Privacy Policy

Controller: Gestivon Software Solutions (Punctual), Portugal. This marketing site does not use account registration forms. If you contact us via WhatsApp, Meta processes that conversation under Meta’s terms; we use your messages only to respond to demo or sales requests. We may use privacy-friendly analytics (page views, referrers) without selling personal data. Shopify app (Punctual Commerce): When a merchant installs the app, we process shop domain, offline/session tokens, and App Bridge session JWTs to authenticate Admin API calls. For shopper chat we process messages, optional locale, and page context needed to answer. Order status lookups use order number + checkout email verified against Shopify Order.email (read_orders). Product, inventory, discount, and store content scopes power catalog and policy answers. Chat transcripts may be stored for merchant inbox/handoff. We honour Shopify GDPR webhooks (customers/data_request, customers/redact, shop/redact) and app/uninstalled cleanup. We do not sell personal data. DPA and access/deletion requests: privacy@punctual.pt.