a product of Notify CRM, operated by Notify CRM Team
Notify CRM ("Notify CRM," "we," "us," or "our") is a WooCommerce order-management and WhatsApp notification service. Notify CRM is operated by Naveed Sajid, a sole proprietor based in Pakistan, registered with Pakistan's Federal Board of Revenue (FBR). Naveed Sajid is the data controller responsible for the personal data described in this policy, unless stated otherwise below.
This policy explains what information Notify CRM collects, how it is used, who it may be shared with, and the choices you have. It also explains how we handle "Platform Data" received through Meta's WhatsApp Business Platform and Facebook Login for Business, as required by Meta's Platform Terms.
Notify CRM interacts with two categories of individuals, and this policy applies to both:
When a Store Owner installs the plugin and completes registration in the Store tab, verifies a plan, or manages their account, the plugin sends the following to our server at api.hustletoevolve.com:
| Data | When it is sent |
|---|---|
| Store name, store URL | On registration, plan verification, and account actions |
| Owner name and email address | On registration |
| Owner WhatsApp Business phone number | On registration |
| Plugin version, WordPress version, WooCommerce version, PHP version | On registration and periodic plan/version checks, for support and compatibility purposes |
| Subscription/plan status and billing reference (via Lemon Squeezy) | When a paid plan is purchased or renewed |
Our servers automatically log standard technical information for security and diagnostics, such as IP address, request timestamps, and basic device/browser information, consistent with normal web server logging practices. This information is retained only as long as necessary for security and troubleshooting.
Notify CRM is registered with Meta as a Tech Provider and uses Facebook Login for Business and the WhatsApp Business Platform (Cloud API) so that Store Owners can connect their own WhatsApp Business Account and send order notifications. When a Store Owner uses the "Connect WhatsApp Business" flow (Meta's Embedded Signup), we request the following permissions, solely to provide the features described:
| Permission | What we use it for |
|---|---|
whatsapp_business_messaging | To send order-status WhatsApp messages (order confirmed, processing, shipped, delivered, cancelled, refunded) to the Store Owner's own customers, on the Store Owner's behalf. |
whatsapp_business_management | To let the Store Owner connect/disconnect their WhatsApp Business Account, submit and manage message templates, and view template approval status. |
manage_app_solution | To operate our Tech Provider / Solution Partner relationship so a Store Owner's WhatsApp Business Account can be linked to our app. |
public_profile | To authenticate the person completing the connection flow. |
Where this data is stored: The WhatsApp Business Account connection details and access token generated during this flow are stored locally in your own WordPress database, encrypted at rest. Notify CRM's central servers do not store your WhatsApp access token or the content of the messages sent to your customers.
How this data is used: Platform Data received from Meta is used only to provide the order-notification and template-management features described above and in our Terms of Service. We do not use Platform Data for advertising, and we do not sell or license Platform Data to third parties. We do not use Platform Data to make decisions about eligibility, such as decisions related to employment, credit, insurance, housing, education, or similar.
If Meta requires us to delete Platform Data — for example, because a Store Owner has revoked our app's access or requested deletion — we will delete the corresponding data within the timeframe required by Meta's Platform Terms.
We do not sell personal information. We share information only in the following limited circumstances:
As disclosed to Meta as part of our app review, Notify CRM does not currently use any additional third-party data processors beyond those listed above to process Platform Data received from Meta.
Store registration and account data described in Section 3.1 is stored on servers we operate and secure. WhatsApp connection tokens and messaging content are stored locally within each Store Owner's own WordPress installation, as described in Section 4, and remain under that Store Owner's control and hosting.
We retain account and registration data for as long as a Store Owner's account is active, and for a reasonable period afterward to comply with legal, accounting, or fraud-prevention obligations. A Store Owner may request deletion of their account and associated data at any time by:
Deleting the plugin from a WordPress site does not automatically delete data held on our servers; please use one of the methods above to remove server-side data.
Depending on where you are located, you may have the right to:
To exercise any of these rights, contact us using the details in Section 15. We will respond within a reasonable time and in accordance with applicable law.
We use reasonable administrative, technical, and physical safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction, including encryption of WhatsApp connection tokens at rest and transport-layer encryption (HTTPS/TLS) for data sent to and from our servers. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
Notify CRM is a business-to-business tool intended for use by store owners and administrators. It is not directed at, and we do not knowingly collect personal information from, children under the age of 13 (or the relevant age of digital consent in your jurisdiction).
Notify CRM is operated from Pakistan and may store or process information on servers located in other countries. By using our services, you consent to the transfer of information to countries that may have different data protection laws than your own, where we will continue to protect your information in accordance with this policy.
Our website and dashboard may use essential cookies or similar technologies required for login sessions and basic security. We do not use these cookies for third-party advertising.
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top of this page. Continued use of Notify CRM after changes take effect constitutes acceptance of the revised policy.
If you have questions about this Privacy Policy or how your data is handled, contact: