Privacy Policy

Last Updated & Effective: November 12, 2026

        Executive Summary: WooPanel is built on a "Privacy First / Merchant-Owned" self-hosted architecture. We do not sell your data, do not profile your customers, do not run third-party advertising trackers, and your WooCommerce store credentials are protected with AES-256-GCM encryption.
      

1. Introduction

This Privacy Policy explains how WooPanel ("we", "us", or "our") collects, uses, encrypts, and protects information when you use the WooPanel iOS Mobile Application, the WooPanel Web Dashboard, and related backend relay services (collectively, the "Service").

This policy is designed to comply with Apple's App Store Review Guidelines (Guideline 5.1 - Data Collection and Storage) and applicable global data protection regulations.

2. Information We Collect

We collect only the minimum necessary information required to deliver real-time WooCommerce multi-store monitoring and instant push notifications:

Account Information: When you register an account, we collect your email address and an encrypted hash of your password. We never store plaintext passwords.
WooCommerce API Credentials: To communicate with your store via WooCommerce's official REST API, you provide your store URL, Consumer Key, and Consumer Secret. These credentials are stored using industry-standard AES-256-GCM encryption with unique initialization vectors (IVs) and authentication tags.
Apple Push Notification (APNs) Tokens: To deliver real-time sales alerts and the "cha-ching" notification chime to your iOS devices, we register your device's APNs push token. This token contains no personally identifiable information (PII).
Visitor Telemetry (Optional / Non-PII): If you enable the live 3D visual telemetry globe, our lightweight connector transmits anonymized visitor events (approximate city/country coordinates derived via GeoIP lookup, page URL, and timestamp). IP addresses are hashed immediately and discarded; no persistent IP or cookie trackers are stored.

3. How We Use Your Information

We use the collected information strictly for:

Authenticating your access to the WooPanel application across iOS and web;
Querying WooCommerce orders, products, and sales totals on your behalf to display real-time and aggregate analytics;
Triggering real-time notifications when a new order is placed in your stores;
Calculating profit margins, net revenue, and Cost of Goods Sold (COGS).

4. Data Storage and Security Controls

We employ high-grade administrative and technical security measures:

Encryption in Transit: All data transmitted between your iOS device, WooCommerce stores, and WooPanel relays is encrypted with Transport Layer Security (TLS 1.3 / HTTPS).
Encryption at Rest: Sensitive WooCommerce Consumer Secrets and Webhook Secrets are encrypted in our database using AES-256-GCM before write operations. Plaintext keys never touch logs or client responses.
Strict Authentication: API access requires JSON Web Tokens (JWT) signed with high-entropy cryptographic keys with short expiry windows.

5. Third-Party Sharing and Tracking

We do NOT sell, lease, or monetize your data. We do not include third-party advertising SDKs, behavioral trackers, or data brokers. Push notifications are routed exclusively through Apple's official Apple Push Notification Service (APNs).

6. Data Retention and Account Deletion (App Store Compliance)

In full compliance with Apple App Store Review Guideline 5.1.1(v):

Store Deletion: You can disconnect and permanently delete any connected WooCommerce store at any time directly within the app settings. All associated credentials, cache, and webhook secrets are immediately purged from our servers.
Full Account Deletion: You may request or perform complete deletion of your account and all associated stores at any time from the app settings or by emailing [email protected]. Upon execution, all stored records are irreversibly wiped within 24 hours.

7. Children's Privacy

WooPanel is intended solely for commercial business operators and e-commerce merchants. We do not knowingly collect personal data from children under the age of 13.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect product enhancements or regulatory requirements. Material updates will be communicated through the app and on this website with an updated effective date.

9. Contact Us

If you have any questions or concerns regarding this Privacy Policy or data handling practices, please contact our Data Protection team:

Email: [email protected]
Support Desk: woopanel.shop/support
Website: https://woopanel.shop