Wasooli — Privacy Policy
Last updated: 5 October 2026
Wasooli is a Shopify app that tells a seller whether their courier has actually paid them for each COD (cash-on-delivery) order. This policy explains what the app stores, what it deliberately does not store, where it is kept, and how to have it deleted.
It is written to be read, not to be survived. If anything here is unclear, write to support@bifrosttech.io and we will answer in plain language.
1. Who we are
Wasooli is operated by Bifrost Tech.
Contact for any privacy question, correction or deletion request: support@bifrosttech.io
2. What the app does, in one paragraph
A Pakistani courier collects cash from your customer, holds it, and sends it to you days or weeks later, minus charges. Couriers send you a payment file listing what they paid for. Wasooli reads your Shopify orders, reads the courier's payment file, matches the two on the tracking number, and tells you which parcels are paid, which are still with the courier, and which came back.
3. What we take from Shopify — and what we deliberately do not
When you install Wasooli it asks Shopify for permission to read and update your orders. From each order, the app requests only these fields:
- the order's ID and order number
- the date it was created
- its payment status and fulfilment status
- the payment method name (to tell COD orders from prepaid ones)
- the order total
- the tracking number and courier name on each fulfilment
We do not ask Shopify for your customers' names, email addresses, phone numbers or shipping addresses. They are not in the request we send, and there is nowhere in our database to put them. This is not a promise about how carefully we handle that data — it is that we never receive it.
We also store your store's domain and the access token Shopify issues us. The token is encrypted before it is written to disk.
We do not use analytics, advertising, tracking pixels or session recording. The app sends no data to any third party other than Shopify.
4. What is in the courier files you upload — please read this part
This is the part of the policy that matters, and it is the part most app policies leave vague.
When you upload a courier's payment file, we store the file exactly as you sent it, and we store each row of it. We do that because those rows are the evidence behind every figure the app shows you: when Wasooli says an order was paid, you can see which line of which file said so. Without the original we could not show you that, and a money figure you cannot trace back is a figure you cannot check.
Some courier files contain information about your customers, and so, therefore, do we:
| Courier file | What it contains about a shopper |
|---|---|
| M&P consignment report | the recipient's name |
| Trax Finance Payments | the recipient's name and mobile number |
| PostEx, Leopards, DigiDokaan | nothing — only origin and destination cities |
| TCS Payment Detail | nothing |
| TCS Order Reconciliation | name and street address — we refuse this file and will not process it |
That last row is deliberate. The TCS Order Reconciliation export carries recipients' names and addresses, and reading it would not have improved any figure we show, so the app rejects it rather than store data it does not need.
What we never do with that information: it is never shown on any screen, never used to decide which order a payment belongs to, never sent anywhere, and never used for marketing. Matching is done on the tracking number alone. We do not match on a person's name, because two different sellers can have two different customers with the same name, and a wrong match is a wrong number about somebody's money.
5. How long we keep things
| What | How long |
|---|---|
| A file we could not process (wrong format, unrecognised layout) | the file's contents are deleted 15 days after upload. We keep it that long only so we can answer "why was my file rejected?" |
| A file we did process | kept while your store is installed, because it is the evidence behind your figures |
| Your orders, matched rows and the history of every status change | kept while your store is installed |
| Everything, after a deletion request | see §8 |
6. Who else can see it
Two companies, and no others:
- Shopify — the app runs inside Shopify's admin and reads your orders through Shopify's API. Shopify's own privacy policy covers what they hold.
- Contabo GmbH — our hosting provider. They operate the server; they do not access the data on it in the ordinary course of business.
We do not sell data, share it with advertisers, or give it to anyone else. There is no third analytics or marketing company in this list because there is not one in the app.
7. Where your data is kept
On a private server operated by Contabo GmbH in Germany, in the European Union.
Data travels to and from the app over an encrypted connection (HTTPS/TLS). Your Shopify access token is encrypted before it is stored.
8. Deleting your data
Uninstalling the app deletes everything, 48 hours later.
The moment you uninstall, Wasooli stops reading your orders and stops doing any work for your store. Your records are still there for the next two days — so if you uninstall by mistake and reinstall the same day, nothing is lost.
After 48 hours, Shopify instructs us to erase the store's data and we do. This is automatic and applies to every uninstall; you do not have to ask. At that point we remove everything for that store: every order record, every uploaded courier file, every matched row, the full history of status changes, and the store's access token. It is not recoverable afterwards — not by us, and not by reinstalling.
If you want your data gone sooner, write to support@bifrosttech.io and we will erase it on request.
If you are planning to keep your records, export them before you uninstall. The app's CSV exports stay available right up to the moment you uninstall, including during a lapsed subscription.
9. Requests about one of your customers
If one of your customers asks you what information exists about them, or asks for it to be deleted, you can forward that request to us at support@bifrosttech.io and we will respond within 30 days. Shopify also forwards such requests to us automatically.
We should be honest about what we can and cannot do here. Wasooli stores no customer identifier of any kind — no Shopify customer ID, no email, no phone number as an identifier — so there is no key we can look a person up by. The information described in §4 sits inside a file you uploaded, not in a customer record.
We deliberately do not search those files by a name or a phone number to try to find a match. A name is not unique, and deleting or disclosing the wrong seller's row on the strength of a matching name would be a worse failure than not matching at all. What we can do, and will do, is delete the data for your whole store (§8), which removes those files entirely.
10. Security
- Your Shopify access token is encrypted before it is stored.
- All traffic uses HTTPS.
- Backups are encrypted with AES-256, and the key is not kept with them.
- Every request Shopify sends us is cryptographically verified before it is acted on.
- Each store's data is separated from every other store's, and every query the app makes is scoped to a single store.
- Access to the server is limited to the people who operate the app.
No system is perfectly secure, and we would rather say that than imply otherwise. If you believe something is wrong, please write to support@bifrosttech.io.
11. Children
Wasooli is a business tool used by shop owners. It is not directed at children and we do not knowingly collect information about them.
12. Changes to this policy
If we change what the app stores, we will update this page and change the date at the top. If a change is significant, we will say so here rather than hope it is noticed.
13. Contact
support@bifrosttech.io
Questions in English or Roman Urdu are both fine.