Privacy Policy

What we collect

• Account details: your name, phone number(s) and/or email address, and, if you add them, your country, address and date of birth.
• Sign-in codes: when you log in, we send a one-time code to your phone number by WhatsApp or to your email address. We keep the code only until it's used or expires.
• Products you list: name, description, price, category, country and the pictures you upload. Product pages are public, together with the seller's name and contact number so buyers can reach you.
• Messages you send us through the contact form: the subject and message, together with the name and phone number on your account.
• Reports: when you report a listing, the reason you pick and any details you write.
• Seller subscription: whether you're a seller, and when each subscription period starts and ends.
• Product views: which products are opened, counted once per visitor ID. Sellers only see daily totals (views, and how often their number was shown), never who viewed. The same counts power the "You may also like" suggestions, without names.
• Technical data: your IP address and a random visitor ID, used to keep the service secure and to limit abuse (for example, too many code requests). Our host tells us the country of your IP address, which we use only to preselect the country of a phone number - no outside location service is used.
• Photos: the app asks to access your photos only when you choose pictures for a product. Only the pictures you pick are uploaded.

What we don't do

• We don't sell your personal data.
• We don't show ads or use advertising or tracking cookies.
• We don't take payments in the app or on the site.
• We don't collect your precise location, contacts, or anything from your device beyond what's listed above.

How we use it

• To create and secure your account and sign you in.
• To show your products to buyers and let them contact you.
• To show sellers how their listings are doing and to suggest related products.
• To answer your messages and support requests.
• To prevent fraud, spam and abuse, and to keep the service running.

Who we share it with

Only with the service providers that run WaterIShop for us, and only what they need: Meta (WhatsApp) to deliver sign-in codes, our email provider to deliver codes by email, Microsoft Azure, which hosts our servers and database, and Vercel, which hosts the web site. We may also disclose data when the law requires it.

Cookies and storage

The web site uses only necessary cookies: one that keeps you signed in, one with a random visitor ID for security, and one that remembers your language. The app keeps your sign-in token in your phone's secure storage.

Security

All traffic is encrypted (HTTPS). There are no passwords to leak: you sign in with one-time codes. Access to our servers and database is restricted.

How long we keep it

We keep your account and products until you delete them. Contact-form messages are kept for as long as we need them to answer you. Security logs are kept for a limited time and then deleted.

Deleting your account

You can delete your account at any time from your profile, in the app or on the web site. It deletes your account, your products and their pictures, your messages and reports, and your seller subscription for good. See the Delete your account page for the steps, or email us and we'll do it for you.

Your rights

You can see and change your details in your profile at any time, and ask us for a copy of your data or to correct or delete it.

Children

WaterIShop is a marketplace for adults. It isn't meant for anyone under 18, and we don't knowingly collect data from children.

Changes to this policy

If we change this policy, we'll update this page and the date at the top.

Contact us

Questions or requests about your data: info@waterishop.com