Privacy Policy

At Wapitee Interactive Marketing Limited ("Wapitee", "we", "our", or "us"), we take your privacy seriously. c2go is a product operated by Wapitee. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our URL shortening service (the "Service"). Please read this Privacy Policy carefully. By using the Service, you consent to the practices described in this policy.

1. Information We Collect

1.1 Account Information

When you register for an account, we collect:

• Email address
• Password (encrypted)
• Optional: Full name, profile picture (if provided)
• Authentication provider information (Google OAuth)

1.2 Link Information

When you create short links, we collect:

• Original URLs you submit
• Custom short codes (if specified)
• Link titles and descriptions
• UTM parameters
• Creation timestamps
• Workspace associations

1.3 Analytics Data

When someone clicks on your short links, we automatically collect:

• IP address (hashed for anonymity)
• User agent string (browser and device information)
• Referrer URL
• Geographic location (country, city - derived from IP)
• Device type (desktop, mobile, tablet)
• Operating system and browser information
• Language preferences
• Screen resolution and viewport size
• UTM parameters from the click
• Timestamp of the click

1.4 Usage Information

We collect information about how you interact with our Service:

• Log data (access times, pages viewed, features used)
• Browser type and version
• Device identifiers
• API usage (for API key holders)

1.5 Payment Information

If you subscribe to a paid plan, our payment processor (Stripe) collects your payment information. We do not store full credit card numbers on our servers. We only store:

• Subscription status and tier
• Billing history
• Last 4 digits of payment method (for reference)

2. How We Use Your Information

We use the collected information to:

• Provide, maintain, and improve our Service
• Create and manage your account
• Generate analytics reports for your links
• Process payments and manage subscriptions
• Send you service-related notifications
• Respond to your support requests
• Prevent fraud and abuse
• Comply with legal obligations
• Analyze usage patterns to improve user experience

3. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our Service:

3.1 Essential Cookies

Required for the Service to function properly, including authentication and security features. These cannot be disabled.

3.2 Analytics Cookies

Help us understand how visitors interact with our website. We use this information to improve our Service.

3.3 Preference Cookies

Remember your settings and preferences (like language or theme) for a better experience.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Service.

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

4.1 Service Providers

We use third-party service providers to help us operate our Service, including:

• Supabase (database and authentication)
• Stripe (payment processing)
• Vercel (hosting)
• Email service providers

These providers have access to your information only to perform specific tasks on our behalf and are obligated to protect it.

4.2 Legal Requirements

We may disclose your information if required by law, subpoena, or other legal process, or if we have a good faith belief that disclosure is necessary to:

• Comply with legal obligations
• Protect our rights, property, or safety
• Prevent fraud or abuse of the Service
• Protect the rights and safety of our users or the public

4.3 Business Transfers

If Wapitee or c2go is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

4.4 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption of data in transit (HTTPS/TLS)
• Passwords are hashed using industry-standard algorithms
• Regular security audits and assessments
• Access controls and authentication requirements
• Row Level Security (RLS) policies in our database

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide you with the Service. We will retain and use your information as necessary to:

• Comply with our legal obligations
• Resolve disputes
• Enforce our agreements

Click analytics data is retained according to your subscription tier (30 days for Free, 90 days for Basic, 1 year for Pro, unlimited for Enterprise). You can delete your account and data at any time by contacting us.

7. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

7.1 Access and Portability

You can access and export your data through your account settings or by contacting us.

7.2 Correction

You can update your account information at any time through your profile settings.

7.3 Deletion

You can delete individual links or your entire account. Upon deletion, your data will be removed from our active systems within 30 days.

7.4 Objection and Restriction

You may have the right to object to or restrict certain processing of your personal information.

To exercise these rights, please contact us at hi@wapitee.io.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We use service providers that may be located in various countries, and your information may be stored on servers in different jurisdictions. We ensure appropriate safeguards are in place to protect your information during such transfers.

9. Children's Privacy

Our Service is not intended for children under 13 years of age (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we will provide additional notice (such as a service announcement or email notification). Your continued use of the Service after any changes indicates your acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: