Last updated: July 8, 2026
1. Introduction
Waoso ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains in detail what information we collect, how we use it, who we share it with, and what rights you have. By using Waoso, you agree to the terms of this policy.
2. Information We Collect
We collect the following types of information:
- Account Information: Email address, username, password (encrypted), and optional display name, avatar, and bio provided during registration.
- OAuth Information: When you use Google, GitHub, or other third-party login, we receive basic public profile information (such as username, avatar) from that service.
- Usage Data: IP address, browser type and version, device type, operating system, access time, page view paths, search keywords, clicked links, and session duration.
- Cookies and Local Storage: Used for authentication, session maintenance, cookie consent preferences, device ID (for anonymous behavior tracking), and personalization data for recommendation systems.
- User-Generated Content: Deals submitted, product reviews, review articles, uploaded images, voting records, favorites, and followed categories.
- Commercial and Interaction Data: Records of clicking affiliate links, affiliate conversion data, ad impressions and clicks.
- Geolocation: Approximate country/region derived from IP address for content localization, age-gate compliance, and traffic analysis.
- Inferred Information: Preference profiles generated based on your browsing behavior, favorites, votes, and followed categories for personalized recommendations.
- Communication Data: Email addresses when subscribing to newsletters, push notification subscription status, and customer service or privacy requests you initiate.
3. How We Use Your Information
- Provide Services: Display deals, manage your account, process submissions and comments, send password reset and verification emails.
- Personalize Experience: Recommend relevant deals, stores, and articles based on your behavior and history.
- Communications: Send transactional emails (account notifications, security alerts), optional newsletters (unsubscribable), and push notifications (with your consent).
- Security and Fraud: Detect abnormal behavior, prevent abuse, vote manipulation, and spam.
- Analytics and Improvement: Analyze website traffic, user engagement, and content performance to optimize product features and user experience.
- Legal Compliance: Respond to legal requests, enforce our terms, and protect our and users' rights.
- Advertising and Affiliates: Display relevant ads, track affiliate link conversions for commission calculation (disclosed per FTC guidelines).
4. Information Sharing and Disclosure
We do not sell your personal information. We may share information in the following circumstances:
- Service Providers: Hosting services, CDN, email delivery, search indexing (Meilisearch), analytics tools, and database services. These providers may only process data according to our instructions.
- Affiliate Partners: When you click affiliate links to Amazon, Walmart, Target, or other retailers, these third parties receive your click information. Your subsequent interactions are governed by their privacy policies.
- Legal Requirements: We may disclose necessary information when required by law, court order, or government request.
- Business Transfers: In the event of a merger, acquisition, or asset sale, user information may be transferred as part of the business assets.
- Rights Protection: When necessary to protect our rights, property, or safety, or the rights, property, or safety of other users or the public.
5. Cookies and Tracking Technologies
We use cookies and similar technologies (such as local storage, device fingerprinting) to:
- Maintain your login state and security authentication
- Remember your preferences (such as language, cookie consent choices)
- Analyze website traffic and user behavior
- Provide personalized recommendations and ads
- Prevent fraud and abuse
You can manage cookies through your browser settings, or choose accepted categories via our cookie consent banner on first visit. We honor Global Privacy Control (GPC) and Do Not Track (DNT) signals. See our Cookie Policy for details.
6. Data Security
We implement reasonable administrative, technical, and physical security measures to protect your information, including:
- Encryption of data in transit and at rest (HTTPS, database encryption)
- Role-based access control
- Password hashing storage (bcrypt)
- Two-factor authentication (2FA) support
- Regular security audits
However, no Internet transmission method is 100% secure. We encourage you to use strong passwords and enable two-factor authentication.
7. Data Retention
- Account Information: Retained until you delete your account or request deletion.
- User Content: Deals, reviews, and other content you submit are retained until you delete them or they are removed for terms violations. Some aggregated data may be retained after anonymization.
- Usage Data: Raw logs retained for up to 90 days, then aggregated into anonymous statistics.
- Cookie and Tracking Data: Retained per cookie category, see Cookie Policy for details.
- Deletion Requests: Upon receiving a valid deletion request, we will delete or anonymize your personal information within 45 days, unless required by law to retain it.
8. Children's Privacy (COPPA Compliance)
Our service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we discover that we have inadvertently collected such information, we will delete it immediately. If you believe we have collected information from a child, please contact privacy@waoso.com.
We implement an age-gate system requiring users to confirm they are at least 13 years old before accessing certain content.
9. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the following rights:
- Right to Know: Understand what categories of personal information we collect, the sources, purposes, and categories of third parties with whom we share it.
- Right to Delete: Request deletion of your personal information (subject to certain exceptions).
- Right to Correct: Request correction of inaccurate personal information.
- Right to Opt-Out of Sale/Sharing: Opt out of the "sale" or "sharing" of personal information (we do not sell personal information, but you may opt out of targeted advertising and personalized recommendations).
- Right to Limit Use of Sensitive Personal Information: Restrict our use of sensitive personal information.
- Right to Data Portability: Obtain a copy of your personal information in a commonly used format.
- Right to Non-Discrimination: You will not receive discriminatory treatment for exercising your privacy rights.
Exercising Your Rights: After logging into your account, visit the Privacy tab in your Account Settings, where you can: view your data, download a copy, correct information, submit deletion requests, and manage cookie preferences. Or email privacy@waoso.com.
We respond to verified requests within 45 days. If more time is needed, we will inform you of the reason and extension period (up to 90 days total).
10. Your Rights (All Users)
Regardless of where you are located, you have the following rights:
- Right to Access: Know what information we hold about you.
- Right to Rectification: Update your inaccurate information.
- Right to Erasure: Request deletion of your personal information.
- Right to Restrict Processing: Restrict our processing of your information in specific circumstances.
- Right to Data Portability: Obtain a copy of your data in a structured format.
- Right to Object: Object to certain processing activities based on legitimate interests.
- Right to Withdraw Consent: Withdraw consent to optional processing at any time.
To exercise these rights, please log in to Account Settings or contact privacy@waoso.com.
11. Third-Party Services
Our service contains affiliate links to third-party websites (such as Amazon, Walmart, Target, Best Buy, and other retailers). When you click these links, you leave our website, and your interactions are governed by that third-party website's privacy policy. We are not responsible for the privacy practices of third-party websites.
Third-party services we use include: email delivery services (Resend), search services (Meilisearch), CDN, cloud storage (S3), and analytics tools. These service providers may only process data on our behalf under contract.
12. International Data Transfers
Our servers are located in the United States. If you access our service from outside the United States, your information will be transferred to and processed in the United States. We ensure that such transfers comply with applicable legal requirements.
13. Policy Changes
We may update this Privacy Policy from time to time. Material changes will be notified by posting the new policy on this page and updating the "Last updated" date. We recommend you review this page periodically.
14. Contact Us
If you have any questions, concerns, or wish to exercise your privacy rights, please contact: