WoltFlow Privacy Policy
Last Updated: August 2025
About this Privacy Policy
This Privacy Policy explains how WoltFlow ("we", "us", "our") collects, uses, and protects your personal information when you use our automated Wolt gift card purchasing service. Please read this Privacy Policy carefully.
Information We Collect
Account Information
When you create an account, we collect your Google account information including name, email address, and unique user identifier through Google OAuth authentication.
Service Credentials
To provide our automation services, we securely store your Cibus credentials (username, password, company information) and Wolt tokens. All credentials are encrypted using industry-standard encryption methods.
Gmail API Data
With your explicit consent, we access your Gmail account to retrieve Wolt gift card codes from purchase confirmation emails. We only access emails from info@wolt.com containing gift card information and do not read or store any other emails.
Usage and Technical Data
We collect information about how you use our service including automation runs, settings configurations, error logs, and technical information necessary for service operation and troubleshooting.
Notification Information
If you enable notifications, we collect your phone number or email address for sending SMS or email notifications about automation status.
How We Use Your Information
- Provide automated Wolt gift card purchasing services
- Authenticate and manage your account access
- Process gift card purchases and apply codes to your Wolt account
- Send notifications about automation status and results
- Troubleshoot technical issues and improve service reliability
- Maintain security and prevent unauthorized access
- Comply with legal obligations and enforce our terms
Data Storage and Security
AWS Cloud Infrastructure
Your data is securely stored on Amazon Web Services (AWS) cloud infrastructure with enterprise-grade security measures including encryption at rest and in transit.
Database Security
We use secure database systems with proper access controls, regular backups, and monitoring to protect your information.
Access Controls
Access to your personal information is strictly limited to authorized personnel who need it to provide and maintain our services.
Information Sharing
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- With service providers who assist in operating our platform (AWS, notification services)
- When required by law or to respond to legal process
- To protect the rights, property, or safety of WoltFlow, our users, or others
- In connection with a merger, acquisition, or sale of assets (with notice to users)
Third-Party Services
Google Services
We use Google OAuth for authentication and Gmail API for retrieving gift card codes. Your use of Google services is subject to Google's Privacy Policy.
Cibus and Wolt
Our service automates interactions with Cibus and Wolt platforms. We are not responsible for the privacy practices of these third-party services.
Data Retention
We retain your personal information for as long as necessary to provide our services or as required by law. When you delete your account, we will delete your personal information within 30 days, except for information we must retain for legal or regulatory purposes.
Children's Privacy
Our service is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on our website and updating the "Last Updated" date.
Contact Us
If you have any questions about this Privacy Policy or our privacy practices, please contact WoltFlow at support.