Privacy Policy

We collect the following types of information:

• Account Information: Name, email address, phone number, and business details provided during registration.
• Business Content: Product listings, menus, pricing, images, and other content you upload.
• Usage Data: Pages visited, features used, and interaction logs within the platform.
• Customer Data: Information about your customers that is processed through our platform (e.g., WhatsApp interactions).
• Technical Data: IP address, browser type, device information, and cookies.

• To provide, operate, and maintain the elfclick platform.
• To personalize your experience and improve our services.
• To communicate with you about updates, support, and promotions.
• To manage your subscription and enforce platform access based on your plan.
• To comply with legal obligations.

elfclick uses AI to power automated WhatsApp responses, catalog suggestions, and business insights. When these features are active, your business content (product listings, rules, descriptions) and your customers' conversation messages are sent to Anthropic, PBC (makers of Claude) via their API solely to generate responses. Anthropic's API does not use your data to train AI models. We do not sell your data to any third party for AI training purposes.

We share data with the following trusted third parties to operate our platform. Each is bound by a data processing agreement or equivalent contractual obligation:

• Meta Platforms, Inc. (WhatsApp Business API): Routes WhatsApp messages between your business and your customers. Subject to Meta's Business Terms.
• Anthropic, PBC: Processes conversation history and business content to generate AI responses. Data is not used for model training.
• Vercel, Inc.: Hosts the elfclick dashboard application (app.elfclick.com). May process request data (IP address, session tokens) for serving the application.
• Fly.io: Hosts the messaging automation service. Processes inbound WhatsApp webhooks and outbound message delivery.
• Neon, Inc.: Provides the PostgreSQL database where your account data, orders, products, and customer interactions are stored. Data is encrypted at rest.
• Upstash, Inc.: Provides Redis-based rate limiting and deduplication. Temporarily stores anonymized request identifiers (IP addresses, message IDs) with short TTLs.

We do not sell your personal data or your customers' data to any third party for advertising or marketing purposes.

We implement industry-standard security measures to protect your data, including encryption, access controls, and secure servers. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

We retain your account data (business information, catalog, orders, customer interactions) for as long as your account is active. Following account closure, we retain data for up to 2 years for legal, tax, and dispute-resolution purposes, after which it is securely deleted. You may request earlier deletion by contacting us at support@elfclick.com.

As a Canadian business subject to the Personal Information Protection and Electronic Documents Act (PIPEDA), we are committed to the following:

• Right to access: You may request a copy of the personal information we hold about you. We will respond within 30 days.
• Right to correction: You may request correction of inaccurate or incomplete personal information.
• Right to deletion (self-serve): You may permanently delete your account and all associated data directly from your dashboard — go to Settings → Delete Account. Deletion is immediate and irreversible. We retain only information required by applicable law (e.g., tax records) for the legally mandated retention period, after which it is securely purged.
• Withdrawal of consent: You may withdraw consent to certain data uses at any time, which may affect your ability to use some features.
• Right to complain: If you believe your privacy rights have been violated, you may lodge a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca or by calling 1-800-282-1376.

To exercise any of these rights or to request deletion by email, contact us at support@elfclick.com. We will verify your identity before processing requests.

We use cookies and similar tracking technologies to enhance your experience. You can control cookie settings through your browser, though disabling cookies may affect platform functionality.

elfclick is not intended for children under the age of 13. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete it.

Your information may be transferred to and processed in countries other than Canada, including the United States, where our sub-processors operate. We ensure appropriate contractual safeguards are in place for such transfers in accordance with PIPEDA requirements.

elfclick complies with Canada's Anti-Spam Legislation (CASL). We will only send commercial electronic messages (such as product updates or promotional communications) with your express or implied consent.

WhatsApp opt-in for your customers: When a customer first messages your business through elfclick, they receive a notice explaining that your business may send them follow-up messages and that they can opt out at any time. Customers may opt out of business-initiated messages by replying STOP to any message sent from your elfclick storefront. Once a customer sends STOP, no further follow-up, reorder reminder, or broadcast message will be sent to them. Your customers can re-opt in by initiating a new conversation.

You may unsubscribe from elfclick's own marketing communications at any time by contacting support@elfclick.com. Transactional messages (order confirmations, security alerts) are sent regardless of marketing preferences.

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the platform. Continued use after changes take effect constitutes your acceptance.

If you have any questions or concerns about this Privacy Policy, or to exercise your privacy rights, please contact our Privacy Officer:

support@elfclick.com
elfclick · Ontario, Canada

We will acknowledge your inquiry within 5 business days and respond fully within 30 days as required by PIPEDA.