Privacy Policy

1 Overview & Operating Entity

Welcome to RTOzero.io. We provide an enterprise-grade Cash-on-Delivery (COD) order verification, address validation, GPS resolution, and prepaid conversion platform designed for high-COD e-commerce merchants worldwide.

RTOzero.io is developed, owned, and operated by AppsArchs (appsarchs.com), a technology consulting and software engineering firm registered with the Securities and Exchange Commission of Pakistan (SECP).

2 Operational Roles: Controller vs. Data Processor

To maintain legal precision under global data protection paradigms and electronic commerce standards:

• E-Commerce Merchant as Data Controller: The merchant (store owner) who installs RTOzero.io on Shopify, WooCommerce, or a custom store is the legal controller of their customers' order information.
• RTOzero.io / AppsArchs as Data Processor: We act strictly as a data processor executing automated WhatsApp verification messages, location links, and prepaid discounts solely on behalf of and under instructions from the merchant.

3 Information We Collect & Process

We only process data strictly necessary to verify orders, reduce Return-to-Origin (RTO) courier costs, and facilitate successful order delivery:

A. Information Received from Merchant Stores

• Merchant Profile: Store name, store URL, business email, billing information, and courier configuration tokens.
• Order Metadata: Order ID, product titles, line-item order value and currency, payment method (COD or Prepaid), customer name, shipping address, and phone number.

B. Information Processed via WhatsApp Interactions

• Verification Status: Customer interactive button clicks (e.g., "Confirm Order", "Cancel Order", or "Change Address").
• GPS Coordinates: Accurate latitude and longitude coordinates submitted directly by the customer via WhatsApp pin-drop location sharing to resolve ambiguous or unmapped street addresses.
• Address Adjustments: Landmark notes or revised street addresses provided by the buyer to assist courier delivery riders.

C. Website & Technical Diagnostics

• Standard browser telemetry, device type, and session interactions on our landing page and dashboard handled via Google / Firebase Analytics to improve application performance.

4 Purpose & Legal Basis for Data Usage

We process customer and merchant data exclusively for the following legitimate technical purposes:

• Instant Order Verification: Dispatching interactive WhatsApp Cloud API template notifications within 60 seconds of checkout.
• Address Resolution & Courier Dispatch: Formatting GPS coordinates into secure Google Maps links for logistics riders (Aramex, SMSA, J&T Express, Trax, Leopards, PostEx, etc.).
• Prepaid Payment Conversion: Generating dynamic discounted payment checkout links for supported digital payment gateways (Stripe, Tabby, Tamara, Safepay, PayFast).
• Non-Delivery Report (NDR) Management: Alerting buyers when a courier flags a failed delivery attempt to coordinate an immediate re-attempt.
• Fraud Risk Intelligence: Flagging suspicious high-risk phone numbers exhibiting repetitive multi-store COD cancellations.

5 WhatsApp & Meta Cloud API Compliance

RTOzero.io is built in full compliance with the Meta Developer Terms and the WhatsApp Business Messaging Policy:

• Opt-In Requirement: Order verification notifications are transaction-triggered messages directly relating to an active purchase initiated by the buyer on the merchant's storefront.
• No Promotional Spam: We enforce merchant restrictions prohibiting unverified promotional broadcasts through our transactional verification pipeline.
• User Control: Customers can immediately opt out of automated messaging by responding with "STOP" or "CANCEL" at any time.

6 Authorized Third-Party Sub-Processors

To deliver reliable 24/7 automated messaging and cloud infrastructure, RTOzero.io contracts with trusted enterprise service providers:

7 Data Retention Schedule (90-Day Policy)

We adhere to strict data minimization principles:

• 90-Day Operational Log Purge: Detailed transactional order records, specific customer phone numbers, interactive message replies, and raw GPS pin-drop coordinates are retained for exactly ninety (90) days to facilitate courier dispute reconciliations and NDR resolution, after which they are systematically purged or permanently pseudonymized.
• Aggregated Metrics: Anonymized statistical totals (e.g., monthly RTO rate percentage, verified order volume, cash saved) are retained to provide merchants with historical reporting dashboards.

8 Data Security, Global Standards & PECA Compliance

RTOzero.io operates in alignment with international data security best practices, GDPR alignment principles, and the Prevention of Electronic Crimes Act (PECA 2016):

• Encryption: All data in transit is protected using TLS 1.3 encryption. Sensitive API keys and access tokens are encrypted at rest using AES-256 standards.
• Access Control: Strict role-based access control (RBAC) is enforced. Only authorized automated workers process order payloads.
• Zero Unsolicited Sharing: Under no circumstances is end-customer address or phone number data shared outside the fulfillment requirements of the merchant's designated logistics courier.

9 Merchant & Consumer Rights

In accordance with statutory consumer rights and our processor obligations:

• Right to Erasure / Deletion: A merchant may request the immediate deletion of their historical store verification logs and account data upon offboarding.
• Right to Rectification: End-customers may update their delivery address or pin-drop location directly during the active WhatsApp verification window.
• Merchant Data Portability: Merchants can export their verification history and RTO analytics in standard CSV/JSON format at any time.

Shopify Mandatory Data Protection & GDPR Webhooks

For merchants connecting via the Shopify platform, RTOzero.io strictly complies with Shopify Partner Program requirements, European GDPR, and mandatory platform privacy webhooks:

• Customer Data Request (customers/data_request): When a merchant receives a customer data inquiry, we systematically compile and export all associated WhatsApp verification records and delivery logs.
• Customer Data Erasure (customers/redact): When a customer requests personal data deletion, we purge their phone number, shipping coordinates, and WhatsApp interaction records from our active databases within statutory timeframes.
• Store Redaction & Uninstall (shop/redact): Within 48 hours of receiving a store redaction webhook or app uninstallation notice, all store access tokens, historical verification logs, and associated customer PII are permanently purged.

10 Legal Contact & Inquiries

For any technical support, privacy inquiries, compliance audits, or data deletion requests, please contact our team: