Built for the way perfume stores sell
Privacy policy
Updated:
This is the English governing version. Translations are provided for convenience until reviewed by legal counsel.
1. Information we collect
We collect the following information to provide the service.
| Information | Examples | Purpose |
|---|---|---|
| Store owner information | Name, email address and password | Account creation and sign-in |
| Store information | Name, products and prices | Operating the assistant and displaying products |
| Customer information | Name, phone number and address | Recording orders and arranging delivery |
| Conversations | Customer messages and assistant replies | Providing the service and improving performance |
| Platform information | Encrypted Meta access tokens | Connecting WhatsApp, Messenger and Instagram |
2. How we use your information
- Providing the service: operating the assistant, responding to customers and recording orders.
- Improving the service: analyzing assistant performance, such as response accuracy and conversion rates.
- Communication: sending important account notifications, including new orders and service updates.
- Security: monitoring use to detect suspicious activity and violations.
3. Storage and protection
The following disclosures describe the separately hosted store application.
- Sensitive information such as Meta access tokens and application secrets is encrypted using Fernet in the database.
- Passwords are stored as hashes; the original password is not readable by us.
- Connections between your browser and our servers use SSL/TLS encryption.
- Information is stored in a password-protected PostgreSQL database on secured servers.
- The application uses Sentry for technical error monitoring with personal-data transmission disabled.
4. External services
The application uses external services, each with its own privacy policy.
| Service | Purpose | Information shared |
|---|---|---|
| OpenAI | Providing AI responses | Conversation text without identifying personal information |
| Meta (Facebook) | WhatsApp, Messenger and Instagram | Messages sent and received |
| Resend | Sending email | Email addresses |
| Sentry | Technical error monitoring | Error information without personal information |
| Railway | Server hosting | Information stored in the database |
| PostHog (optional marketing-site analytics) | Measuring page visits, language preferences and referral categories after consent | Pseudonymous browser identifier, page identifier, UI locale and sanitized referral category; no session replay |
5. Retention
- Account information is retained while the account is active.
- Conversation records are retained for 12 months for analytics and support.
- Order records are retained for 24 months for accounting and legal purposes.
- After account cancellation, your data is deleted within 30 days, subject to applicable legal retention requirements.
6. Your rights
Contact mohamed@webvitas.com to exercise these rights.
- Access: request a copy of the information we hold about you.
- Correction: update inaccurate information through the dashboard.
- Deletion: request permanent deletion of your information.
- Restriction: request limits on processing in certain circumstances.
- Objection: object to certain uses of your information.
7. Cookies and optional website analytics
The store application uses essential cookies, such as those needed to remain signed in. The marketing site stores your explicitly selected language in a first-party cookie for up to one year. It stores your analytics consent choice locally in your browser.
If analytics are configured, the marketing site asks for permission before loading PostHog. If you agree, it measures page visits, language changes and broad referral categories using a pseudonymous browser identifier. We do not enable automatic interaction capture or session replay, and do not send account names, email addresses, conversation text, complete referring URLs or URL query strings in analytics events.
You can decline analytics or withdraw permission through Analytics preferences in the footer. Withdrawal stops further analytics collection and clears this site's stored analytics identity. It does not automatically erase events already received; contact us for a data request. Browser storage may be unavailable or cleared, in which case your preferences may need to be selected again.
8. Children
The service is not directed at people under 18. We do not knowingly collect children's personal information. Contact us if such information has been supplied so we can remove it.
9. Changes to this policy
We may update this policy. Material changes will be communicated by email or a dashboard notice. Review this policy periodically.
10. Contact
For privacy questions or concerns, email mohamed@webvitas.com.