Privacy Policy

01 Scope of this Policy

This Privacy Policy describes how Mynameiskalam, operating under Online Peeps Media in Kochi, Kerala, India (“We”, “Us”, “Our”) collects, uses, and discloses Your information when You use Our Services. By using the Services, You agree to the collection and use of information in accordance with this Policy.

This Policy applies to:

• Our Website — mynameiskalam.com and related subdomains.
• Our Chrome Extensions — browser extensions published on the Chrome Web Store, including WA Lead Pilot, CookieKiller, Ghost Audience Revealer, NotifyOne, and the CarDosti News extension.
• Our Shopify Apps — applications published on the Shopify App Store, including Tapwa (tapwa.app).
• Our Product Websites — landing pages and marketing sites such as tapwa.app, cardosti.com, and any other domains linked to our products.

Where a specific product has additional or more restrictive terms, those product-specific terms (set out below) apply in addition to, and where in conflict prevail over, the general terms of this Policy.

02 Interpretation & Definitions

Interpretation

Capitalized words have the meanings defined below. The following definitions apply whether they appear in singular or plural form.

Definitions

• Account — a unique account created for You to access a Service or parts of it.
• Company (or “We”, “Us”, “Our”) — Mynameiskalam, operating under Online Peeps Media, based in Kochi, Kerala, India.
• Cookies — small files placed on Your computer, mobile device, or any other device by a website or application.
• Country — Kerala, India.
• Device — any device that can access the Services, such as a computer, mobile phone, or tablet.
• Extension — any browser extension We publish, including WA Lead Pilot, CookieKiller, Ghost Audience Revealer, NotifyOne, and CarDosti News.
• Shopify App — any application We publish on the Shopify App Store, including Tapwa.
• Merchant — a Shopify store owner or administrator who installs one of Our Shopify Apps.
• End Customer — a visitor or shopper interacting with a Merchant’s storefront where Our Shopify App is installed.
• Personal Data — any information that relates to an identified or identifiable individual.
• Service Provider — any third party that processes data on behalf of the Company.
• Usage Data — data collected automatically, generated by use of the Services or from the Services infrastructure.
• Website — Mynameiskalam, accessible at mynameiskalam.com.
• You — the individual accessing or using the Services, or the legal entity on behalf of which such individual is acting.

03 Information We Collect

3.1 Personal Data You Provide

While using Our Services, We may ask You to provide certain personally identifiable information, including:

• Email address
• First name and last name
• Phone number
• Billing address and payment information (processed by Our payment providers, not stored by Us)
• Shopify store URL, store ID, and store metadata (for Shopify App users)
• Account credentials and authentication tokens (OAuth) issued by Shopify or Google

3.2 Usage Data

Usage Data is collected automatically when using the Services. It may include Your Device’s Internet Protocol (IP) address, browser type and version, pages visited, time and date of Your visit, time spent on pages, unique device identifiers, and other diagnostic data.

When You access the Services through a mobile device, We may collect the mobile device type, mobile device unique ID, IP address, mobile operating system, mobile browser type, and similar diagnostic information.

3.3 Tracking Technologies & Cookies

We use Cookies and similar tracking technologies on the Website. These include:

• Necessary / Essential Cookies — required for core functionality such as authentication and security.
• Notice Acceptance Cookies — record whether You have accepted the use of Cookies.
• Functionality Cookies — remember choices such as login details, preferences, and language.
• Analytics Cookies — help Us understand Website usage through providers such as Google Analytics.

You may instruct Your browser to refuse all Cookies or to indicate when a Cookie is being sent. Our Chrome Extensions and Shopify Apps do not themselves set tracking cookies in Your browser beyond what is required for authenticated sessions on their respective platforms.

04 Chrome Extensions — Data Practices

This section applies to Our browser extensions distributed via the Chrome Web Store. It supplements — and in case of conflict takes precedence over — the general data practices described elsewhere in this Policy.

4.1 WA Lead Pilot

WA Lead Pilot is a WhatsApp Web overlay that helps users tag and organize conversations.

• What it accesses — runs on web.whatsapp.com pages in Your browser to render its overlay UI and to read conversation metadata (contact names, labels, tags) You choose to organize.
• Where data is stored — tags, notes, and settings are stored locally in the browser via chrome.storage. We do not upload Your WhatsApp messages or contact lists to Our servers.
• Pro / subscription data — if You upgrade to Pro, Your email address and subscription status are processed by Our payment provider (Dodo Payments) to validate Your licence. We store only the minimum identifiers required to verify entitlement.
• AI features — Pro AI features use Chrome’s built-in on-device AI (Gemini Nano). Prompts and responses processed by Gemini Nano do not leave Your device.

4.2 CookieKiller

CookieKiller automatically rejects non-essential cookie consent banners.

• What it accesses — reads and interacts with cookie consent dialogs on pages You visit to click “reject” options based on a local ruleset.
• Where data is stored — rejection statistics and whitelist entries are stored locally on Your device. The extension does not transmit browsing history or page content to Our servers.

4.3 Ghost Audience Revealer

Ghost Audience Revealer visualizes LinkedIn profile-view analytics.

• What it accesses — runs on linkedin.com/analytics/profile-views/ to parse the profile-view data LinkedIn already displays to You, and renders visualizations on top of that data.
• Account & licence data — for Pro and Teams users, We store Your email, subscription tier, and licence key in Our Supabase database. Payments are processed by LemonSqueezy; We do not store Your payment card details.
• Shareable exports — shareable cards are generated in Your browser. If You choose to upload one for hosting, We store only the image file and its expiry metadata.
• CRM export (Teams) — Teams users who connect a CRM explicitly authorize Us to write aggregated profile-view data via OAuth. We do not retain Your CRM credentials beyond the active session.

4.4 NotifyOne

NotifyOne aggregates notifications from supported services (Slack, Gmail, Discord, Zoho CRM, WhatsApp Web, Google Calendar) into a single view.

• What it accesses — reads notification data from supported services You are signed into in Your browser, via their official APIs or visible DOM elements.
• Where data is stored — notification content and OAuth tokens are stored locally in Your browser. Notification content is not transmitted to Our servers.

4.5 CarDosti News Extension

The CarDosti News Extension displays automotive news from cardosti.com.

• What it accesses — fetches published news articles from cardosti.com’s public API. No personal data of the extension user is transmitted to Us beyond anonymous request metadata.
• Where data is stored — category preferences and cached articles are stored locally on Your device.

05 Shopify Apps — Data Practices

This section applies to Our Shopify applications and supplements (and where in conflict prevails over) the general terms of this Policy.

5.1 Tapwa

Tapwa (tapwa.app) is a Shopify app that adds a WhatsApp chat button to a Merchant’s storefront.

5.1.1 Merchant data

When a Merchant installs Tapwa, Shopify shares, and We receive:

• Store name, store URL, store ID, myshopify domain, and shop metadata.
• The name, email address, and locale of the store owner as provided by Shopify.
• OAuth access tokens and scopes granted to the app, stored securely and used solely to operate the app.
• App configuration data You enter within the app, such as WhatsApp number, button position, greeting message, and display rules.

5.1.2 End Customer data

Tapwa is designed to minimize End Customer data collection:

• Tapwa’s storefront component is a client-side widget. It does not read End Customer account details, cart contents, or checkout information from Shopify.
• When an End Customer clicks the WhatsApp button, their browser navigates to wa.me or api.whatsapp.com with the Merchant’s configured number. Subsequent communication happens in WhatsApp and is governed by WhatsApp / Meta’s Privacy Policy, not ours.
• We may record aggregate, non-identifying click metrics (such as total clicks per store per day) so Merchants can see basic usage stats. These metrics do not include End Customer IP addresses, names, or contact details.

5.1.3 GDPR and Shopify mandatory webhooks

As required by Shopify’s Protected Customer Data rules, Tapwa implements the three mandatory compliance webhooks:

• customers/data_request — on receipt, We review any End Customer data associated with the store and respond to the Merchant within the period required by Shopify.
• customers/redact — on receipt, We delete any End Customer personal data associated with the identified customer from our systems.
• shop/redact — 48 hours after a Merchant uninstalls the app, Shopify sends this webhook and We permanently delete the Merchant’s store data and app configuration from our production systems within 30 days (subject to encrypted backups, which are rotated out on their standard cycle).

5.1.4 Uninstall and data deletion

When a Merchant uninstalls Tapwa, OAuth tokens are revoked immediately by Shopify. We retain configuration data only for the period required to process the shop/redact webhook and to comply with legal obligations, after which it is deleted.

06 How We Use Your Personal Data

The Company may use Personal Data for the following purposes:

• To provide and maintain Our Services, including monitoring usage, delivering features You have subscribed to, and providing technical support.
• To manage Your Account — to manage Your registration as a user of the Services.
• For the performance of a contract — development, compliance, and undertaking of the purchase or subscription contract for the products or services You have purchased.
• To contact You — by email, phone, SMS, or other electronic communication regarding updates, security notices, transactional messages, and informative communications.
• To provide marketing communications — about products, services, offers, and events similar to those You have already purchased or enquired about, unless You have opted out.
• To manage Your requests — to attend to and manage requests You make to Us.
• For business transfers — in connection with a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Our assets.
• For analytics and improvement — to understand usage trends, measure campaign effectiveness, and improve Our Services. Where applicable, We use aggregated or anonymized data for this purpose.

