Privacy Policy

1. Information We Collect

We collect the following types of information:

• Account information: Email address, name, and password when you create an account
• Business information: Business name, description, WhatsApp number, category, location, and images you upload to your booking page
• Analytics data: We collect aggregate, non-identifying analytics data such as page view counts and WhatsApp click counts. IP addresses are not stored or linked to individual accounts.

2. How We Use Your Data

We use your information to:

• Provide and maintain the Service
• Display your booking page to your customers
• Show you analytics about your page performance
• Send transactional emails (account verification, password resets)
• Improve the Service based on usage patterns

We do not sell your personal data to third parties. We do not send marketing emails unless you explicitly opt in (e.g., Pro waitlist).

3. Third-Party Services

We use the following third-party services to operate:

• Supabase: Database, authentication, and file storage (hosted in the US)
• Vercel: Application hosting and deployment

Each third-party service has its own privacy policy governing the data they process on our behalf.

4. Data Storage & Security

Your data is stored securely using Supabase (hosted on AWS infrastructure). We employ industry-standard access controls to ensure your information is only accessible to authorized systems. All data is encrypted in transit (TLS) and at rest.

User-uploaded images are stored in Supabase Storage with access controls. We implement reasonable security measures to protect your data, but no method of transmission over the Internet is 100% secure.

5. Data Retention

We retain your account data as long as your account is active. When you delete your account, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention).

Anonymous analytics data may be retained indefinitely in aggregated form.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Export your data in a portable format
• Opt out of non-essential communications

These rights are provided in accordance with applicable laws, including the California Consumer Privacy Act (CCPA). To exercise these rights, contact us at the email below.

7. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising pixels. Analytics are collected server-side without cookies.

8. External Links

Our Service generates pages that link to third-party platforms, including WhatsApp. We are not responsible for the privacy practices of third-party sites. We encourage you to review the privacy policies of any external services you access through Nawaconnect.

9. International Data Transfers

Your data is stored and processed in the United States. By using the Service, you consent to the transfer and processing of your data in the US. We ensure adequate protection through our service providers' security measures and contractual safeguards.

10. Children's Privacy

The Service is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. The “Last updated” date at the top reflects the most recent revision.

12. Contact

If you have questions about this Privacy Policy, contact us at support@nawaconnect.com.