Privacy & Security

Privacy Policy

We respect your privacy and are committed to protecting your personal information. Here is how we keep your data safe.

Last updated: October 11, 2026

1. Introduction

Welcome to WetrackWise. We are committed to protecting your privacy and ensuring that your personal information is handled safely and responsibly. This Privacy Policy explains how we collect, use, and protect your information when you use our services.

The controller of the personal data processed under this Policy, under the Brazilian General Data Protection Law (LGPD, Law No. 13,709/2018), is WETRACKWISE TECNOLOGIA LTDA, CNPJ 62.525.617/0001-88, Novo Hamburgo/RS. The Data Protection Officer (DPO) can be reached at support@wetrackwise.com.

2. Information We Collect

We collect the following personal information when you register or use our application:

  • Name: To personalize your experience and identify your account
  • Email Address: For communication, account management, and login purposes
  • Usage Data: How you interact with our application to improve your experience
  • Marketplace Order Data: When you connect a marketplace store, we receive order records that may include your buyers' personal data (such as name, shipping address, and phone number), used only to provide your sales analytics

We receive buyer personal data (such as shipping addresses) from the marketplaces you connect, so we can show you your own orders. We never sell it and never share it with third parties. Disconnecting a store erases that store's buyer data from our analytics database as soon as we process the disconnection. How long it is kept before that depends on the marketplace — see Data retention below. We store only the buyer's delivery state (UF), to produce aggregated sales-by-region analytics. On Shopee, the delivery address is received from the marketplace solely to derive the state and is discarded immediately, never stored; on Temu, the state, city and address remain encrypted with 30-day deletion, and only the state (UF) is kept separately. The state alone does not identify a person.

If you connect Shopee's affiliate program, we also receive, for each creator (affiliate) who promotes your store's products, the public profile photo that creator shows on Shopee. We store only the link to that photo, never a copy of the image, and we use it for one purpose only: to identify the creator in your affiliate reports. We never sell it and never share it with third parties. The link is refreshed every time your affiliate data syncs; see Data retention below for how long it is kept.

3. How We Use Your Information

Your information is used to:

  • Provide and manage our services
  • Communicate important updates and information
  • Improve and personalize your experience
  • Ensure the security and integrity of our application

4. Operational notifications via WhatsApp and email

We send operational alerts (for example, the ads balance of your marketplace accounts) only to the WhatsApp numbers and email addresses that you register and verify, with your explicit opt-in for each number.

Data used: phone number, email address, and the alert content, which concerns only your own marketplace accounts. We do not use this data for third-party advertising.

WhatsApp messages are delivered through the WhatsApp Business Platform, operated by Meta Platforms, which acts as a data processor on our behalf. Email notifications are delivered through a transactional email provider, which also acts as a processor.

You can opt out at any time by replying "PARAR" to the message on WhatsApp or in your notification settings. Opting out of one channel does not affect your account or the other channels.

We keep the notification delivery log (recipient, channel, date, and status) for 90 days, and then delete it.

If you turn on the WhatsApp copilot, we also send the question you type and the answer, which can include figures from your own stores, through the WhatsApp Business Platform operated by Meta Platforms. You opt in with a versioned consent text. Replying PARAR stops both the alerts and the copilot on that number at once; replying VOLTAR turns the copilot back on. We keep the conversation for 90 days and delete it sooner if you ask. Application logs do not store the message text.

5. How We Protect Your Data

We implement robust security measures to protect your data, including encryption and secure storage solutions. Your information is stored with enterprise-grade security. Access to your information is restricted to authorized personnel only.

6. Cookies and Tracking

We use cookies to improve your experience, keep you logged in, and remember your preferences like theme settings. You can control cookie settings through your browser, but some cookies are essential for the application to work properly.

Planned product analytics and user feedback

We plan to measure feature usage, completion, abandonment and difficult interactions to improve WetrackWise, using legitimate interest as the proposed basis. This notice describes the design before deployment.

The planned product events stay in our AWS environment and use pseudonymous account identifiers, never form text, chat content or IP addresses. Pseudonymous data is still personal data. Feedback and support requests are separate records and may contain information you choose to send.

You can save your product analytics opt-out in Account settings before collection starts. It will apply to product events when enabled, while technical error monitoring continues. This is separate from marketing analytics and marketing consent.

Session recording is outside this phase. A specific consent mechanism and privacy review are prerequisites before any future session recording.

Product usage analytics

7. Your Rights

You have full control over your personal data. You can:

  • Access: Request a copy of your personal data
  • Correction: Update or fix any incorrect information
  • Deletion: Delete your account and personal data
  • Unsubscribe: Stop receiving marketing emails at any time, and turn off operational notifications per channel (WhatsApp or email)

Contact us at support@wetrackwise.com or use your account settings. We will respond within 30 days.

8. How Long We Keep Your Data

We keep your personal data only as long as necessary to provide our services. When you delete your account, we remove your personal information within 30 days. Some anonymized data may be kept for business insights, but it cannot be linked back to you.

Before deployment, the retention targets are one year for product events and until resolution plus 90 days for the user feedback queue. These targets still require implementation and production verification; this notice does not confirm that they are already enforced.

Retention of marketplace buyer personal data depends on the marketplace: on Temu, at most 30 days from the order date, and it is additionally encrypted at application level; on Shopee, at most 90 days from the order date; on Mercado Libre and Amazon, it is kept for as long as the store is connected. On every marketplace, disconnecting a store erases that store's buyer data from our analytics database as soon as we process the disconnection, and archived copies of the original marketplace responses expire on the same schedule. The delivery state (UF) alone does not identify the buyer and is kept for as long as the store is connected, like the rest of the order data.

Creator profile photo links are kept for at most 90 days after the last sync in which that creator appeared in your affiliate data, and are replaced whenever a newer sync reports a different photo. Disconnecting a store deletes all of that store's creator photo links from our analytics database as soon as we process the disconnection. If an affiliate sync is still running when you disconnect and saves a link after that, our daily cleanup removes it, normally within 24 hours, or at the next successful run if a daily run fails.

9. External Sites

Our application may contain links to other websites. This privacy policy only applies to WetrackWise. When you visit other websites, please review their privacy policies as we are not responsible for their practices.

10. Legal Compliance

LGPD (Brazil)

Brazilian residents have rights under LGPD including transparent data processing, access to personal data, and deletion rights.

GDPR (European Union)

If you are in the European Union, you have additional rights under GDPR including the right to withdraw consent, data portability, and the right to be forgotten.

CCPA (California)

California residents have the right to know what personal information we collect and request its deletion. We do not sell personal information.

11. Changes to This Policy

We may update this privacy policy from time to time. When we do, we will post the updated policy on this page and notify you via email if the changes are significant. Your continued use of our service means you accept the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at support@wetrackwise.com. We will respond to your inquiry within 30 days.

Data Protection Officer (DPO): support@wetrackwise.com.