Last update: 23 June, 2026
Who we are
This app ("bKlug WhatsApp Button", the "App") is provided by MENSAGENS ELÍPTICAS - LDA. (trading as "bKlug"), a company registered in Portugal, Tax Identification Number PT517467739, with registered address at Rua Sousa Martins, nº 15, 5, 1050-217 Lisbon, Portugal.
For the limited data this App processes, bKlug acts as a data processor on behalf of the merchant (the Shopify store owner), who is the data controller for their store.
What the App does
The App lets a Shopify merchant add a floating WhatsApp button to their storefront. The button is configured by the merchant in the Shopify theme editor (phone number, prefilled message, contacts, color, position) and is rendered on the storefront on the visitor's own device.
Data we collect
From the merchant (on install and use)
When a merchant installs the App, Shopify provides us with, and we process, the store's myshopify domain and basic store identification, an access token or session credential used to authenticate the App with Shopify, and the configuration the merchant enters for the button (phone numbers, prefilled messages, contact names, display settings).
We do not request access to, collect, or store the merchant's customer records, orders, or product data beyond what is needed to run the App.
From storefront visitors (shoppers)
None. The WhatsApp button runs entirely in the shopper's browser. When a shopper taps it, their device opens WhatsApp using a standard WhatsApp link. The App does not set cookies, does not track visitors, and does not send any visitor personal data to bKlug. Any message a shopper then sends is handled by WhatsApp under WhatsApp's own privacy terms, not by this App.
Why we process this data (legal basis)
We process the limited merchant and store data above to provide the App the merchant installed and to keep it functioning. The legal basis is the performance of a contract and our legitimate interest in operating the service under the GDPR.
Sub-processors
Shopify Inc. provides the app platform, authentication, and storage of the button configuration in the store's theme settings. Railway Corp. provides application hosting and deployment of the App's backend. Each processes data only as needed to provide its service.
Data retention
We retain the store identification and session data only while the App is installed. When the merchant uninstalls the App, we delete or anonymize the associated store data within 30 days, except where we are legally required to retain it. Button configuration stored in the store's theme settings is removed by the merchant or by uninstalling.
Data subject rights
Storefront visitors: because the App collects no visitor personal data, there is no visitor data for us to access, correct, or delete. Requests about messages sent through WhatsApp should be directed to WhatsApp.
Merchants and individuals whose data we process may request access, correction, deletion, or portability, and may object to or restrict processing, by contacting us at contact@bklug.ai. We respond to Shopify's mandatory data-request, customer-redact, and shop-redact webhooks; because we do not store shopper personal data, our response to customer-data and customer-redact requests confirms that no such data is held.
Marketing communications
When a merchant installs the App, Shopify provides bKlug with the store's contact details. We may use them to contact the store with occasional offers and updates about bKlug's other products and services.
You can opt out at any time by emailing contact@bklug.ai. We honor opt-out requests and comply with applicable anti-spam and data-protection law.
International transfers
Data may be processed in the European Union and in other countries where our sub-processors operate. Where data leaves the EU or EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
Security
We use industry-standard measures to protect the limited data we process, including encrypted transport (HTTPS) and access controls on our hosting environment.
Changes to this policy
We may update this policy as the App changes. The "Last update" date above reflects the latest version. Material changes affecting how we process data will be communicated through the App listing.
Contact
MENSAGENS ELÍPTICAS - LDA. (bKlug), Rua Sousa Martins, nº 15, 5, 1050-217 Lisbon, Portugal. Email: contact@bklug.ai.
Affiliation
bKlug is an independent app and is not affiliated with, endorsed by, or sponsored by WhatsApp LLC or Meta Platforms, Inc. WhatsApp is a trademark of its respective owner.