Privacy Policy.

1. Who operates Shopzito

Shopzito ("we", "our", "us") is operated by DYNEEMADEV LIMITED (the "Operator"), which provides Shopzito as a service within its wider business operations. Contact information appears in Section 12 below. The Operator is registered in England and Wales, under company number 17504944, with its registered office in East Ham, London.

Participating businesses ("Merchants") connect their authorized Instagram professional accounts to use Shopzito’s conversation, order coordination and automation tools. A Merchant may independently determine which customer interactions and order details are needed for its sales process. The Operator processes information to operate Shopzito and, where applicable, on the Merchant’s instructions.

2. Scope of this policy

This policy addresses information relating to (a) merchants and their authorized account administrators, (b) individuals who communicate with a participating merchant via Instagram DMs, and (c) people who visit the Shopzito website or contact our team.

Instagram and Meta operate their own services and maintain separate privacy practices. Individual merchants may also maintain their own policies for their products, deliveries, refunds and customer records.

3. Information that may be processed

• Merchant account details: business name, authorized administrator contact information, account preferences, connected professional account identifiers, permissions and technical connection status.
• Instagram interaction data: relevant account identifiers, usernames or profile information made available by the authorized platform connection, inbound and outbound messages, timestamps, attachments and conversation-related events, only as needed for the enabled service.
• Commerce and support information: customer-provided product selections, quantities, order references, contact or delivery details provided within the shopping flow, order status and customer-service requests.
• Automation configuration: merchant-defined triggers, templates, responses and workflow history needed to deliver and troubleshoot the enabled automation.
• Service and security records: login and activity events, device/browser information, IP addresses, error logs and communications with support, where generated by the service.
• Payment-related records: an order/payment reference or status when transmitted by a merchant’s payment integration. Payment-card credentials are handled by the relevant payment provider, not entered into Shopzito’s message automation as payment-card data.

Not all categories apply to every user. Processing depends on the Merchant’s enabled features and the permissions granted to the connected account.

4. How we use information

• Authenticate authorized merchants and connect their eligible Instagram business/professional accounts through supported platform mechanisms.
• Deliver merchant-configured conversations, product discovery, order coordination, payment handoff, tracking and customer support.
• Run messaging automation according to merchant settings and applicable platform rules.
• Display related data in the merchant dashboard and enable team operations.
• Secure accounts, detect misuse, investigate technical faults and provide support.
• Comply with legal requirements and requests for access, correction or deletion where applicable.

We do not use Instagram messages or contact details for unrelated marketing or data brokerage. The service must be configured and operated in accordance with the permissions and policies that apply to its platform integrations.

5. Legal bases and roles

Where a law requires a legal basis for processing, the relevant basis may include performance of a contract, legitimate interests in operating and protecting the service, legal obligations, or consent where that is required. The correct basis depends on the information and jurisdiction.

Merchants may act as the primary decision-makers for customer transaction records and communications, while the Operator provides technical processing on their behalf. The Operator may separately determine the purposes of account administration, its own website, service security and support records. These roles should be confirmed against each Merchant agreement and applicable law.

6. Who may receive information

Relevant information may be accessible to the Merchant and its authorized staff; to hosting, infrastructure, support and security service providers acting under appropriate instructions; and to a payment, delivery or messaging integration used by the Merchant where necessary to complete the requested workflow. Certain information also necessarily passes through Meta/Instagram as the platform delivering DMs.

We do not sell Instagram platform data or use it for unrelated advertising. We do not disclose customer conversations to other merchants. Information may also be disclosed when required by law, subject to the applicable legal process.

7. Data retention

Information is retained only for as long as needed to provide the configured service, meet legitimate operational or security needs, comply with applicable obligations or resolve disputes. Retention depends on the record type and Merchant relationship. Platform-derived information should be removed when no longer needed or when required by a valid deletion request or platform policy, unless a lawful exception requires limited retention.

8. Security

We take the security of personal information seriously. Security controls for the Shopzito service should include appropriate access restrictions, protected transmission, credential handling and operational safeguards. No online service can guarantee absolute security. Report suspected unauthorized access via [email protected]. Do not send passwords, access tokens, or payment-card numbers by email.

9. Your choices and rights

Depending on applicable law and your relationship to Shopzito, you may request access to, correction of or deletion of personal information, object to certain processing, or withdraw consent where processing relies on consent.

If you are a customer of a merchant, that merchant may also be responsible for handling transaction records under its own privacy notice. You may contact either the merchant or the Shopzito Operator about Shopzito-related data. We will assess the request, verify it where necessary and coordinate with the relevant merchant when appropriate.

For detailed deletion instructions, visit Shopzito Data Deletion.

10. Location of processing

Shopzito and relevant service providers may operate in different jurisdictions. International transfers, where applicable, must meet the requirements of relevant data protection laws. For information about locations relevant to your account, contact us at [email protected].

11. Changes and third-party services

We may update this notice when the service, law or integrations change. The date above reflects the last policy revision. The operation of Instagram and payment-provider services is also governed by their own terms and notices. Shopzito is an independent product and is not endorsed by or affiliated with Meta or Instagram.

12. Contact and privacy requests

For privacy questions, complaints, access requests, correction or deletion, contact the Shopzito Operator using the verified address below. For deletion, use the subject line Shopzito Data Deletion Request.