Privacy Policy

01Who we are

Waslio Connect (“we”, “us”) is based in the United Arab Emirates. We are the controller of the personal data described in this policy. One exception: when Waslio Courier handles a store’s customer data, the merchant is the controller and we process that data on the merchant’s behalf.

Contact for privacy questions and requests: founder@waslioconnect.com.

Products marked “coming soon” on this site (Waslio Odoo Connector, Competitor Prices, Ctrl Z: Store Activity & Undo and Waslio ZATCA E-Invoicing) are not yet available. If you ask about them, we treat your message as a website enquiry (see section 2). We will update this policy before any of them launches.

02Website and enquiries

Visiting the website

The website is hosted by Netlify. Like any web server, it processes your IP address, browser details and the pages you request, so it can deliver and secure the site. Our pages load fonts from Google Fonts, so Google also receives your IP address and browser details when a page loads.

Cookies and analytics

We only load analytics after you accept them in the banner. If you decline, they don’t run. Your choice is saved in your browser’s local storage, and you can change it at any time with “Cookie settings” in the footer. If you decline after accepting, we remove the Google Analytics and Clarity cookies for this site.

• Google Analytics 4 (Google) counts visits, pages viewed, traffic sources, campaign tags and a small set of named events, such as starting a form or clicking through to an app store. Google Signals and ad personalisation are turned off, and advertising storage is denied. We send page addresses without query strings. We never send form answers, email addresses or free text to analytics. See Google’s privacy policy.
• Microsoft Clarity (Microsoft) provides heatmaps and session recordings that show where visitors get stuck. Our forms are marked for masking, so what you type is not recorded. See Microsoft’s privacy statement.

We don’t use advertising or cross-site tracking cookies, and we don’t sell website-visitor data.

Live chat

The chat widget is provided by Crisp (France). It stores a functional identifier to keep your conversation together. It also processes the messages and any contact details you choose to share. We are notified of new chat messages so we can reply quickly (see service providers). See Crisp’s privacy policy.

Project briefs

When you send a project brief, we collect the business context, goals, service interests, indicative budget, timing and contact details you choose to give. We use them to assess the project, reply to you and arrange a first conversation. Sending a brief does not subscribe you to marketing emails or book a meeting automatically.

Briefs are processed and stored by Netlify Forms, which also sends us an email notification. We may record the referring website and campaign tags to understand where enquiries come from. Please don’t include passwords, payment details or confidential customer information.

Contact form

The contact form collects your name, email address, the topic you choose and your message. It is handled by Netlify Forms in the same way as project briefs, and we use it only to reply to you.

Courier setup requests

If you ask for help setting up Waslio Courier, we collect your store address, your email address and, if you choose to give it, a WhatsApp number. We use them to contact you about the setup. If you give us a WhatsApp number, we may message you there, and WhatsApp (Meta) handles those messages under its own terms.

Workbook requests

When you request a workbook, we send your email address to Brevo, which delivers the files and records your request in a workbook list. Marketing consent is optional and recorded separately. Downloading alone does not subscribe you to marketing. We keep a timestamp, your consent choice and the notice version. To limit abuse, we keep hashed (scrambled) versions of your email address and network address for rate limiting.

Your choices

You can ask us to correct or delete an enquiry, a chat conversation or a workbook request, or withdraw marketing consent, at any time by emailing founder@waslioconnect.com.

03Waslio Courier

Waslio Courier is our Shopify app for courier dispatch and delivery tracking. When a merchant installs it, the app processes data on the merchant’s behalf to arrange and track deliveries.

Information the app collects

• Store information: store domain, store name, store contact email and the permissions granted at install (read and write orders and fulfilments). The app does not request access to customer accounts or payment details.
• Order information: order numbers, delivery addresses, order tags, payment status and delivery-slot attributes, for orders the merchant dispatches or has auto-dispatch evaluate.
• Customer information within orders: the recipient’s name, shipping address, coordinates and phone number. This is collected only to arrange the delivery.
• Courier account credentials: API keys the merchant enters for their own courier accounts (noon Send, Careem Express, Quiqup and others). They are encrypted with AES-256-GCM before storage and are never logged or shared.
• Map settings: the merchant’s chosen map provider and, if needed, their own map API key, encrypted in the same way.
• Delivery events: courier status updates, the rider’s name and phone number and their location during an active delivery, and optional customer delivery ratings.
• Support messages: messages a merchant sends from the app’s Help & support page, with their reply-to email, and conversations in the in-app chat (provided by Crisp, tagged with the store domain).

How information is used

• To create delivery tasks with the couriers the merchant has connected. The recipient’s name, address, coordinates and phone number go to the selected courier so the rider can complete the delivery.
• To turn addresses into map pins using the merchant’s chosen provider (Google Maps, 2GIS or OpenStreetMap Nominatim). The delivery address is sent to that provider.
• To show live delivery status to the merchant and, through an unguessable tracking link, to the order’s recipient.
• To update the order’s fulfilment status in Shopify, and, if the merchant chooses, to tag orders and trigger Shopify’s customer notification emails.
• To produce the merchant’s own delivery analytics.
• To remember a confirmed map pin for an address so future deliveries to the same address are accurate (“pin memory”).

