's Platform Terms.
We do not sell personal information. We share information only in the following limited circumstances:
As disclosed to Meta as part of our app review, Notify CRM does not currently use any additional third-party data processors beyond those listed above to process Platform Data received from Meta.
Store registration and account data described in Section 3.1 is stored on servers we operate and secure. WhatsApp connection tokens and messaging content are stored locally within each Store Owner's own WordPress installation, as described in Section 4, and remain under that Store Owner's control and hosting.
We retain account and registration data for as long as a Store Owner's account is active, and for a reasonable period afterward to comply with legal, accounting, or fraud-prevention obligations. A Store Owner may request deletion of their account and associated data at any time by:
Deleting the plugin from a WordPress site does not automatically delete data held on our servers; please use one of the methods above to remove server-side data.
Depending on where you are located, you may have the right to:
To exercise any of these rights, contact us using the details in Section 15. We will respond within a reasonable time and in accordance with applicable law.
We use reasonable administrative, technical, and physical safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction, including encryption of WhatsApp connection tokens at rest and transport-layer encryption (HTTPS/TLS) for data sent to and from our servers. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
Notify CRM is a business-to-business tool intended for use by store owners and administrators. It is not directed at, and we do not knowingly collect personal information from, children under the age of 13 (or the relevant age of digital consent in your jurisdiction).
Notify CRM is operated from Pakistan and may store or process information on servers located in other countries. By using our services, you consent to the transfer of information to countries that may have different data protection laws than your own, where we will continue to protect your information in accordance with this policy.
Our website and dashboard may use essential cookies or similar technologies required for login sessions and basic security. We do not use these cookies for third-party advertising.
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top of this page. Continued use of Notify CRM after changes take effect constitutes acceptance of the revised policy.
If you have questions about this Privacy Policy or how your data is handled, contact: