Privacy Policy

This Privacy Policy is a starting template for NOTIWOO’s early-access launch. Please have it reviewed by legal counsel in your jurisdiction before relying on it as a final, binding document.

Who we are and what this policy covers

NOTIWOO (“NOTIWOO”, “we”, “us”) provides a real-time operations platform for WooCommerce stores. This policy explains what information we collect and how we use it across all of our products:

• The website notiwoo.com and the documentation site docs.notiwoo.com.
• The NOTIWOO app at app.notiwoo.com, including the dashboard, the courier app, the local print service and the desktop versions for Windows and macOS.
• The Notiwoo WordPress plugin that the store installs on its own WooCommerce site, together with its REST API.
• NotiChat, the AI assistant inside the app.
• Public pages generated for a store’s customers, such as order tracking pages and table QR codes.

Our role and the store’s role

For the information of store owners, their team and visitors to our website, NOTIWOO decides how the information is used and is responsible for it.

For the information of a store’s own customers (orders, delivery addresses, loyalty points, WhatsApp consent and similar), the store is responsible for that information and NOTIWOO processes it on the store’s behalf and following its instructions. The store must have its own privacy policy and a valid legal basis for that processing. If you are a customer of a store that uses NOTIWOO, please contact that store first; we will help it answer your request.

Information we collect

Depending on the products you use, we may collect:

• Website and contact form: your name, email address, store name, phone number and message when you write to us, plus technical data such as IP address, browser and pages visited.
• Account and team data: the name, email address and role of the administrator and of each invited employee, sign-in and two-factor authentication data, account status, and a record of important actions such as bulk catalog changes and who made them.
• Store connection data: your store address and the WordPress application password or token used to connect NOTIWOO to your store. These credentials are kept on our servers and are not exposed in the browser.
• Order and catalog data: orders and their status history, the customer information attached to them (name, phone, email, delivery address and notes), products, categories, extras, coupons, tables and related store data synced from WooCommerce.
• Delivery and location data: delivery assignments, the courier’s phone number and location while they share it, and the delivery coordinates that the customer marks at checkout.
• Loyalty data: points balances, tiers, rewards, redemptions, referral codes and campaign history, when the store enables its loyalty program.
• Messaging data: phone numbers, WhatsApp consent and the status of each notification.
• NotiChat data: the questions your team writes, the business data needed to answer them, conversations, saved memories and generated reports.
• Support and usage data: messages you send us, and information about how the app is used, for support and product improvement.

How we use information

We use the information above to:

• Provide, operate and maintain NOTIWOO, including real-time order notifications, order flow, deliveries, tables, loyalty, printing, statistics and catalog management.
• Authenticate users, apply each role’s permissions and protect accounts.
• Send the notifications the store has enabled, such as order emails and WhatsApp messages.
• Respond to support requests and communicate with you about your account, billing and service changes.
• Monitor, secure and improve the performance and reliability of the service.
• Understand how visitors use our website, through aggregated analytics.
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your data, or the data of your customers, to third parties, and we do not use your store’s customer data to advertise to them.

The Notiwoo WordPress plugin

The plugin runs on the store’s own WordPress site. The data it manages (operation settings, schedules, extras, tables, loyalty accounts and order details) is stored in the store’s own database, under the control of the store.

The plugin only sends data outside the store in these cases:

• To the NOTIWOO app: through the REST API and the standard WooCommerce webhooks that the store connects, so orders and catalog changes appear in real time.
• To Google Maps Platform: the store and delivery addresses or coordinates, to calculate distance and delivery fees, using the Google keys the store configures.
• To the NOTIWOO messaging service: the phone number and order details needed for a WhatsApp notification, only when WhatsApp is enabled and the customer has accepted it.

On the store, the plugin uses the WooCommerce session to remember the selected table, and a referral cookie for up to 30 days when the loyalty program is active. Stores should mention these features in their own privacy and cookie policies.

Deliveries, location and order tracking

A courier’s location is only collected after the courier accepts to share it and allows location access in their browser. While a session is active, the location is sent about every 20 seconds, for a maximum of four hours. The courier can stop sharing at any time, and the store administrator can turn off tracking for the whole store.

