Privacy Policy

01Who we are

Yudoo ("we", "us") is operated from Egypt. For the personal data of your customers, the merchant (you) is the data controller and Yudoo acts as your data processor: we process that data only to deliver the service you configured.

For questions about this policy, contact us at contact@yudoo.io.

02Data we collect

Only what the features you enable require:

• Account data — on Shopify: store details from Shopify (domain, name, contact email, country, currency, timezone, plan). On the dashboard: your name, email, phone number, store name and link, and your password (stored only as a one-way hash), or your name, email and profile picture if you sign in with Google. For team members you invite: name, email, role and session records.
• Store and order data — from the store you connect: the access keys the platform issues, and orders with their number, status, totals, payment method, items, shipping and delivery status. On some platforms also abandoned carts and products.
• Customer data — name, phone number, email address, shipping address and order history, for the customers your messages are sent to.
• Message data — the WhatsApp, Instagram, Messenger, Email and SMS messages sent and received through your connected channels, their delivery status, and any replies or button taps.
• Connected services — the keys you enter for SMS providers, AI providers, couriers, payment gateways and review apps, and the records needed to run them.
• Billing data — your plan and its payments. On the dashboard, card payments are handled by Paymob; we keep only the last 4 digits and the transaction reference, never the card number.
• Technical data — IP address, device and browser type, sign-in sessions and error logs, used to keep the service secure and working.

03How we use it

We do not sell your data. We do not use your customers’ personal data to advertise to them, and we do not use it to train AI models.

• To send the messages you configured — order confirmations, shipping updates, abandoned-cart reminders, back-in-stock alerts, review requests, campaigns and similar automations.
• To show you the results — delivery status, replies, Inbox conversations and reporting.
• To create shipments, take payments and pass on reviews through the services you connect.
• To operate, secure and support the service, including diagnosing errors.
• To bill your plan — through Shopify on the Shopify app, through Paymob on the dashboard.

04WhatsApp, Instagram and Meta

Yudoo runs on the official WhatsApp Business Platform (Cloud API) and Meta’s Instagram and Messenger APIs. When a message is sent, its content and the recipient’s phone number or account are transmitted to Meta so it can be delivered, and Meta processes that data under its own terms and privacy policy.

WhatsApp conversation fees are charged by Meta directly, not by Yudoo.

05SMS, Email and the AI Agent

• SMS — sent through the SMS provider account you connect (for example SMS Misr, Twilio, Unifonic, Infobip, Vonage, Cequens, Taqnyat, Msegat, 4jawaly, Deewan, OurSMS or kwtSMS). Yudoo has no SMS account of its own: the provider receives the message and the phone number, bills you directly and processes the data under its own terms.
• Email — Inbox emails are delivered through Resend, from your own verified domain or, until you add one, from a shared Yudoo address with replies going to your store.
• AI Agent — optional. When you turn it on with your own Anthropic, OpenAI or Google key, the conversation, the customer’s orders and the product and policy information it needs to answer are sent to that provider, under its terms and your account with it.

06Who we share data with

We share data only with the service providers that make the product work:

• Meta Platforms — WhatsApp, Instagram and Messenger delivery.
• Your store platform — Shopify, Salla, Zid, EasyOrders or WooCommerce, to read orders and update them.
• Services you connect — SMS providers, AI providers, couriers, payment gateways and review apps, each receiving only the data it needs.
• Shopify — billing for the Shopify app. Paymob — card payments on the dashboard.
• Google — only when you choose Sign in with Google.
• Railway — application and database hosting.
• Cloudflare — content delivery, protection, and encrypted database backups.
• Resend — email delivery (verification codes, alerts and the Email channel).
• Sentry — error monitoring for the Shopify app.

We may disclose information when the law requires it.

07Where data is stored

Data is hosted with Railway and served through Cloudflare. For the Shopify app it is hosted in the European Union (Amsterdam), and encrypted database backups are stored with Cloudflare in the EU and deleted automatically after 30 days.

Access tokens and the keys of every connected platform, channel and service are encrypted at rest (AES-256-GCM). All traffic runs over HTTPS.

08How long we keep it

• While your app is installed or your account is active, we keep your store and message data so the automations, Inbox and reporting work.
• Shopify app — when you uninstall, Shopify notifies us and we delete your store’s data, including messages, conversations and connected credentials, within 48 hours. When a customer erasure request reaches us through Shopify, we delete that customer’s personal data.
• Dashboard — when you delete your account (Settings → Delete account), your account and every store account it opened are deleted. Disconnecting a store or channel stops it immediately but keeps your data so you can reconnect.
• Encrypted backups roll off automatically 30 days after they are taken. Records we must keep by law, such as payment records, are kept only as long as the law requires.

09Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict processing, and to complain to a data protection authority.

If you are a shopper and want your data removed, the fastest route is to contact the store that messaged you. You can also email us at contact@yudoo.io and we will act on it.

See our Data Deletion

10Security

Access tokens and platform credentials are encrypted at rest, all traffic is encrypted in transit, and access to production systems is limited to those who need it. No system is perfectly secure, but if a breach affects your data we will notify you without undue delay.

11Cookies

The Yudoo app, dashboard and this website use only strictly necessary cookies and storage — to keep you signed in, remember your language and display currency, and protect the service. We do not use advertising cookies or cross-site tracking.

12Children

Yudoo is a business tool and is not directed at children. We do not knowingly collect data from anyone under 16.

13Changes to this policy

If we make a material change, we will update the date at the top of this page and, where it affects you meaningfully, tell you inside the app or by email.

14Contact

Questions, requests or complaints: contact@yudoo.io.