Privacy Policy

1. Overview

MatrixInn Solutions (“we”, “us”, or “our”) builds browser extensions and software products. This Privacy Policy applies to all our products, including MatrixInn PiP and MatrixInn Privacy for WhatsApp.

We are committed to protecting your privacy. Our extensions are designed to work locally in your browser without collecting, transmitting, or storing any personal data on our servers. Our website (matrixinnsolutions.com) does process some data, such as contact form submissions and chatbot conversations; this is described in the Website Privacy & Cookies section below. The WA Float WhatsApp Button and CODsafe Shopify apps are covered in their own sections at the end of this page.

2. Data Our Extensions Do NOT Collect

Our extensions do not collect, store, or transmit:

• Personal identification information (name, email, phone number)
• Browsing history or activity logs
• Content of messages, chats, or media viewed
• Passwords or authentication credentials
• Financial or payment information
• Location data

3. Local Storage Only

Our extensions use chrome.storage.sync to save your preferences (such as which blur options are enabled, or whether auto-PiP is on). This data is:

• Stored locally in your browser via Chrome’s built-in storage API
• Synced across your own devices if you are signed in to Chrome (by Google — not us)
• Never sent to MatrixInn Solutions servers
• Only contains your toggle preferences — no personal data

4. Permissions Explained

MatrixInn PiP

• activeTab — Needed to interact with videos on the current tab
• scripting — Needed to inject the hover button into pages
• storage — Needed to save your PiP preferences
• Access to all websites — Needed so the hover button and the Alt+P shortcut can find the video on whichever site you are watching. The extension does not read, store or transmit page content or browsing history.

MatrixInn Privacy for WhatsApp

• activeTab — Needed to apply blur styles to WhatsApp Web
• scripting — Needed to inject privacy CSS into the page
• storage — Needed to save your privacy toggle preferences

5. Third-Party Services

Our browser extensions do not integrate with or send data to any third-party analytics, advertising, or tracking services. We do not use Google Analytics, Firebase, or any remote data collection in the extensions. (Our website uses some third-party services, listed in the website section below.)

Website Privacy & Cookies

This section covers our website (matrixinnsolutions.com), separate from our browser extension products above.

Cookies and similar technologies

We use cookies and similar technologies on our website to analyse traffic. We do not show ads. A consent banner is shown on your first visit, with “Accept all”, “Reject all” and “Customize” options, so you can decide whether to allow Analytics. Until you choose, it is off, and Google Analytics only loads after you allow it. Through Google Consent Mode our site also tells Google that advertising cookies and ad personalisation are not allowed. Your choice is stored in your browser’s local storage for 12 months, and you can change it at any time from the “Cookie settings” link at the bottom of every page.

Google Analytics

We use Google Analytics 4 to understand how visitors use our website. Analytics cookies are only set after you allow Analytics in the cookie banner or Cookie settings. IP anonymisation is enabled in our Google Analytics configuration. You can opt out of Google Analytics entirely using the Google Analytics opt-out browser add-on.

Contact and project forms

When you submit our contact or project-start form, we collect the details you enter (name, email, subject, message, and optional project type, budget, timeline, company and how you found us). This is stored in our website database and emailed to us so we can reply. The database copy keeps only an anonymised IP address (last part zeroed); the notification email sent to us includes the IP address the form was submitted from. We use this data only to respond to your enquiry. We do not currently apply an automatic deletion schedule; you can ask us to delete your data at any time (see Contact Us).

Google reCAPTCHA Enterprise

Our forms are protected by Google reCAPTCHA Enterprise to prevent spam and abuse. It collects hardware and software information (such as device and application data) and sends it to Google for analysis. Use of reCAPTCHA is subject to Google’s Privacy Policy and Terms of Service.

AI chatbot (Anthropic Claude)

Our website includes an AI chat assistant. Messages you type into it are sent to the Anthropic Claude API to generate replies, and are subject to Anthropic’s Privacy Policy. We store chat conversations in our website database together with your full IP address and a session identifier so we can review and improve the service. If you choose to leave your name, email, phone number or a note in the chat, that lead is stored and may be reviewed by us to follow up. Please do not enter sensitive personal information in the chat.

Fonts

The fonts on this website (Bricolage Grotesque, Hanken Grotesk and JetBrains Mono, all open-source) are served from our own server, so loading a page does not send your IP address to Google Fonts.

Social sharing and hosting

We may share our own blog posts and company content on LinkedIn using the Buffer scheduling service; this involves only our own content, not visitor data. Our website is hosted on shared hosting provided by Namecheap, which processes server logs (such as IP address and requested pages) as part of providing hosting.

How to manage or delete cookies

You can withdraw consent and delete cookies at any time by:

• Opening Cookie settings and switching categories off (this also removes our Google Analytics cookies)
• Clearing cookies for this site in your browser settings
• Clearing local storage for this site (where your consent preference is stored)
• Using your browser's incognito / private mode
• Installing the Google Analytics opt-out add-on

6. Transparency

Want to verify these claims? Email contact@matrixinnsolutions.com and we will walk you through exactly what each extension does and which permissions it uses.