When an order is on its way, the customer can receive a private tracking link. The tracking page shows the order steps, the courier’s name and an approximate, rounded location. It does not show the customer’s phone number or address, and the live location is removed when the delivery ends. Anyone with the link can see this information, so it should not be shared publicly.

WhatsApp notifications

WhatsApp notifications are sent through the NOTIWOO central service on the WhatsApp Business Platform operated by Meta. They are only sent to people who have given their consent, and they include only the information needed for the notification, such as the order number, status and tracking link. Anyone can stop receiving them by replying STOP or BAJA.

A courier’s consent to receive messages is managed separately from their consent to share location.

NotiChat and AI providers

When your team uses NotiChat, the question and the business data needed to answer it are sent to the AI provider selected for your store: Anthropic (Claude), OpenAI or Google (Gemini). Conversations, reports and memories are stored in your account so your team can use them again, and they can be deleted with the controls in the app.

The free services of some providers, including Gemini, may use inputs and outputs to improve their products. Please review the provider’s terms before entering sensitive data. Do not enter passwords, keys, payment information or unnecessary personal data in NotiChat.

NotiChat never applies a change on its own. Every proposed change must be reviewed and confirmed by a person, and it is limited by that person’s role and permissions.

Service providers and international transfers

We share information with service providers that help us run NOTIWOO, under confidentiality obligations and only to the extent necessary:

• Supabase: authentication, database, real-time updates and server functions for the app.
• AI providers: Anthropic, OpenAI and Google, for NotiChat.
• Google: Maps Platform for maps, routes and distances, and Google Analytics for website statistics.
• Meta: the WhatsApp Business Platform, for WhatsApp notifications.
• Hosting and email providers: for our website, documentation and service emails.

Some of these providers process data in countries other than yours, including the United States. When we transfer data internationally, we rely on the safeguards offered by those providers and by applicable law.

We may also disclose information when required by law, or as part of a merger or sale of our business, in which case this policy will continue to protect it.

Data retention

We retain account, team and store connection data for as long as your NOTIWOO account is active. Courier location is kept only as long as needed to operate and review deliveries, and the live location on the tracking page is removed when the delivery ends. The undo history of bulk catalog changes is available for 7 days.

If you cancel your account, we will delete or anonymize your data within a reasonable period, unless we are required to retain it for legal reasons. Data stored by the plugin stays in your WordPress database until you delete it.

Data security

We use reasonable technical and organizational measures to protect your information against unauthorized access, loss or misuse. They include encrypted connections, two-factor authentication, role-based permissions, store credentials kept on the server, signed requests between the plugin and our messaging service, and private codes in tracking links.

No online service can guarantee perfect security. Use a strong, unique password, keep your WordPress application passwords private and suspend employees who no longer need access.

Your rights

Depending on where you and your business are located, you may have the right to access, correct, update, export or delete your personal information, to object to or limit certain uses, and to withdraw your consent at any time. These rights may come from laws such as Colombia’s Law 1581 of 2012, the European GDPR or similar regulations.

To exercise these rights, contact us at contact@notiwoo.com. If your request concerns data that a store manages through NOTIWOO, we will forward it to that store and help it respond.

Cookies and similar technologies

Our website uses essential cookies to work properly and Google Analytics cookies to understand, in aggregate, how visitors use it. You can block or delete cookies in your browser settings.

The NOTIWOO app uses browser storage to keep you signed in and to remember preferences such as language and light or dark mode. The plugin cookies used on a store are described in the plugin section above. We do not use advertising cookies.

Children’s privacy

NOTIWOO is a business tool intended for store owners and their teams. It is not directed at children, and we do not knowingly collect personal information from children.

Changes to this policy

We may update this Privacy Policy as NOTIWOO evolves. We will post the updated version on this page with a new “last updated” date and, for important changes, we will notify account administrators.

Contact us

If you have questions about this Privacy Policy or how we handle your data, contact us at contact@notiwoo.com or +57 (315) 462-3757.