Privacy Policy
What we collect, why, and how we protect it — written plainly, consistent with the Indian DPDP Act 2023.
WooDash Labs ("WooDash", "we", "us") respects your privacy. This Policy explains what data we collect through our app, website (woodash.site), and services (the "Service"), how we use and protect it, and the rights you have. This Policy is consistent with the Digital Personal Data Protection Act, 2023 ("DPDP Act") of India and other applicable laws.
1. Data we collect
a. Data you provide
- Account information: name, email, and password.
- Store connection details and the WooCommerce API credentials you authorize.
- Communications you send us (support messages, feedback).
- Billing information for paid plans (processed by our payment partner; we do not store full card numbers).
b. Store and usage data
- Data from your WooCommerce store that you choose to sync (e.g., orders, products, customers, analytics), accessed only via the scoped permissions you grant.
- Device and usage data: device type, OS version, app version, crash reports, and interaction metrics needed to operate and improve the Service.
2. How we use data
- Provide, operate, and secure the Service (dashboards, notifications, sync).
- Authenticate you and maintain your account.
- Send transactional messages (verification, order alerts) and, where you opt in, product updates.
- Analyze usage to improve performance and features.
- Comply with legal obligations and enforce our Terms.
3. Legal basis (DPDP Act)
We process your personal data with your consent and as necessary to perform our contract with you, to comply with law, and for our legitimate interests in securing and improving the Service. Where we rely on consent, you may withdraw it at any time without affecting prior lawful processing.
4. Sharing and disclosure
We do not sell your personal data. We share data only with: (a) service providers who help us operate the Service (hosting, email delivery, analytics, payments) under confidentiality obligations; (b) authorities where required by law; and (c) successors in a merger or acquisition. Store customer data is processed solely to render the Service you request.
5. International transfers
Your data may be processed on infrastructure located outside India. Where we transfer data cross-border, we implement appropriate safeguards consistent with the DPDP Act and applicable regulations.
6. Cookies and similar technologies
Our website uses essential cookies for security and functionality, and analytics cookies (where enabled) to understand usage. You can control cookies through your browser settings. The app does not use advertising cookies.
7. Data retention
We retain personal data only as long as necessary for the purposes above or as required by law. When you delete your account, we delete or anonymize your data within a reasonable period, except backups and records we must retain.
8. Security
We use encryption in transit and at rest, scoped API permissions, access controls, and monitoring. No method of transmission or storage is perfectly secure, but we work continuously to protect your data. We never store your customers’ payment card details.
9. Your rights
- Access, correct, or delete your personal data.
- Withdraw consent and object to certain processing.
- Request portability of your data.
- Lodge a grievance with our Data Protection Officer (below).
To exercise these rights, email hello@woodash.site. We respond within the timeframes required by the DPDP Act.
10. Children
The Service is not directed to children under 18, and we do not knowingly collect their personal data.
10a. AI features
WooDash offers optional AI features ("WooDash AI"), including a conversational assistant, demand forecasting, anomaly detection, review summarisation and smart descriptions. These features are opt-in and can be disabled at any time in your account settings. When enabled, WooDash AI processes your store data (e.g., orders, products, anonymised metrics) to generate answers, predictions and insights solely for your use. We do not use your data to train third-party AI models, and we do not sell your data. AI outputs are generated dynamically and are not stored beyond what is necessary to deliver the feature and your history.
11. Changes to this Policy
We may update this Policy and will post the revised version with a new "last updated" date. Material changes will be communicated via the Service or email.
12. Contact & Data Protection Officer
For privacy questions or to exercise your rights, contact our Data Protection Officer at hello@woodash.site, or write to WooDash Labs, Tidel Park, Rajiv Gandhi Salai, Taramani, Chennai, Tamil Nadu 600113, India.
Have a privacy question?
Our Data Protection Officer is happy to help with access, deletion or any concern about your data.
Contact our DPO