Privacy Policy
This Privacy Policy explains how Wootlet SRL ("we", "us", or "our"), the operator of Wootlet, collects, uses, and protects your information when you use our service. Wootlet tracks deals on Woot.com and notifies you when products matching your saved keywords appear. By using Wootlet, you agree to the practices described here. This policy works alongside our Terms of Service.
Information we collect
We collect only the information needed to operate the service. This falls into a few categories.
Account information. When you create an account we collect your email address, an encrypted password, your first and last name, and an optional profile avatar (stored on AWS S3). We also store your time zone, preferred language, theme preference, notification preferences (instant, daily digest, or off), and any user preferences you set in the app.
Optional integrations. If you choose to receive push notifications via Pushover, we store the Pushover API token and user key you provide so we can deliver alerts to your devices. If you generate personal API tokens for programmatic access, we store those tokens and log usage counts. If you enable two-factor authentication, we store an encrypted one-time password secret and encrypted backup codes. If you sign in through a third-party identity provider, we store the provider name, your unique identifier with that provider, and an authentication token.
Account membership. Wootlet supports multiple accounts and team membership. We record which accounts you belong to, invitations you send or receive, and timestamps for when you accept the Terms of Service and this Privacy Policy.
App usage data. We store the keywords you save for deal alerts and a record of which in-app announcements you have read.
Server logs. Like most web services, our servers automatically record standard request information such as IP address, user agent, and request timestamps. We use these logs for security, debugging, and abuse prevention.
What we do not collect. We never see or store your full payment card details. Subscription billing is handled directly by Stripe and Paddle; we receive only the metadata they return (such as the last four digits of your card, billing country, and subscription status). We do not run third-party web analytics, and we do not sell your personal data.
How we use information
- To provide and maintain your account and the deal-tracking features you signed up for.
- To match incoming Woot deals against your saved keywords and send you notifications.
- To send transactional email such as confirmations, password resets, invitations, and important service updates.
- To process subscription billing through Stripe or Paddle.
- To secure the service, detect abuse, debug issues, and improve reliability.
- To comply with legal obligations.
Sharing and sub-processors
We share personal data only with the service providers we need to operate Wootlet. Each provider is bound by its own data protection terms and may only process your data on our behalf.
- AWS S3 — file storage for avatars and other uploaded attachments.
- Stripe — subscription billing and payment processing.
- Paddle — alternative subscription billing and merchant of record.
- Mailpace — transactional email delivery.
- Sentry — error monitoring; error reports may include request metadata and your user identifier when an exception occurs.
- Pushover — only used if you supply your own Pushover credentials, to deliver your push alerts.
We may also disclose information if required by law, to enforce our Terms of Service, or to protect the rights, safety, and property of our users or others. If Wootlet SRL is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction; we will notify you before your data becomes subject to a different privacy policy.
Cookies and similar technologies
We use a small number of cookies that are strictly necessary to run the service:
- A session cookie so you stay signed in.
- A "remember me" cookie if you tick that option at sign-in.
- A CSRF token cookie to protect against cross-site request forgery.
We do not use advertising cookies or third-party tracking cookies.
Your rights and choices
Depending on where you live, you may have rights over your personal data, including the right to access, correct, delete, or export it, and the right to object to or restrict certain processing. You can update most of your account information directly in your settings. For other requests, contact us at support@wootlet.com and we will respond within a reasonable timeframe.
You may request deletion of your account at any time. We will remove your personal data except where retention is legally required (for example, billing and tax records, which we may keep for up to seven years). You also have the right to lodge a complaint with your local data protection authority.
Data retention
We keep your account data for as long as your account is active. After deletion, residual copies may persist briefly in encrypted backups before being overwritten in the normal backup cycle. Records we are legally required to retain — such as billing and tax records — are kept for the period required by applicable law.
Security
We use industry-standard measures to protect your information, including TLS encryption in transit, bcrypt-hashed passwords, and encryption of sensitive secrets such as two-factor authentication codes. No system is perfectly secure, however, and we cannot guarantee absolute security. If you believe your account has been compromised, please contact us immediately at support@wootlet.com.
Children
Wootlet is not directed at children, and we do not knowingly collect personal information from anyone under the age of 16. If you believe a child has provided us with personal data, please contact us and we will delete it.
International data transfers
We are based in the Republic of Moldova. Some of our sub-processors are located in other jurisdictions, including the United States and the European Union. When personal data is transferred across borders, we rely on appropriate safeguards — such as standard contractual clauses or equivalent mechanisms — where required by applicable law.
Third-party links and affiliation disclaimer
Wootlet is an independent service. It is not affiliated with, endorsed by, or sponsored by Woot, Inc. and Amazon.com, Inc.. When you follow a link from Wootlet to Woot or any other external website, the privacy practices of that website apply to your visit there, not this policy. We encourage you to review the privacy policies of any third-party sites you visit.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the last-updated date shown above. For material changes, we will notify you in the app and ask you to re-accept the policy before continuing to use Wootlet.
Contact us
For any privacy questions, data requests, or concerns about how we handle your information, contact Wootlet SRL at support@wootlet.com. This policy is governed by the laws of the Republic of Moldova.