Legal
Privacy Policy
Last updated: October 6, 2026 — This policy explains how Wavesel collects, uses, and protects your personal data.
In plain terms: We collect only what we need to run the platform. We don’t sell your data to third parties. You can request deletion of your account and data at any time.
1. Data We Collect
Account Data
- Name, email address, username, password (hashed, never stored in plain text)
- Phone number and country (optional)
- Profile photo and store information (sellers)
Transaction Data
- Order history, amounts, product details
- Payment references (not card numbers — we never see your card details)
- Download history and access logs
- Payout bank account details (sellers only)
Technical Data
- IP address, browser type, device information
- Pages visited and time spent on the Platform
- Session tokens (stored as secure HTTP-only cookies)
- Error logs for debugging
Communication Data
- Email correspondence with our support team
- Notifications and messages you send through the Platform
2. How We Collect Data
| Source | Data Collected |
|---|
| Registration form | Name, email, username, password |
| Checkout process | Billing details, order information |
| Payment gateways (Paystack/Flutterwave) | Payment confirmation (not card data) |
| Browser/device automatically | IP address, session data, cookies |
| Profile settings | Store info, payout details, avatar |
3. How We Use Your Data
- Providing the service — processing orders, delivering products, managing accounts
- Communication — order confirmations, password resets, important updates
- Security — fraud detection, IP logging, rate limiting
- Analytics — understanding platform usage to improve features
- Legal compliance — meeting regulatory requirements
- Payments — processing payouts and transaction fees
We do not use your data for advertising, and we do not sell your data to any third party.
4. Data Sharing
We only share your data with:
Payment Processors
Paystack and Flutterwave receive buyer email and order amount to process payments. They have their own privacy policies.
Sellers (for orders you place)
When you purchase from a seller, we share your name and email with them so they can fulfill your order and provide customer support.
Telegram
When a Telegram automation product is purchased, an invite link is generated. No personal data is sent to Telegram beyond what you share when joining a channel.
Legal Requirements
We may disclose your data to law enforcement or regulatory authorities when required by valid legal process.
5. Data Storage & Security
Your data is stored on secured servers. We implement the following safeguards:
- Passwords are hashed using bcrypt with cost factor 12
- All sensitive pages served over HTTPS/TLS
- CSRF protection on all form submissions
- Rate limiting on authentication endpoints
- SQL injection prevention via prepared statements
- File uploads restricted and stored outside web root where possible
- Regular security audits and dependency updates
No system is 100% secure. If you discover a security vulnerability, please report it to hello@wavesel.com.
6. Cookies
We use minimal cookies:
| Cookie | Purpose | Duration |
|---|
| wavesel_sess | Session authentication (HTTP-only, secure) | 24 hours |
| CSRF token | Form security protection | Session |
We do not use advertising cookies or third-party tracking pixels.
7. Your Rights
You have the right to:
- Access — request a copy of your personal data
- Correction — update inaccurate information via your profile settings
- Deletion — request deletion of your account and associated data
- Portability — receive your data in a structured format
- Objection — object to certain processing of your data
To exercise these rights, email hello@wavesel.com with your request. We will respond within 30 days.
8. Data Retention
- Account data: retained while your account is active, deleted within 90 days of account closure
- Transaction records: retained for 7 years for legal/tax purposes
- Audit logs: retained for 12 months
- Email logs: retained for 6 months
- IP/session logs: retained for 90 days
9. Children’s Privacy
Wavesel is not intended for users under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has registered, contact us and we will delete the account.
For privacy-related questions, requests, or complaints:
- Email: hello@wavesel.com
- Response time: within 5 business days for general queries, 30 days for data requests
We are committed to resolving privacy concerns promptly and transparently.