Privacy Policy
Last updated: 15 October 2026
dbcommerce is a WhatsApp commerce platform for businesses in Ghana, run by Doctor Barns Tech. This policy explains what we collect, why, who processes it, and how to have it deleted. Questions go to info@doctorbarns.com.
What we collect
- Account details: name, email, phone and a hashed password.
- Shop data: products, prices, stock, orders, coupons and delivery settings.
- Payment references from Zoe Pay. We never see or store card or Mobile Money PINs.
- Operational logs needed to run and secure the service.
WhatsApp data we receive through Meta
When a business connects its WhatsApp Business account, Meta gives dbcommerce permission to act for that business only. With that permission we receive and store:
- The business’s WhatsApp Business account ID, phone number details, quality rating and messaging limit.
- An access token for that account, stored encrypted (AES-256-GCM).
- Messages between the business and its customers, the customer’s WhatsApp name and number, and message delivery statuses.
- The business’s message templates and their approval status.
- If the business keeps the WhatsApp Business app on its phone, the contacts and recent chat history it chooses to share during setup, and copies of replies it sends from the phone.
We use this data only to provide dbcommerce to that business: showing chats in its inbox, letting its AI agent and staff reply, building orders and pay links, and sending the broadcasts and follow-ups it sets up. We never sell it, use it for advertising, share it with other shops, or use it to train AI models.
Processors
Meta (WhatsApp Cloud API), Zoe Pay (payments), OpenRouter (AI replies, which receives the chat text needed to write a reply), and Moolre (SMS) process data only to deliver those features. dbcommerce runs on servers we operate.
How long we keep it
We keep shop data while the account is open. When a business closes its account or asks for deletion, we delete it within 30 days, except payment records we must keep by law.
Your rights and deleting data
Businesses can ask for an export or deletion of their data at any time. See how to delete your data. Customers of a shop should contact that shop first; the shop controls its customer relationship. Anyone can reply STOP to a broadcast to stop receiving them.