We do not sell or rent any data, or use customer data for advertising. We do not contact a store’s customers for any purpose other than showing their delivery tracking page.

Merchant onboarding emails

For new installations, we use the store contact email to send a welcome email and relevant setup or first-dispatch help. We store the recipient encrypted and record installation and email stages so we don’t send duplicates. Development stores are excluded. Optional product tips are only sent if the merchant opts in under the app’s email preferences. Installing the app is not treated as marketing consent. Every onboarding email includes a link to stop them. Uninstalling stops queued emails and removes the stored recipient, and Shopify’s shop-redaction request deletes the onboarding history.

These emails go through a signed server connection from DigitalOcean to Netlify, and then to Brevo. Brevo receives the recipient address and the email content. The relay keeps hashed event identifiers and delivery states to prevent duplicates, without storing recipient addresses. We respect unsubscribes recorded in Brevo, and we do not add merchants to a marketing list automatically.

Sharing

• Couriers: delivery details are shared with the courier that the merchant, or the merchant’s routing rules, selected for that order. Each courier processes that data under its own privacy policy.
• Map providers: delivery addresses are sent to the geocoding provider the merchant chose.
• Infrastructure: the app is hosted on DigitalOcean (EU region), with its database on Neon (EU region). Both act as data processors.
• Merchant email delivery: Netlify and Brevo process the store contact email to deliver the onboarding messages described above. These emails contain no order or customer delivery data.

Retention and deletion

• Delivery records are kept while the app is installed, so merchants keep their history and analytics.
• On uninstall, the app’s access tokens are deleted and queued onboarding emails are cancelled straight away.
• When Shopify sends its customers/redact request, the delivery records and dispatch history for that customer’s orders are erased.
• When Shopify sends shop/redact (48 hours after uninstall), all of the store’s data is deleted, including settings, encrypted courier credentials, deliveries, address pins, support messages and analytics.
• When Shopify sends customers/data_request, we give the merchant the delivery data held for that customer.

Security

All traffic is encrypted in transit (TLS). Courier credentials and map-provider keys are encrypted at rest with AES-256-GCM. Tracking pages use random, unguessable tokens and never display the full delivery address or payment details.

04Resume Downloader

Resume Downloader is our Chrome extension for saving applicant resumes from LinkedIn hiring pages. It has its own detailed policy: Resume Downloader privacy policy. In summary:

• Resumes and applicant names are processed in your browser and saved to your computer. They are not sent to us.
• Licensing and payments are handled by ExtensionPay, and payments are processed by Stripe.
• If you start a trial or buy Pro, the email address you give, your plan status and your trial usage count pass through our server to Brevo, so we can send onboarding and product emails. Every email has an unsubscribe link.
• When a Pro payment succeeds, we receive a private notification with the amount and invoice reference only.

Resumes you download contain candidates’ personal data. You are responsible for storing and using them lawfully.

05Waslio for Odoo mobile

Waslio for Odoo mobile has its own privacy policy and terms of use. In summary, your Odoo data travels between your phone and your Odoo server, not through us. The only things that reach services we use are crash reports (through Sentry, which you can switch off, kept for up to 90 days) and app update checks (through Expo).

06Odoo payment connectors

The Checkout.com Payment Connector and the noon Payments Connector are Odoo modules sold through the Odoo Apps Store. Odoo S.A. processes your purchase under its own terms and privacy policy.

The connectors are installed in your own Odoo and connect it to your own account with the payment provider. Customers enter their card details on the provider’s hosted checkout. Your Odoo and your payment provider process the payment and order data, and your Odoo administrator decides how long it is kept. If you contact us for setup support, we handle what you send us as described in section 2.

07Service providers

We use the following providers to run the website and our products. Each one only receives the data it needs for the purpose shown.

Some of these providers process data outside the United Arab Emirates, for example in the European Union or the United States.

08How long we keep data

• Enquiries, briefs and chat conversations: as long as we need them to deal with your enquiry and any work that follows, or until you ask us to delete them.
• Workbook requests and email contacts: until you ask us to delete them. Unsubscribes are kept so we don’t email you again.
• Analytics: under the retention settings of Google Analytics and Microsoft Clarity. Nothing is collected without your consent.
• Waslio Courier: while the app is installed. Everything is deleted when Shopify sends its shop-redaction request after uninstall (see section 3).
• Resume Downloader and Waslio for Odoo mobile: as described in their own policies.

09Your rights

Depending on where you live (for example under the UAE Personal Data Protection Law or the EU and UK GDPR), you can ask to access, correct or delete your personal data. You can also object to or restrict how we use it, ask for a copy to take elsewhere, and withdraw consent at any time. Withdrawing consent doesn’t affect anything we did before.

We use your data because you asked us to (for example to reply to an enquiry or deliver a workbook), to provide a product you use, because you consented (analytics and optional marketing), or for our legitimate interest in running and securing our services.

Email founder@waslioconnect.com and we will reply within 30 days. If you are a store’s customer, we may pass your request to the store, because the store is the controller of your order data. You can also complain to your local data protection authority.

10Children and changes

Our website and products are business tools and are not directed at children.

We will update this page when our practices change and change the date at the top. Material changes are also noted in the changelog.