Stockline Labs

Privacy Policy

Effective date: October 5, 2026 · Last updated: October 5, 2026

This Privacy Policy explains how Stockline Labs (“Stockline Labs”, “we”, “us”) collects, uses, stores and protects personal data when you visit stocklinelabs.website or use our apps, including StockChat WA (together, the “Services”).

1. Who we are (data controller)

Stockline Labs is operated by Luis Fernando Souza Navarro, an individual (persona física) based in Culiacán, Sinaloa, Mexico, who is responsible for the processing of personal data described in this policy. Contact: lic.fersouza@gmail.com.

For data about a store's own customers processed through StockChat WA, the Shopify merchant who installs the app decides why that data is processed and acts as the controller (in Mexico, the responsable); Stockline Labs processes that data on the merchant's behalf as a processor (encargado). For merchant account data, Stockline Labs acts as controller.

2. Data we process

CategoryDataSource
WhatsApp customer dataThe customer's WhatsApp phone number, profile name as provided by WhatsApp, and the content of messages exchanged with the merchant's WhatsApp business number (text, and media where sent).Meta WhatsApp Cloud API, when a customer messages a merchant that uses StockChat WA.
Conversation logsRecords of messages, replies and timestamps for each conversation, including handoff status.Generated by the Service.
Merchant Shopify dataProduct and inventory data (titles, variants, prices, images, product URLs, stock levels), store domain and the access token issued by Shopify. Accessed with the read-only scopes read_products and read_inventory.Shopify Admin API, after the merchant installs the app.
Merchant contact & configurationStore name, contact email, WhatsApp Business account identifiers and app settings.The merchant, Shopify and Meta.
CommunicationsEmails and information you send us when you contact us.You.
Technical logsStandard server logs (such as IP address, request time and URL) kept by our hosting provider for security and operation.Your browser or device.

We do not request read access to orders, customers or payment data in Shopify for StockChat WA. This website does not use cookies, analytics or tracking technologies.

3. How we use data

  • To receive customer WhatsApp messages and reply on the merchant's behalf with real-time product availability, prices, photos and product links from the merchant's Shopify catalog.
  • To hand off a conversation to a human on the merchant's team when needed.
  • To store conversation logs so the merchant can review conversations and so the Service can maintain context and work correctly.
  • To operate, secure, troubleshoot and improve the Services, and to provide support.
  • To comply with legal obligations and with Shopify and Meta platform requirements.

Legal bases (where GDPR or similar laws apply): performance of a contract with the merchant, our legitimate interest in operating and securing the Services, compliance with legal obligations, and consent where required. Merchants are responsible for obtaining any required opt-in from their customers before contacting them on WhatsApp.

4. No sale of data

We do not sell personal data and we do not share it for cross-context behavioral advertising. We do not use customer messages or merchant data for advertising.

5. Who we share data with

  • Meta Platforms (WhatsApp Cloud API) — to send and receive WhatsApp messages. Meta's processing is also governed by WhatsApp's and Meta's own terms and policies.
  • Shopify — to read the merchant's product and inventory data through the Shopify Admin API.
  • Fly.io — our hosting provider, where the StockChat WA application (https://stockchat-wa.fly.dev) and its data are hosted.
  • The merchant — conversation logs are available to the merchant whose store the customer contacted.
  • Authorities — when required by law or to protect rights, safety and security.

Our service providers process data only on our instructions and to provide their services to us.

6. International transfers

We operate from Mexico and our providers may process data in other countries, including the United States. When data is transferred internationally, we rely on our providers' contractual commitments and safeguards and take steps so your data receives an adequate level of protection.

7. Retention

  • Conversation logs and WhatsApp customer data are kept only while the merchant uses StockChat WA and as needed to provide the Service. They are deleted when the merchant uninstalls the app (see below), when the merchant requests it, or when a valid deletion request is received.
  • Merchant Shopify data is read in real time and only cached as needed to operate. When a merchant uninstalls StockChat WA, Shopify sends us a shop/redact request (48 hours after uninstall) and we delete the store's data, including conversation logs, within 30 days.
  • Customer requests through Shopify (customers/redact and customers/data_request) are fulfilled within 30 days.
  • Emails you send us are kept as long as needed to respond and for our records.
  • We may keep limited information longer when required by law or to resolve disputes.

8. Security

We use encryption in transit (HTTPS/TLS), access controls, least-privilege API scopes and secure storage of credentials. No method of transmission or storage is 100% secure, but we work to protect your data.

9. Your rights

Depending on where you live, you may have the right to:

  • Access, rectify, cancel (delete) or oppose the processing of your personal data (ARCO rights under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties, LFPDPPP), and to revoke your consent or limit the use or disclosure of your data.
  • GDPR (EU/EEA/UK): access, rectification, erasure, restriction, portability and objection, and to lodge a complaint with your local supervisory authority.
  • CCPA/CPRA (California) and similar U.S. state laws: know, access, delete and correct personal information, and not be discriminated against for exercising your rights. We do not sell or share personal information as defined by these laws.

How to make a request: email lic.fersouza@gmail.com with the subject “Privacy request” (or “Data deletion request” to delete data), indicating your name, the right you want to exercise, and the WhatsApp phone number or store involved. We may ask for information to verify your identity. We respond within 20 business days as required by the LFPDPPP and, in any case, within the time limits required by applicable law (for example, one month under GDPR or 45 days under CCPA). If your data was processed on behalf of a merchant, we may forward your request to that merchant and assist them. See also our data deletion instructions.

10. Children

The Services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this Privacy Policy. We will post the new version on this page and update the “Last updated” date. If changes are significant, we will notify merchants by reasonable means.

12. Contact

Stockline Labs · Luis Fernando Souza Navarro (persona física) · Culiacán, Sinaloa, Mexico · lic.fersouza@gmail.com

A Spanish version of this policy is available at /es/privacy/.