Privacy policy

Two kinds of people, two kinds of data

Businesses and the people who run them. If you create a Slypp account, we decide how your account details are used, and this policy tells you how.

The customers of those businesses. When a business writes your name and phone number on an order, or sends you a receipt, it does so through Slypp. The business decides what to record about you and when to message you. We store and send that information for the business, on its instructions, and do not use it for anything else.

If you are a business using Slypp, you are responsible for telling your customers that you use Slypp and for having their permission before you send them WhatsApp messages.

What we collect

• Your account: your business name, your name, your mobile number, your password, your language and your time zone. We never store the password itself, only a one-way scrambled copy that can check it.
• Your records: the orders and receipts you create, which can include your customers' names and phone numbers, the items and work involved, prices, discounts, tax, advances, notes, due dates and status.
• What an order records about an item, depending on your kind of business: for example measurements, a vehicle's registration number and mileage, a phone's IMEI, its condition and damage, photos of the item, and voice notes you record. Details you choose to keep for a customer's next visit, such as their measurements, are saved with that customer.
• A phone's passcode or PIN, when a business records one to work on the phone. It is stored encrypted and deleted when the order is marked collected.
• Eye prescriptions, when an optician records them for a customer: the powers for each eye, measurements such as the distance between the pupils, who prescribed them and when, a photo of the doctor's slip and notes. A change to a prescription is kept as a new version alongside the old one, so the business can see what each order was made to.
• Your payments to Slypp: your plan, the amount and period, the bank account you paid into, and the screenshot you upload as proof of the transfer. That screenshot can show your name, your bank and part of your account number.
• Sign-in and device details: your IP address and the type of browser or phone you use when you sign in, which we keep to protect your account.
• Messages you send us, such as a support question.

We do not collect card numbers. If we add card payments, the payment company will collect card details, not Slypp.

The slypp.io website does not use advertising or analytics trackers. Like any website, our hosting provider keeps short-lived server logs, including IP addresses, to run and protect it.

How we use it

• To run your account and keep your orders and receipts.
• To send receipts and job updates to a business's customers on WhatsApp when the business asks us to.
• To check your payments, switch your plan on and give you receipts for what you paid.
• To message you on WhatsApp about your account, such as your plan, and to verify your mobile number when you send us its code.
• To keep Slypp secure: to spot and block misuse, limit repeated sign-in attempts, and investigate problems.
• To answer you when you contact us.
• To meet our duties under the law, such as keeping payment records for tax.

We do not sell personal information. We do not show ads. We do not use a business's customer records to market anything to those customers.

WhatsApp messages

Receipts and job updates are sent through the WhatsApp Business Platform, which is run by Meta. To deliver a message, Meta receives the customer's phone number and the message, and handles them under its own terms and privacy policy.

We only send the kinds of messages a business asks for about its own jobs, such as a receipt or a note that work is ready. We do not send advertising through Slypp.

If you are a customer and no longer want these messages, tell the business or contact us, and we will stop them.

Who we share it with

We use trusted service providers to run Slypp. They handle personal information only to provide their service to us, under agreements that require them to protect it:

• Hosting and database providers, which run the website, dashboard, servers and database.
• A file storage provider, which stores uploaded files such as payment proofs and the photos and voice notes on orders.
• Meta, which delivers WhatsApp messages through the WhatsApp Business Platform.

We also share information when Pakistani law requires it, for example when a court or an authorised agency makes a lawful request under the Prevention of Electronic Crimes Act 2016. If Slypp is sold or merged, the accounts would pass to the new owner under this policy.

Where it is stored

Our service providers store data on servers outside Pakistan. By using Slypp you agree to your information being stored and processed there. We choose providers that protect it with encryption and security controls.

How long we keep it

• Your account and records: for as long as your account is open. If you ask us to delete your account, we delete it within 30 days.
• Photos and voice notes taken for an order that was never created: one week.
• Passcodes and PINs: until the order is marked collected.
• Payment records, receipts and payment proofs: up to six years, because tax law requires us to keep records of payments.
• Sign-in and security records: up to one year, to protect accounts and to meet the law's record-keeping requirements.
• Backups: deleted information can remain in backups for a short time until they are replaced.

How we protect it

Everything travels over encrypted connections. Passwords are stored only in scrambled form. Payment proofs, order photos and voice notes are kept in private storage and opened only through short-lived links: order photos and voice notes by the business that took them, payment proofs also by the Slypp staff who check payments. Passcodes are stored encrypted. Only people who need access to run Slypp have it.

No system is perfectly secure. If a security breach puts your information at risk, we will tell you without undue delay and tell the authorities where the law requires it.

Your choices

You can change your name, business name, language and password in Settings, and delete your account there too (slypp.io/delete-account explains how). To do anything else, contact us. You can ask us to:

• Tell you what information we hold about you, and give you a copy.
• Correct information that is wrong, including your mobile number.
• Delete your account and the records in it, apart from what the law requires us to keep.
• Stop WhatsApp messages to your number.

We reply within 30 days. If a request is about a business's customer records, we may pass it to that business, because it decides what those records hold.

Cookies

The dashboard uses a few small cookies that it needs to work: one keeps you signed in, one remembers your language and one remembers your time zone. It also remembers on your device if you hid the offer to install the app. The apps keep your sign-in in your phone's secure storage. We do not use cookies for advertising or tracking.

Age

Slypp is for businesses. You must be 18 or older to create an account.

Changes to this policy

When we change this policy, we update the date at the top. If a change affects how we use your information in an important way, we tell account holders on WhatsApp or in the dashboard before it takes effect.

The law that applies

This policy is governed by the laws of Pakistan, including the Prevention of Electronic Crimes Act 2016 and the Electronic Transactions Ordinance 2002. If a data protection law comes into force in Pakistan, we will follow it.

Contact us

For any question or request about your information, email us or message us on WhatsApp. Tell us the mobile number you log in with, so we can find your account.

Email: hello@slypp.io

WhatsApp: +92 317 7811247