1. Information We Collect
When you use Wasla we may collect:
- Account information: email address, password (hashed), and role
- Profile information: full name, phone number, WhatsApp number, city, gender
- Delivery information: delivery address provided at checkout
- Transaction data: orders placed, products purchased, payment method
- Usage data: pages visited, search queries, cart activity
- For sellers: business name, trade licence details, working hours, subscription records
2. How We Use Your Data
- To create and manage your account
- To process orders and coordinate delivery between buyers and sellers
- To send order confirmations and status updates
- To communicate platform updates and policy changes
- To detect fraud and enforce our Terms of Service
- To generate anonymised analytics that improve the platform
3. WhatsApp Communications
By providing a WhatsApp number on your profile, you consent to receiving order-related notifications via WhatsApp. These messages are transactional (order confirmation, status updates) and are not used for unsolicited marketing. You can withdraw consent at any time by removing your WhatsApp number from your profile settings.
4. Sharing of Data
We do not sell your personal data. We share data only as necessary:
- With sellers: your delivery address and order details are shared with the seller fulfilling your order
- With service providers: Twilio (WhatsApp), email SMTP providers, Cloudinary (image hosting)
- With authorities: if required by Egyptian law or court order
5. Data Retention
We retain your account data for as long as your account is active. Order records are retained for a minimum of 5 years to comply with Egyptian commercial regulations. You may request deletion of your account by contacting us; however, order records required for legal compliance will be retained regardless.
6. Security
Passwords are stored as bcrypt hashes and are never stored in plain text. All API communications use HTTPS. We use JWT tokens for session management, which expire after 7 days. We take reasonable technical and organisational measures to protect your data against unauthorised access.
7. Your Rights
Under Egyptian data protection principles, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate information via your profile settings
- Request deletion of your account and associated data
- Withdraw consent for WhatsApp notifications
8. Contact
For any privacy-related queries, please contact us at privacy@wasla.app. We will respond within 10 business days.
