Privacy Policy

wastore.shop is a product of Enhancify, which also makes Whatslynk, and is a separate service. It has its own accounts, database and sign-in: an account on one is not an account on the other, and nothing is shared between them.

• Your store. Its name, short description, opening hours, language, currency and colours, its sections and items (names, descriptions, prices, options and their prices), your minimum order, delivery fee and payment instructions, and the pictures you upload (item pictures, a logo and a cover). Anyone who opens your store can see all of this, so only write what you want to be public.
• Your chat number. The number customers are sent to when they place an order. It is not shown on the store page, but a customer who sends an order is taken to your chat and will see it. With Store+ you can add other numbers (for example one per branch). A customer who picks that branch sees that number.
• Your account. A sign-in ID from our sign-in provider (Firebase Authentication). If you sign in with Google or email, we also keep your email address and name, and the language you use, so we can write to you in it.
• Your plan. Which wastore.shop plan you have and when it renews. Payment details are held by Paddle, not by us.
• Store visits. Each time your store is opened or its QR code is scanned we record the information in the next section.
• Item counts (Store+). How many times each item was opened or added to an order, per day, so you can see what is popular. We do not record who did it. These counts are deleted after about 13 months.
• Order steps. Once per visit, the store page tells us that something was added to the order and that the order form was opened. Only that it happened, and when, is kept, so the analytics can show how many visits reach each step. Nothing about who it was, or what was added.
• Visitors on your store now (Store+). The number of different visitors in the last five minutes, worked out from the visit records. It is not stored on its own.
• Search engines. Your store asks search engines not to list it. With Store+ you can turn that on, and then the page title and description you write are shown to them.
• Orders and bookings. When a customer sends an order or a booking, we save it for you so you can follow it up in your dashboard: the items and prices, the total, the time, and the details your order form asks for (the customer’s name, phone number, email address, delivery address, date and time, and notes), the branch they chose, and the status and private note you give it. It is kept until you delete it, or delete your store or account.
• Your customer list. From each order we also keep one record per customer (their phone number, and their latest name and email address if they gave them, with the time of their last order) so you can see your customers and their orders in one place. Deleting an order does not delete the customer; the customer record goes when you delete your store or account.

We keep this coarse, aggregate-friendly information. We do not store IP addresses or the full browser string. Store pages do not load analytics or advertising scripts of any kind.

A customer who orders types what you ask for (such as a name, phone number, email, address or notes) into your store page. The page sends it to our server, which saves the order for you and then hands the customer on to your chat with the message already written.

You are the one who decides to collect these details and what they are used for, and you are responsible for them: we store them for you and do not read them, use them for ourselves or share them. You can choose in the store settings what the order form asks for, change an order’s status, and delete any order. What is said in the chat is between you and your customer; we do not know whether a chat was started or what was said.

When you accept the cookie notice, we use Google Analytics (through Firebase) on this website, and on your dashboard, to see which pages are visited and whether sign-up and checkout work. It never receives your chat number, store content, email address or name, and advertising features are switched off. If you decline, nothing is loaded or sent. This does not apply to stores: opening a store never loads it.

We use these providers to run the service. We do not sell your data.

• Vercel for hosting.
• Neon for the database, which also holds your store’s pictures.
• Google Firebase for sign-in, and for website usage statistics if you accept the cookie notice.
• Paddle for payments. Paddle collects your payment details and billing information itself. We never see your card, and receive only your email, the plan you bought and its renewal dates.
• Amazon SES to send you emails about your account and plan.
• Upstash for caching and rate limits. It only holds cached store pages.
• Cloudflare Turnstile for bot protection, if enabled.
• Crisp for the support chat on this website, if enabled. If you write to us in the chat, Crisp receives your messages, and your email address and name if you are signed in. The chat does not appear on store pages.

Raw visit records are deleted after about 13 months. Orders and bookings are kept until you delete them. You can delete your store at any time from the Settings page of your dashboard, which removes its items, pictures and address. If you delete your whole account, your store goes with it. A deleted store stops working, including printed QR codes, and its short code is never given to anyone else. If a store’s plan ends, the store goes offline and its content stays saved so you can come back.

• See, edit, unpublish or delete your store from the dashboard.
• Delete your account and data at any time.
• Ask us about your data at support@wastore.shop.

wastore.shop is not directed at children under 13, and we do not knowingly collect their data.

If we change what we collect, we will update this page and the date at the top.

Questions or requests: support@wastore.shop. See also our Terms of Use.