Privacy policy

What we collect

Your email address, so you can sign in. We use a six-digit code rather than a password, so we never hold one.

Your name and home city, which other users see. Your phone number and date of birth, which they never do — the phone is so we can reach you about a delivery, the date of birth is to check you are 18.

The requests, trips, bids and messages you create, and a record of every step a deal passes through.

What other users see

Your display name, your city, how many deliveries you have completed, and whether you are Wasil Verified.

Never your email address. Never your phone number. Never your date of birth. This is enforced in the code, not by policy: profiles are assembled by a single function that cannot return those fields.

Your six-digit handover code is shown only to you. It is removed from the traveller's copy of the deal before it leaves our servers.

Who else we send it to

Stripe processes payments. They receive the amount and the details you type into their own payment form — we never see or store your card number.

Resend sends our email. They receive your email address and the contents of the message.

That is the complete list. We do not sell your data, and we do not share it for advertising.

How long we keep it

For as long as your account exists, plus what we must retain afterwards for tax and dispute records.

Ask us to delete your account and we will, except where a record of a completed payment must be kept by law.

Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Email us and we will answer.