Shopify store
OAuth authorization and verified webhooks
ⓘ
Install from Shopify. Open Whatify Flow from the Shopify Admin or app listing to start OAuth. The store domain is supplied by Shopify; this app does not ask merchants to type it manually. Configure SHOPIFY_API_KEY, SHOPIFY_API_SECRET, and a stable public HTTPS APP_URL on the Laravel server.
Whatify WhatsApp API
External server API · API key is never sent back to the browser
ⓘ
Install Shopify first so Whatify credentials can be securely scoped to this store.
Privacy and safety
Sensitive order/customer fields are encrypted at rest in MySQL.
Shopify customer data requests and redaction events are received on the verified webhook endpoint. WhatsApp sends require a recorded opt-in and currently approved template; STOP/UNSUBSCRIBE opt-outs are stored and suppress future sends. COD non-response is routed to review; automatic cancellations are disabled. Obtain and retain valid consent evidence outside this app.