Privacy Policy

1. Introduction

Ewsali ("we", "us", or "our") provides a QR-based service that lets people send private alerts to owners of registered physical items such as vehicles. This Privacy Policy explains what information we collect, how we use it, and the choices available to you when you use our website, dashboard, and sticker scan pages.

2. Information we collect

Depending on how you use Ewsali, we may collect the following categories of information:

• Account information: name, email address, phone number (optional), and password when you register or sign in.
• Item and sticker data: item name, type, public label, private notes, sticker codes, activation status, and notification preferences.
• Alert submissions: reason selected, optional short note (up to 50 characters), and optional image uploaded by someone who scans a sticker.
• Abuse-prevention signals: hashed browser fingerprint, hashed IP address, and hashed user agent to detect spam, rate-limit misuse, and support blocking or reporting.
• Technical and usage data: session cookies, locale preference, server logs, and similar data needed to operate and secure the service.

3. How we use information

We use the information we collect to:

• Create and manage your account, items, and stickers.
• Deliver alerts to item owners through the dashboard and, when enabled, email, SMS, or WhatsApp.
• Keep owner contact details hidden on public scan pages unless the owner chooses otherwise.
• Prevent abuse, enforce rate limits, investigate reports, and protect the security of our users.
• Improve, maintain, and troubleshoot the service.

4. What scanners and the public see

When someone scans an active sticker, they see only the public item label (for example, a car description). We do not display the owner's phone number or email on scan pages by default. Alerts are delivered privately to the owner. Optional notes or images submitted with an alert are visible to the owner in their dashboard.

5. How we share information

We do not sell your personal information. We share information only in these limited cases:

• Service providers that help us run Ewsali, such as hosting, database, authentication, and messaging providers (including Supabase and, when enabled, Meta WhatsApp or other delivery channels).
• When required by law, regulation, legal process, or to protect the rights, safety, and security of users and the public.
• With your direction, such as when you choose a notification channel that requires sharing contact details with a delivery provider.

6. Cookies and similar technologies

We use essential cookies to keep you signed in and remember your language preference. You can control cookies through your browser settings, but some features may not work correctly if essential cookies are disabled.

7. Data retention

We keep information for as long as needed to provide the service, comply with legal obligations, resolve disputes, and enforce our policies. You may request deletion of your account and associated data, subject to limits required for security, fraud prevention, or legal compliance.

8. Security

We use technical and organizational measures designed to protect your information, including access controls, hashed identifiers for abuse prevention, and encrypted connections. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or restrict use of your personal information, or to object to certain processing. You can update account details in your dashboard settings. To make a privacy request, contact us using the email address on your account.

10. Children

Ewsali is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us so we can take appropriate action.

11. International transfers

Your information may be processed in countries other than your own, including where our service providers operate. We take steps designed to ensure appropriate safeguards when information is transferred internationally.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the date at the top of this page. Continued use of Ewsali after changes become effective means you accept the updated policy.

13. Contact

If you have questions about this Privacy Policy or how we handle your information, contact us at privacy@ewsali.com.