Privacy Policy — Viru

Last updated: April 18, 2026

1. Introduction

Viru is a Shopify application that helps merchants grow sales through WhatsApp sharing at checkout.

2. Data we collect

Shopify store domain and access tokens, app settings configured by the merchant, and order data from the orders/paid webhook used only for billing.

3. Data we do not collect

We do not collect personal data from shoppers, WhatsApp numbers, message content, or shopper behavior beyond the checkout session.

4. How we use data

Store settings are saved as Shopify metafields. Order data is used solely to calculate usage-based billing charges. Authentication tokens are stored securely for authorized Shopify API calls.

5. Data sharing

We do not sell, trade, or share merchant or shopper data with any third parties.

6. Data retention

Merchant data is retained while the App is installed. When a merchant uninstalls the App, session data is deleted automatically.

7. Third-party services

Shopify API for authentication and discount management. WhatsApp (wa.me) for shopper sharing — we have no access to WhatsApp data. Railway for app hosting.

8. Security

All data is transmitted over HTTPS. API credentials are stored as environment variables and never exposed publicly.

9. Contact

For privacy questions contact: hi@nirajkanjani.com