Privacy Policy

1. Information we collect

We may collect the following information when you use the Service:

• Account information you provide: name, email address, business name, and billing details.
• Payment information: processed by our payment provider. We do not store full card numbers on our servers.
• Store connection information: your WooCommerce store URL and the API credentials needed to connect your storefront to your WooCommerce backend.
• Usage data: log data, IP address, browser type, and how you interact with the Service — collected to keep it secure and to improve it.

2. Your WooCommerce store data & credentials

To power your headless storefront, WOOHL uses your WooCommerce REST API keys WC_CONSUMER_KEY and WC_CONSUMER_SECRET, along with your store URL.

Because your plan includes managed hosting, we store your API credentials in encrypted form on our infrastructure so we can serve and update your Vue.js storefront. Credentials are encrypted at rest, access is restricted to authorized systems, and they are never sold or shared for marketing.

Product data such as catalog, prices, and images is read from your store to render your storefront. WOOHL does not take ownership of your product or customer data. Because checkout runs through your WooCommerce backend, WOOHL does not process or store your shoppers’ payment details.

3. How we use your information

We use your information for the following purposes:

• To provide, maintain, and secure the Service.
• To process your subscription.
• To send transactional emails such as license keys, receipts, and service notices.
• To provide customer support.
• To meet legal obligations.

We use your information for direct marketing only where you have opted in, and you can opt out at any time.

4. Payment processing

Payments are processed by Razorpay and, where offered, PayPal. Your payment data is handled under the payment provider’s own privacy policy and PCI-DSS obligations. We receive confirmation of payment and limited billing metadata, not full card details.

5. Third parties & sub-processors

We share data only with service providers that help us operate the Service, for example:

• Payment processing — Razorpay
• Analytics — GA4

Each service provider is bound to protect your data. We do not sell your personal information.

6. Data storage, security & location

We apply administrative and technical safeguards including encryption in transit using TLS and access controls.

No method of transmission or storage is perfectly secure, but we work to protect your information and will notify you and the relevant authority of a breach as required by law.

7. Cookies & tracking

We use essential cookies to run the site and, with your consent where required, analytics cookies to understand usage. You can control cookies through your browser.

8. Data retention

We keep your data for as long as your account is active and as needed to provide the Service, then for any period required to meet legal, tax, or accounting obligations, after which it is deleted or anonymized.

9. Your rights

Depending on your location, you may have rights to access, correct, delete, export, or restrict processing of your personal data, and to withdraw consent.

To exercise these rights, contact [email protected]. We respond within the timeframe required by applicable law.

10. International transfers

If we transfer your data across borders, we use appropriate safeguards as required by applicable law.

11. Children’s privacy

The Service is not directed to anyone under 18, and we do not knowingly collect their data.

12. Changes

We may update this policy and will post the new “Last updated” date here. Material changes will be notified by email or in-app.

13. Contact

Questions about this policy: [email protected]