Wolfion — Privacy Policy
This Privacy Policy explains how Wolfion ("we", "us", "our") collects, uses, and protects your personal information when you use our website, mobile application, and related services (together, the "Service"). By using the Service you agree to the practices described below.
1. Information we collect
- Account information — your name, email address, and profile details provided through Google, email sign-in, or our authentication provider (Clerk).
- Order information — items you purchase, shipping address, contact phone number, and order history.
- Payment information — when you pay with bKash, Nagad, Rocket, card, PayPal, UnionPay, or QR, the payment is processed by the respective payment provider. We store only a reference to the transaction and a masked identifier (e.g. last four digits), never full card numbers or wallet PINs.
- Device & usage data — IP address, browser type, device model, operating system, pages viewed, and basic analytics needed to keep the Service running and secure.
- Cookies & local storage — used to keep you signed in, remember your cart, and preserve preferences.
2. How we use your information
- To create and manage your account.
- To process orders, payments, refunds, and deliveries.
- To provide customer support and respond to your enquiries.
- To send transactional messages (order confirmations, shipping updates, receipts).
- To detect, prevent, and investigate fraud or abuse of the Service.
- To comply with legal obligations (tax, accounting, consumer law).
- To improve our products, website, and mobile app.
3. How we share your information
We do not sell your personal information. We share it only with trusted service providers who help us operate the Service, including:
- Authentication: Clerk
- Hosting & infrastructure: Replit
- Payment processors: bKash, Nagad, Rocket, PayPal, UnionPay, and card networks
- Shipping & courier partners (only the address and contact required for delivery)
- Government or law-enforcement authorities when required by law
4. Data retention
We keep your account information for as long as your account is active. Order, invoice, and payment records are retained for at least 7 years to meet tax and accounting obligations in Bangladesh and Australia. You may request deletion of your account at any time (see Section 7).
5. Security
We use industry-standard safeguards including HTTPS encryption in transit, encrypted storage of sensitive data, role-based access control, and signed authentication tokens. No system is 100% secure; if you believe your account has been compromised, contact us immediately.
6. Children's privacy
The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.
7. Your rights
- Access the personal information we hold about you.
- Correct inaccurate or incomplete information.
- Request deletion of your account and associated data (subject to legal retention rules).
- Withdraw consent for marketing communications at any time.
- Lodge a complaint with your local data-protection authority.
To exercise any of these rights, email us at wolfion@wolfion.com.au.
8. International users
Wolfion operates from Bangladesh and Australia. By using the Service you understand that your information may be transferred to, stored, and processed in these countries.
9. Mobile app permissions
Our Android app does not request camera, microphone, contacts, or location permissions. It uses only the network and storage permissions required to load the website and keep you signed in.
10. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Effective date" at the top of this page. Continued use of the Service after changes means you accept the updated policy.
11. Contact us
Wolfion
Email: wolfion@wolfion.com.au
Website: www.wolfion.com.au