This Privacy Policy explains how we collect, use, and protect information when you use woohl.dev and the WOOHL service (the "Service"). By using the Service, you agree to this policy.
1. Information we collect
We may collect the following information when you use the Service:
- Account information you provide: name, email address, business name, and billing details.
- Payment information: processed by our payment provider. We do not store full card numbers on our servers.
- Store connection information: your WooCommerce store URL and the API credentials needed to connect your storefront to your WooCommerce backend.
- Usage data: log data, IP address, browser type, and how you interact with the Service — collected to keep it secure and to improve it.
2. Your WooCommerce store data & credentials
To power your headless storefront, WOOHL uses your WooCommerce REST API keys
WC_CONSUMER_KEY and WC_CONSUMER_SECRET, along with your store URL.
Because your plan includes managed hosting, we store your API credentials in encrypted form on our infrastructure so we can serve and update your Vue.js storefront. Credentials are encrypted at rest, access is restricted to authorized systems, and they are never sold or shared for marketing.
Product data such as catalog, prices, and images is read from your store to render your storefront. WOOHL does not take ownership of your product or customer data. Because checkout runs through your WooCommerce backend, WOOHL does not process or store your shoppers’ payment details.
3. How we use your information
We use your information for the following purposes:
- To provide, maintain, and secure the Service.
- To process your subscription.
- To send transactional emails such as license keys, receipts, and service notices.
- To provide customer support.
- To meet legal obligations.
We use your information for direct marketing only where you have opted in, and you can opt out at any time.
4. Payment processing
Payments are processed by Razorpay and, where offered, PayPal. Your payment data is handled under the payment provider’s own privacy policy and PCI-DSS obligations. We receive confirmation of payment and limited billing metadata, not full card details.
5. Third parties & sub-processors
We share data only with service providers that help us operate the Service, for example:
- Payment processing — Razorpay
- Analytics — GA4
Each service provider is bound to protect your data. We do not sell your personal information.
6. Data storage, security & location
We apply administrative and technical safeguards including encryption in transit using TLS and access controls.
No method of transmission or storage is perfectly secure, but we work to protect your information and will notify you and the relevant authority of a breach as required by law.
8. Data retention
We keep your data for as long as your account is active and as needed to provide the Service, then for any period required to meet legal, tax, or accounting obligations, after which it is deleted or anonymized.
9. Your rights
Depending on your location, you may have rights to access, correct, delete, export, or restrict processing of your personal data, and to withdraw consent.
To exercise these rights, contact [email protected]. We respond within the timeframe required by applicable law.
10. International transfers
If we transfer your data across borders, we use appropriate safeguards as required by applicable law.
11. Children's privacy
The Service is not directed to anyone under 18, and we do not knowingly collect their data.
12. Changes
We may update this policy and will post the new “Last updated” date here. Material changes will be notified by email or in-app.
13. Contact
Questions about this policy: [email protected]