Last update: 24 June, 2026
Who we are
This app ("bKlug WhatsApp Icon", the "App") is provided by MENSAGENS ELIPTICAS - LDA. (trading as "bKlug"), a company registered in Portugal, Tax Identification Number PT517467739, with registered address at Rua Sousa Martins, n. 15, 5, 1050-217 Lisbon, Portugal.
For the limited data this App processes, bKlug acts as a data processor on behalf of the merchant (the Nuvemshop store owner), who is the data controller for their store.
What the App does
The App lets a Nuvemshop merchant add a floating WhatsApp button to their storefront. The button is configured by the merchant in the App's admin panel (phone numbers, prefilled messages, contacts, color, position) and is injected on every storefront page via Nuvemshop's Script Tag API.
Data we collect
From the merchant (on install and use)
When a merchant installs the App, Nuvemshop provides us with, and we process, the store's identifier and basic store information, an access token used to authenticate the App with the Nuvemshop API, and the configuration the merchant enters for the button (phone numbers, prefilled messages, contact names, display settings).
We do not request access to, collect, or store the merchant's customer records, orders, or product data.
From storefront visitors (shoppers)
None. The WhatsApp button runs entirely in the shopper's browser. When a shopper taps it, their device opens WhatsApp using a standard WhatsApp link. The App does not set cookies, does not track visitors, and does not send any visitor personal data to bKlug.
Why we process this data (legal basis)
We process the limited merchant and store data above to provide the App the merchant installed and to keep it functioning. The legal basis is the performance of a contract and our legitimate interest in operating the service under the LGPD (Lei Geral de Protecao de Dados, Brazil) and the GDPR (General Data Protection Regulation, EU).
Sub-processors
Nuvemshop provides the app platform and authentication. Neon, Inc. provides serverless PostgreSQL database hosting used to store merchant access tokens and widget configuration. Vercel, Inc. provides application hosting and deployment. Each processes data only as needed to provide its service.
Data retention
We retain the store access token and configuration only while the App is installed. When the merchant uninstalls the App, we record the uninstall date and cease using the access token. Associated store data is deleted or anonymized within 30 days, except where we are legally required to retain it.
Data subject rights
Storefront visitors: because the App collects no visitor personal data, there is no visitor data for us to access, correct, or delete.
Merchants and individuals whose data we process may request access, correction, deletion, or portability, and may object to or restrict processing, by contacting us at contact@bklug.ai. We respond to Nuvemshop's mandatory store/redact, customers/redact, and customers/data_request webhooks; because we do not store shopper personal data, our response to those requests confirms that no such data is held.
International transfers
Data may be processed in the European Union, the United States, and other countries where our sub-processors operate. Where data leaves the EU or EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
Security
We use industry-standard measures to protect the limited data we process, including encrypted transport (HTTPS), access controls on our hosting environment, and role-based access controls on the database.
Changes to this policy
We may update this policy as the App changes. The "Last update" date above reflects the latest version. Material changes will be communicated through the App listing.
Contact
MENSAGENS ELIPTICAS - LDA. (bKlug), Rua Sousa Martins, n. 15, 5, 1050-217 Lisbon, Portugal. Email: contact@bklug.ai.
Affiliation
bKlug is an independent app and is not affiliated with, endorsed by, or sponsored by WhatsApp LLC, Meta Platforms, Inc., or Nuvemshop. WhatsApp and Nuvemshop are trademarks of their respective owners.