Privacy policy
Last updated
Wasel is run by me, Mohammed Diea Eddine, in Doha, Qatar. When this page says "I", it means me. Questions or requests: [email protected].
There are two kinds of people here: clients (businesses with a Wasel account) and their customers (people who tap a client's landing page or write to a client's WhatsApp).
For clients
Your account. Your name, business name, email and, if you give it, phone number. You log in with a one-time code sent by email; there is no password. Codes are stored hashed and expire after 10 minutes.
Your WhatsApp. When you scan the QR, Wasel links to your number the way WhatsApp Web does. It stores the conversations of people who write to you, so you can see each lead's messages, and your own replies in those chats. It does not store group chats and does not send messages.
Your conversion settings. Pixel IDs and the access tokens for your ad accounts' server-side events. Tokens are encrypted before they are stored.
For your customers
When someone uses a client's landing page or writes to a client's WhatsApp, Wasel processes on the client's behalf: their phone number and WhatsApp name, their messages, and for landing-page taps the ad click IDs in the link (fbclid, ttclid, ScCid), campaign tags, browser cookies set by the ad platforms' pixels, user agent, and the IP address (stored only as a one-way hash).
The client decides why this is collected and is responsible for telling their customers. If you are a customer of a business that uses Wasel, contact that business first; I will help them answer you.
What is sent to the ad platforms
If a client connects Meta, TikTok or Snapchat, Wasel sends them events about the client's leads: the landing-page tap, and the client's marks (qualified, converted, with a value). Phone numbers are sent only as SHA-256 hashes, with the click IDs above, so the platform can match the event to an ad.
Who else sees it
- Fly.io hosts the app and its database (Frankfurt, Germany).
- Cloudflare sits in front of the site for speed and security.
- Resend sends the app's emails.
- Meta, TikTok, Snapchat: only the events above, only for clients who connect them.
I do not sell data or use clients' leads for anything else.
Cookies
Wasel sets one cookie of its own, to keep you logged in (30 days). Clients' landing pages load the pixels the client adds (Meta, TikTok, Snapchat), which set those companies' own cookies.
How long it is kept
As long as the client's account is open. When a client disconnects a number, its session is deleted; when a client closes their account, their leads, messages and settings are deleted within 30 days.
Your choices
Email [email protected] to see, correct or delete your data. I answer within 30 days. Data protection in Qatar is governed by Law No. 13 of 2016 on Personal Data Privacy Protection.