7. Children’s Privacy

Our extensions, apps and website are not directed at children under the age of 13. We do not knowingly collect any information from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. Continued use of our extensions after any changes constitutes acceptance of the new policy.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us:

A. What This App Does

WA Float WhatsApp Button is a Shopify app that adds a floating chat button to your storefront. When a customer clicks the button, WhatsApp opens on their device with a pre-filled message — connecting them directly to your WhatsApp number. No servers. No middleware. No data logged.

B. Data We Store

We store only the settings you enter in the app dashboard, as Shopify shop-level metafields:

• Your WhatsApp phone number
• Your pre-filled message text
• Button appearance preferences (color, position, visibility)
• Your billing plan status (Free or Starter)

We do not collect, access, or store:

• Customer names, email addresses, or phone numbers
• Customer order or purchase data
• Storefront analytics or click tracking
• WhatsApp conversation content
• Payment card details (billing is handled by Shopify)

C. Session Data

To authenticate with your Shopify store, the App uses Shopify’s standard OAuth 2.0 flow. A session record containing your shop domain, access scopes, and an encrypted access token is stored in our application database solely to maintain the authenticated session. This record contains no customer personal data and is automatically purged when you uninstall the App.

D. Third-Party Services

Shopify — The app is built on Shopify. Your store data is governed by Shopify’s Privacy Policy.

WhatsApp (Meta) — Clicking the button opens WhatsApp via a wa.me link. No data passes through our servers. Conversations are governed by WhatsApp’s Privacy Policy.

E. GDPR Compliance

This app complies with GDPR mandatory webhook requirements. When you uninstall the app, your settings are automatically deleted within 48 hours. We respond to customers/data_request, customers/redact, and shop/redact webhooks as required by Shopify. No customer-identifiable data is ever stored. No cookies or tracking pixels are injected by the App into your storefront.

F. Security

We follow Shopify’s security best practices, including OAuth 2.0 authentication, HTTPS-only communication, and HMAC validation for all webhook payloads. No payment information or customer personal data is ever handled by the App.

G. Data Deletion

Uninstalling the app deletes all your settings automatically. For an immediate deletion request, email us at support@matrixinnsolutions.com.

H. Contact (App-Specific)

A. What This App Does

CODsafe is a Shopify app that automatically sends a WhatsApp verification message to customers when they place a Cash on Delivery (COD) order. The customer can confirm or cancel their order in one tap via WhatsApp. Unverified orders are auto-cancelled after a configurable timeout. This helps merchants reduce fake orders and delivery losses.

B. Data We Store

We store the following data in our application database on a per-shop basis:

• Shop settings — Your Meta WhatsApp API credentials (Phone Number ID, Access Token), verification timeout duration, and subscription plan
• Order records — Shopify order ID, order number, order amount, and customer phone number (from the order), used solely to send and track the verification message
• Verification status — Whether each order was verified, cancelled, or pending
• Blacklist — Phone numbers you manually add to block repeat fake-order customers

We do not collect or store:

• Customer names, email addresses, or home addresses
• WhatsApp message content beyond the structured reply (confirm / cancel)
• Payment or card details (billing is handled entirely by Shopify)
• Any data from customers who do not place a COD order

C. How Customer Phone Numbers Are Used

When a COD order is placed, Shopify sends the order data — including the customer’s phone number — to our server via a webhook. We use this phone number solely to send one WhatsApp verification message via the Meta WhatsApp Business API. The number is stored temporarily to track the verification status. It is not used for marketing, shared with third parties, or retained after the shop uninstalls the app.

D. Session Data

To authenticate with your Shopify store, the app uses Shopify’s standard OAuth 2.0 flow. A session record containing your shop domain, access scopes, and an encrypted access token is stored in our application database solely to maintain the authenticated session. This record is automatically purged when you uninstall the app.

E. Third-Party Services

Shopify — The app is built on Shopify. Your store and order data are governed by Shopify’s Privacy Policy.

Meta WhatsApp Business API — Verification messages are sent through your own Meta WhatsApp Business Account using credentials you provide. Customer phone numbers are transmitted to Meta in order to deliver the message. This is governed by WhatsApp’s Privacy Policy and Meta’s Privacy Policy. We do not use a shared Meta account — messages are sent via your WABA credentials.

F. GDPR & Shopify Compliance

CODsafe complies with Shopify’s mandatory GDPR webhook requirements. We respond to customers/data_request, customers/redact, and shop/redact webhooks as required. When you uninstall the app, all shop data including order records, settings, and the blacklist is automatically deleted within 48 hours. No cookies or tracking scripts are injected into your Shopify storefront.

G. Data Deletion

Uninstalling CODsafe from your Shopify store deletes all associated data automatically. For an immediate deletion request or to request a copy of your data, email us at support@matrixinnsolutions.com.

H. Contact (CODsafe App)