PRIVACY POLICY FOR META BUSINESS MESSAGING PLATFORM
Effective Date: October 6, 2026
Lemon Code Solutions Sdn Bhd (“Lemon Code Solutions,” “we,” “us,” or “our”) provides a business messaging platform that enables businesses (“Business Clients,” “Clients,” or “you,” when referring to a client) to communicate with their own customers via WhatsApp and Instagram. This Privacy Policy explains how we collect, use, disclose, and protect personal information in connection with our platform (the “Service”), including data belonging to our Business Clients and to the end customers who message our Business Clients through WhatsApp or Instagram.
1. Who We Are
Lemon Code Solutions Sdn Bhd (Company No. 202401000823 (1546674-D)) is a company incorporated in Malaysia. We operate as a technology provider (“Tech Provider”) under Meta’s WhatsApp Business Platform and Instagram Messaging API, giving our Business Clients tools to manage their own customer conversations, message templates, and WhatsApp/Instagram Business Accounts. Our registered address is D461, JALAN DUTAMAS 4, TAMAN DUTAMAS CHERAS, 43300 BALAKONG SELANGOR MALAYSIA.
2. The Two Kinds of Data We Process
Because we operate a messaging platform on behalf of other businesses, it’s important to distinguish between the data of our direct Business Clients and the data of their end customers.
2.1 Business Client Data (businesses that use our Service)
When a business signs up to use our Service, we collect:
- Business and account details: company name, business contact information, branch/location details
- Staff login credentials and access permissions for our admin dashboard
- WhatsApp Business Account / Instagram Business Account identifiers and access tokens, obtained through Meta’s Embedded Signup or OAuth login, which we store securely to send and receive messages on the Business Client’s behalf
- Message templates, automation settings, and configuration the Business Client creates within our platform
For this data, Lemon Code Solutions is the data controller.
2.2 End Customer Data (people who message our Business Clients)
When an end customer messages one of our Business Clients on WhatsApp or Instagram, or when a Business Client messages that end customer (e.g., a booking confirmation or reminder), our platform processes:
- The end customer’s WhatsApp phone number or Instagram account identifier (e.g., username or ID)
- The end customer’s display/profile name, as provided by WhatsApp or Instagram
- The content of messages exchanged, including text, images, and files
- Delivery/read status and conversation timestamps
For this data, we act as a data processor / service provider on behalf of our Business Client, who is the data controller responsible for deciding how their own customers’ data is used. We process this data only to operate the Service for that Business Client — for example, delivering messages, displaying conversation history in their dashboard, and (where a Business Client has configured it) matching a conversation to that Business Client’s own existing customer records, such as by phone number, so their staff can respond with relevant account context.
We do not use end customer message content for our own advertising or marketing purposes, and we do not combine one Business Client’s customer data with another’s.
2.3 Information Collected Automatically
When you visit our website or use our dashboard, we may collect device and usage data (IP address, browser type, pages visited) and use cookies — see Section 7.
3. How We Use Information
- To operate, maintain, and improve the Service, including message delivery, template management, and conversation storage
- To provide support to our Business Clients
- To authenticate and manage Business Client accounts and staff access
- To detect, prevent, and address fraud, abuse, or security issues
- To comply with legal and regulatory obligations, and with Meta’s Platform Terms
4. How We Share Information
- Meta Platforms, Inc. — WhatsApp and Instagram are provided by Meta. Messages are transmitted through Meta’s infrastructure in accordance with Meta’s own terms (see https://www.whatsapp.com/legal/privacy-policy and https://privacycenter.instagram.com/policy).
- Infrastructure and sub-processors — cloud hosting and infrastructure providers who help us run the Service, under confidentiality obligations.
- Each Business Client — only has access to their own end customers’ conversations and data; we maintain logical separation between Business Clients.
- Legal and safety — where required by law, regulation, legal process, or governmental request.
- Business transfers — in connection with a merger, acquisition, or sale of assets, subject to standard confidentiality arrangements.
We do not sell personal information.
5. Data Retention
We retain Business Client account data and end customer conversation data for as long as the Business Client’s account is active and as necessary to provide the Service, plus any period required for legal, accounting, or dispute-resolution purposes. A Business Client may request deletion of their account and associated data; an end customer who wants their conversation data deleted should generally contact the business they messaged directly, who may in turn instruct us to delete it.