07 Sharing of Your Personal Data

We may share Your personal information in the following situations:

• With Service Providers — We may share Your information with Service Providers to operate, monitor, and improve Our Services. Our current Service Providers include:
  • Shopify — app distribution, Merchant authentication, and webhook infrastructure.
  • Google (Chrome Web Store, Google Analytics, Google Workspace) — extension distribution, website analytics, and operational email.
  • Supabase — database and authentication backend for products including Ghost Audience Revealer and CarDosti.
  • Dodo Payments — payment processing for WA Lead Pilot.
  • LemonSqueezy — payment processing and licensing for Ghost Audience Revealer.
  • Stripe — payment processing for services billed through MyNameIsKalam, LLC.
  • Hosting and CDN providers — for delivery of Our websites and product landing pages.
• For business transfers — in connection with a merger, sale of Company assets, financing, or acquisition of all or part of Our business.
• With affiliates — subject to their honoring this Privacy Policy.
• With business partners — to offer certain products, services, or promotions, where necessary to deliver what You have requested.
• With Your consent — for any other purpose disclosed to You.

08 Retention of Your Personal Data

The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Policy. We retain and use Your Personal Data to the extent necessary to comply with Our legal obligations, resolve disputes, and enforce Our legal agreements and policies.

Usage Data is generally retained for a shorter period, except when used to strengthen security, improve the functionality of Our Services, or as We are legally obligated to retain it for longer periods.

For Shopify Apps, We delete Merchant and End Customer data within 30 days of receiving the relevant Shopify shop/redact or customers/redact webhook, except where retention is required by applicable law.

09 Transfer of Your Personal Data

Your information, including Personal Data, is processed at the Company’s operating offices in India and in any other places where the parties involved in processing are located. This means the information may be transferred to — and maintained on — computers located outside Your jurisdiction, where data protection laws may differ from those of Your jurisdiction.

Your consent to this Privacy Policy, followed by Your submission of such information, represents Your agreement to that transfer. The Company will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Policy.

10 Deleting Your Personal Data

You have the right to delete, or to request that We assist in deleting, the Personal Data We have collected about You. You may:

• Delete information directly from within a Service where that functionality is provided (for example, uninstalling an Extension clears locally stored data).
• Contact Us at contact@mynameiskalam.com to request access to, correction of, or deletion of any personal information You have provided.
• Submit a Shopify customers data request through Your Shopify admin, which We will honor via the customers/redact webhook.

We may need to retain certain information when We have a legal obligation or lawful basis to do so.

11 Disclosure of Your Personal Data

11.1 Business Transactions

If the Company is involved in a merger, acquisition, or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.

11.2 Law Enforcement

Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities.

11.3 Other Legal Requirements

The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:

• Comply with a legal obligation.
• Protect and defend the rights or property of the Company.
• Prevent or investigate possible wrongdoing in connection with the Services.
• Protect the personal safety of users of the Services or the public.
• Protect against legal liability.

12 Security of Your Personal Data

The security of Your Personal Data is important to Us. We use commercially reasonable technical and organizational measures to protect Your Personal Data, including encryption of data in transit (HTTPS/TLS), encryption at rest for databases containing credentials and access tokens, principle-of-least-privilege access controls, and regular review of Our third-party sub-processors.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.

13 Your Rights Under GDPR

If You are located in the European Economic Area or the United Kingdom, You have the following rights in respect of Your Personal Data, subject to applicable law:

• The right to access, update, or delete the information We have on You.
• The right of rectification — to have Your information corrected if it is inaccurate or incomplete.
• The right to object to Our processing of Your Personal Data.
• The right of restriction — to request that We restrict the processing of Your personal information.
• The right to data portability — to receive a copy of Your data in a structured, commonly used, machine-readable format.
• The right to withdraw consent at any time where We relied on Your consent to process Your personal information.

To exercise any of these rights, please contact Us at contact@mynameiskalam.com. You also have the right to complain to a data protection authority about Our collection and use of Your Personal Data.

14 Your Rights Under CCPA/CPRA

If You are a California resident, You have the right to:

• Know what personal information We collect, use, disclose, and sell (We do not sell Your personal information).
• Request deletion of Your personal information.
• Request correction of inaccurate personal information.
• Opt out of the sale or sharing of Your personal information (not applicable, as We do not sell or share it for cross-context behavioral advertising).
• Non-discrimination for exercising Your rights.

To exercise these rights, contact Us at contact@mynameiskalam.com.

15 Children’s Privacy

Our Services do not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If You are a parent or guardian and become aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from anyone under the age of 13 without verification of parental consent, We take steps to remove that information from Our servers.

16 Links to Other Websites

Our Services may contain links to other websites that are not operated by Us. If You click on a third-party link, You will be directed to that third party’s site. We strongly advise You to review the Privacy Policy of every site You visit. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services.

17 Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page, updating the “Last updated” date at the top, and, where appropriate, notifying You via email or a prominent notice within the Service prior to the change becoming effective. You are advised to review this Policy periodically for any changes.

18 Contact Us

If You have any questions about this Privacy Policy, or wish to exercise any of Your rights, You can reach out through any of the channels below.