Wasrio Privacy Policy

1. Who this policy covers

This policy covers (a) visitors to wasrio.com, (b) representatives of businesses that enquire about or use Wasrio ("clients"), and (c) our role, as a technology provider, when we help a client operate their own WhatsApp Business Account and back-office system.

2. Our two roles (important)

• Controller. For our website, our marketing, and our direct relationship with client businesses, we decide how and why data is processed, so we are the controller.
• Processor. When we deploy and operate a client's own single-tenant Wasrio instance, we process the client's business data (including their customers' contact details and order history) only on the client's instructions and for the client's purposes. The client is the controller of that data. Each client instance is single-tenant, so a client's data lives on their own instance and is not pooled with other clients.

3. Data we collect

• Website and enquiries: name, business name, email, phone, message content, and standard technical data (IP address, device, pages viewed) for security and analytics.
• Client onboarding and operation: business details, and banking and tax identifiers you provide to configure your instance, and the WhatsApp Business Account assets you authorize us to manage on your behalf through Meta's official flow. We never receive or store your Meta or Facebook password.
• WhatsApp and Meta data: where you authorize us as your technology provider, we access your WhatsApp Business Account, phone numbers, and message templates through the Meta WhatsApp Business Platform, in order to configure and operate your service. Message content that is processed to produce orders, invoices, and reminders is processed on your own instance under your control.

4. How we use data

To respond to enquiries, to provide and configure and support the service, to send service messages, to meet legal and tax and compliance obligations, to secure our systems, and to improve the product. We do not sell personal data.

5. Sharing

We share data only with infrastructure and tooling providers that help us run the service (for example hosting, email delivery, and the Meta WhatsApp Business Platform), each bound by contract, and where required by law. Client instance data is not shared with other clients.

6. International transfers and residency

We host client instances in the region agreed with each client. Where residency applies, United Arab Emirates client data is hosted in the UAE (PDPL and e-invoicing). South African and other client data is hosted in the region agreed under the applicable data-processing terms (POPIA), with appropriate safeguards for any cross-border transfer.

7. Retention and deletion

We keep personal data only as long as needed for the purposes above or as required by law (for example invoicing and tax records, and e-invoice records where a 10-year in-country retention applies). You can request access, correction, or deletion at any time. See our Data Deletion page (wasrio.com/data-deletion) or email privacy@wasrio.com. Because each client owns their instance, client data can be exported or deleted on request.

8. Your rights

Depending on your location (including under UAE PDPL, South Africa POPIA, and other laws) you may have rights to access, correct, delete, object to, or restrict processing, and a right to data portability. To exercise them, contact privacy@wasrio.com.

9. Security

We use industry-standard measures including encryption in transit, access controls, encrypted secrets, and per-client isolation. No system is perfectly secure, but we work to protect your data.

10. Children

Wasrio is a business tool and is not directed to children.

11. Changes

We may update this policy and will post the new effective date here.

Contact for any privacy question or request: privacy@wasrio.com.