6. Your Rights
Subject to applicable law, including Malaysia’s Personal Data Protection Act 2010:
- Business Clients may request access to, correction of, or deletion of their account data by contacting us directly (Section 9).
- End customers of a Business Client should direct requests about their personal data to that business in the first instance, as they are the data controller; we will assist our Business Clients in responding to such requests. End customers may also stop receiving messages at any time by blocking the business’s WhatsApp/Instagram account or replying “STOP.”
7. Cookies
Our website and dashboard use cookies to remember preferences and understand usage. You can control or disable cookies through your browser settings; doing so may affect some functionality.
8. Data Security
We implement reasonable administrative, technical, and physical safeguards to protect personal information from unauthorized access, loss, misuse, or alteration, including secure storage of Meta access tokens and encrypted transmission. No method of transmission or storage is completely secure.
9. Contact Us
Lemon Code Solutions Sdn Bhd
D461, JALAN DUTAMAS 4, TAMAN DUTAMAS CHERAS, 43300 BALAKONG SELANGOR MALAYSIA
Email: [email protected]
Phone: +603 7652 2826
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated version here with a revised Effective Date.
EXPIRY & INVENTORY TRACKER PRIVACY POLICY
Expiry & Inventory Tracker “the App” provides features that manage your slow moving and close to expiry products “the Service” to merchants who use Shopify to power their stores. This Privacy Policy describes how personal information is collected, used, and shared when you install or use the App in connection with your Shopify-supported store.
Personal Information the App Collects
When you install the App, we are automatically able to access certain types of information from your Shopify account:
Get access token API
Request access token on registration to access API
Get shop details API
Get shop details such as shop name, email, subdomain and default currency
Get webhooks API
Get existing webhooks created in shop
Create webhook API
Create webhook for events:
App uninstalled
Shop update
Products create
Products update
Products delete
Order create
Order updated
Order cancelled
Order deleted
Location create
Location update
Location delete
Customer update
Update webhook API
Update webhook if existing was found
Get products API
Get products data for App operation
Get product API
Get single product data for App operation
Get product variant API
Get product variant data for inventory adjustment
Update product variant API
Update product variant price on product discount
Get shop metafields API
Get shop metafields for store-end displaying product expiry settings
Create shop metafield API
Create shop metafield for product expiry display flag
Update shop metafield API
Update shop metafield for product expiry display flag if existed
Get product variant metafields API
Get product variant metafields for product expire date
Create product variant metafield API
Create product variant metafield for product expire date
Update product variant metafield API
Update product variant metafield for product expire date if existed
Delete product variant metafield API
Delete product variant metafield if expire date unset
Get inventory levels API
Get inventory level for product variant for item stock details (available quantity, is item stocked)
Adjust inventory level API
Adjust inventory level on App operation (batch)
Get order API
Get order details for printing packing slip
Get locations API
Get available locations for products stock
Get recurring charge API
Get charge details for plan upgrade confirmation
Create recurring charge API
Create charge on plan upgrade requested
Delete recurring charge API
Delete recurring charge when unsubscribe plan
Merchant/Shop data
Products data
Metafields data
Inventory levels data
Warehouse locations data
Webhooks data
Additionally, we collect the following types of personal information from you and/or your customers once you have installed the App:
No data collected individually from merchant during registration, all gotten through Shopify APIs
Other information
——————
Batch information
App settings
Information about you and others who may access the App on behalf of your store, such as your name, address, email address, phone number, and billing information;
Orders information
——————–
ID
Order number
Customer information
Status
Fulfillment status
Amount
Items (products)
Refund info
Customers information
———————–
ID
Name
Email address
How Do We Use Your Personal Information?
We use the personal information we collect from you and your customers in order to provide the Service and to operate the App. Additionally, we use this personal information to: Communicate with you; Optimize or improve the App; and Provide you with information or advertising relating to our products or services.
Data Retention When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information.
Changes We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.
Contact Us For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at [email protected] or by mail using the details provided below:
D461, JALAN DUTAMAS 4, TAMAN DUTAMAS CHERAS, 43300 BALAKONG SELANGOR MALAYSIA