Privacy Policy

Privacy Policy

Last updated: May 2026

Wayso Technologies ("Wayso", "we", "us", or "our") operates the wayso.in platform and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

1. Information We Collect

Account Information

When you create a Wayso account, we collect:

  • Name and email address
  • Password (encrypted, never stored in plain text)
  • Business name and store details
  • Billing and payment information

Store Data

When you use Wayso to run your store, we process:

  • Product catalog information
  • Customer records and order history
  • Staff accounts and roles
  • Payment transaction records
  • Inventory and fulfillment data

Automatically Collected Information

  • IP address and approximate location (via GeoIP)
  • Browser type, device information, and operating system
  • Usage patterns, pages visited, and session duration
  • Login timestamps and activity logs

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our platform
  • Process transactions and send billing notifications
  • Create and manage your account and stores
  • Send administrative emails (OTP verification, password resets)
  • Provide customer support
  • Monitor platform usage and detect abuse
  • Comply with legal obligations

3. Data Storage and Security

  • All data is stored in SurrealDB databases hosted on Fly.io infrastructure
  • Passwords are hashed using bcrypt
  • API communications use HTTPS/TLS encryption
  • JWT tokens are used for session management
  • Access tokens for connected third-party accounts (including Meta) are stored securely and used only to operate the features you enable
  • We implement rate limiting to prevent abuse
  • Database credentials are stored securely and rotated regularly

4. Third-Party Services

We share data with the following third-party services only as necessary to provide our platform:

Service Purpose Data Shared
Meta (Facebook, Instagram, WhatsApp) Social publishing, insights, comments & WhatsApp customer messaging See Section 5
Razorpay Payment processing Transaction amount, order ID
PhonePe Payment processing Transaction amount, phone number
Stripe International payments Transaction amount, email
MSG91 OTP & email delivery Phone number, email address
Delhivery Shipping & courier Shipping address, order details
Google Gemini AI features Prompts (no personal data)
Cloudflare DNS & SSL Domain names
Firebase Push notifications Device tokens

We do not sell your personal information to third parties.

5. Meta Platform Integration (Facebook, Instagram & WhatsApp)

Wayso lets a store owner connect their own Meta business assets — a Facebook Page, an Instagram Business account, and a WhatsApp Business account — so they can manage their store's social publishing and customer communication from Wayso. This integration is optional and is initiated by the store owner through Meta's official Facebook Login (OAuth) consent flow.

What we access from Meta, and why:

  • Facebook Page — to publish and remove posts on the owner's own Page, and to read the like/comment counts and insights on their own posts (so we can show post performance in Wayso).
  • Instagram Business account — to read the account profile and media, publish photos and reels, read post insights (reach, views, likes, comments), and read the comments left on the owner's own posts.
  • WhatsApp Business account — to discover the owner's WhatsApp Business Account and phone number, read and create their message templates, and send transactional messages (one-time verification codes and order status notifications) to their customers using pre-approved templates.
  • Basic profile (name, email) — to identify the store owner who is connecting their account and show which identity is linked.
  • When a store owner views comments on their own posts, we display the name and profile picture of the people who commented, so the owner can see who is engaging with their content.

How we handle this data:

  • We use it only to provide the features the store owner enables, and only on the store owner's own connected accounts. We never access accounts they have not connected.
  • Access tokens received from Meta are stored securely and used solely to maintain the connection and perform the actions above.
  • We do not sell, rent, or share Meta data with unrelated third parties, and we do not use it for advertising or profiling.
  • Comment authors' names/pictures are shown to the store owner for engagement purposes only; they are not stored for any other use or sold.
  • Our use of data received through the Meta APIs complies with the Meta Platform Terms and Developer Policies.

Disconnecting:

  • A store owner can disconnect their Meta accounts at any time from Settings → Integrations in Wayso, which removes the stored tokens.
  • They can also revoke Wayso's access from their Facebook account settings (Settings → Business Integrations). On disconnection or account deletion, the associated Meta tokens and connected-account data are deleted.

6. Data Retention

  • Account data is retained as long as your account is active
  • Store data is retained for the duration of your subscription
  • Transaction records are retained for 7 years (legal compliance)
  • Meta access tokens and connected-account data are retained only while the account is connected, and are deleted on disconnection or account deletion
  • You may request deletion of your account and associated data at any time

7. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Export your data in a portable format
  • Opt out of marketing communications
  • Withdraw consent at any time

8. Cookies

We use essential cookies for:

  • Session management and authentication
  • Store subdomain resolution
  • Security (CSRF protection)

We do not use tracking cookies or third-party advertising cookies.

9. Children's Privacy

Our platform is not intended for use by children under 18. We do not knowingly collect data from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the platform.

11. Contact Us

For privacy-related inquiries: