Skip to content

CONVEXA Privacy Policy

Last updated: 17 October 2026

Last updated: October 17, 2026

This privacy policy explains how CONVEXA (the "App", getconvexa.com), developed by UNIQUE GAME STUDIO BILISIM HIZMETLERI SAN. VE TIC. LTD. STI. ("Unique Game Studio", "we"), collects, uses, stores and protects personal data. It is prepared with regard to the GDPR, the Turkish Personal Data Protection Law (KVKK), the CCPA, and Meta's Platform Terms and Developer Policies.

1. About the App

CONVEXA is an e-commerce integration that lets Shopify merchants communicate with their customers via the WhatsApp Business Platform and Instagram (Direct messages and comments). Merchants can send order notifications, view and reply to messages in a single inbox (web and mobile app), and optionally enable AI-assisted automatic replies.

2. Data Controller

  • Company: UNIQUE GAME STUDIO BILISIM HIZMETLERI SAN. VE TIC. LTD. STI.

  • Address: Ünalan Mah. Libadiye Cad. No:82 Emaar Square Sit. E Blok Kat 29 Daire:291 Üsküdar/Istanbul, Türkiye

  • Email: privacy@uniquegamestudio.com

  • Phone: +90 534 981 76 05

3. Data We Collect

3.1 Data received from Shopify

  • Store information: store name, domain, country, currency.

  • Order data: order number, products, amount, payment and shipping status.

  • Customer information: first and last name, phone number, email, shipping address.

  • Product and FAQ content: so the AI assistant can answer accurately about the store.

3.2 Data received from Meta (Platform Data)

  • WhatsApp Business Platform: WhatsApp Business account and phone number information, message templates, customer phone numbers and profile names, content and media of sent and received messages, and message statuses.

  • Instagram: the username and ID of the connected Instagram professional account and Facebook Page, Direct messages received by that account and replies, comments on the account's posts and replies, and the Instagram username and ID of people who message or comment.

  • Facebook Login: the merchant's Facebook user ID and name — only to connect accounts.

  • Access tokens: tokens required to call Meta APIs.

3.3 Data we do not collect

  • Credit card or payment details (payments are processed by Shopify).

  • Facebook or Instagram profiles, posts or friend lists other than the connected accounts.

  • Browsing history or precise (GPS) location.

4. How We Use Data

  • To send order, shipping and payment notifications to customers on behalf of the merchant.

  • To let merchants view and reply to messages and comments customers send via WhatsApp and Instagram.

  • If the merchant has enabled it, to generate automatic replies to incoming messages with AI (see Section 5).

  • To send the merchant mobile notifications about new messages.

  • To operate, secure and troubleshoot the App, and to produce only aggregated statistics that cannot be re-identified.

We do not sell or rent Platform Data received from Meta, and we do not use it to build advertising profiles or for third-party marketing.

5. Data Sharing and Service Providers

Data is shared only to the extent necessary to provide the service, with the following service providers:

  • Hetzner Online GmbH (Germany): application servers, database, media files and encrypted backups.

  • DeepSeek (China), Mistral AI (France/EU), OpenAI (USA): when the AI auto-reply feature is enabled, the customer's message, relevant conversation history and order details are sent to one of these providers to generate a reply. Store product and FAQ content is embedded for search with Mistral or OpenAI.

  • Expo (650 Industries, USA), Apple and Google: to deliver new-message push notifications to the mobile app (customer name and message preview).

  • Meta Platforms (WhatsApp, Instagram) and Shopify: to deliver messages and receive store data.

  • SendGrid (USA): transactional emails to merchants only; no Meta message content.

We do not share data with public authorities unless legally required. Requests from public authorities are reviewed for legality, challenged if considered unlawful, answered with the minimum necessary data, and documented.

6. International Transfers

Data is stored on servers in Germany. Because of our AI and notification providers, data may be transferred to servers in the USA, the EU and China. Such transfers are made with the safeguards required by the KVKK and the GDPR.

7. Security

  • All data in transit is encrypted with HTTPS/TLS; Meta webhook signatures are verified.

  • The database is reachable only from the server's internal network and is not exposed to the internet.

  • Database backups are encrypted with AES-256.

  • Only authorized personnel can access the servers.

8. Retention

  • Messages and conversations: 35–120 days depending on the merchant's plan, then deleted automatically.

  • Media files: 1–30 days depending on the plan.

  • Access tokens and connection data: deleted when the App is uninstalled.

  • Encrypted database backups: 14 days.

  • Other store data: deleted after uninstallation upon Shopify's data erasure request.

9. Data Deletion Instructions

  • Merchants: when you uninstall CONVEXA from your Shopify admin, your connection data, tokens, conversations and messages are deleted; remaining store data is deleted upon Shopify's data erasure request.

  • Facebook/Instagram/WhatsApp users and customers: email privacy@uniquegamestudio.com with the subject "Data Deletion Request" and include your phone number or Instagram username. Requests are completed within 30 days and you will receive a confirmation.

10. Your Rights

Under Article 11 of the KVKK and the GDPR you have the right to know whether your data is processed, and the rights of access, rectification, erasure, restriction, objection and data portability. California residents may also exercise their rights under the CCPA. Send requests to privacy@uniquegamestudio.com.

11. Changes

Changes to this policy are published on this page and the "Last updated" date is revised.

12. Contact

For privacy questions: privacy@uniquegamestudio.com

Back to home