Privacy Policy

This Privacy Policy explains how MAGIC BOX TECHNOLOGY FZCO (“we”, “us”), the company behind Wotrace, collects, uses and protects personal data when you visit www.wotrace.com, use the Wotrace web application or the Wotrace apps for iPhone and Android (together, the “Service”).

1. Who we are

MAGIC BOX TECHNOLOGY FZCO is a company registered in the United Arab Emirates. You can reach us at help@wotrace.com.

2. Two roles

Wotrace is used by businesses (“Customers”) to run their own operations. When a Customer stores information about its own clients, staff or leads in Wotrace, that Customer decides what is stored and why; we process that information on the Customer’s behalf and on its instructions. For information about your own Wotrace account, and for visitors to our website, we are responsible for the data ourselves.

3. Information we collect

• Account information: your name, email address, phone number, company, role and language preference.
• Content: the records, files and messages your organisation creates or uploads to the Service.
• Usage and device information: sign-in times, IP address, browser or app version, and technical logs needed to keep the Service secure and working.
• Push notification tokens, if you allow notifications in our mobile apps.
• Website statistics: on websites published with Wotrace we count page views without cookies, using a visitor identifier that changes every day and cannot be used to identify you.
• Communications: what you send us when you contact support.

4. Data from connected services

A Customer can connect third-party services to Wotrace, such as Meta (Facebook and Instagram Lead Ads, WhatsApp Business), Google Ads, TikTok, LinkedIn, Stripe, Slack and Microsoft Teams. When a Customer connects such a service, we receive only the data covered by the permissions the Customer grants — for example the answers people submit in a lead form, messages sent to the Customer’s business number, payment events, and the identifiers and access tokens needed to keep the connection working.

We use this data only to deliver the features the Customer has set up (for example, turning a new lead into a record in the Customer’s own module, or sending a message the Customer chose to send). We do not sell it, we do not use it for advertising, and we do not use it to build profiles across Customers. Access tokens are stored encrypted. Data received from Meta is handled in line with the Meta Platform Terms, and a Customer can disconnect a service at any time, which stops further data from being received.

5. How we use information

• To provide, maintain and support the Service.
• To keep the Service secure, prevent abuse and investigate incidents.
• To send service messages and notifications you have asked for.
• To understand how the Service is used, in aggregate, so we can improve it.
• To comply with legal obligations.

We do not sell personal data, and we do not show advertising in the Service.

6. Legal bases

Where data protection laws such as the EU GDPR or UK GDPR apply, we rely on: performance of our contract with the Customer; our legitimate interests in operating and securing the Service; consent, where we ask for it (for example, push notifications); and compliance with legal obligations.

7. Who we share information with

• Service providers that host and run the Service for us, such as cloud hosting and storage, and push notification services (Apple Push Notification service and Google Firebase Cloud Messaging). They may only use the data to provide their services to us.
• Connected services, when a Customer chooses to send data to them.
• Authorities, where the law requires it.
• A successor, if our business is reorganised or sold, under the same protections.

8. International transfers

Our servers and service providers may be located in countries other than yours. Where required, we use appropriate safeguards for such transfers.

9. How long we keep data

We keep Customer content for as long as the Customer’s account is active. After an account is closed, or after a confirmed deletion request, we delete or anonymise the data within 30 days, except where the law requires us to keep it longer. Backups are overwritten on a rolling basis within 30 days.

10. Security

All traffic is encrypted with HTTPS. Each organisation’s data is isolated, access is controlled by roles and field-level permissions enforced on the server, credentials for connected services are encrypted at rest, and changes are recorded in an audit trail. No system is perfectly secure, but we work to protect your data and will notify affected Customers of a breach as the law requires.

11. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, and to object to or restrict certain processing. To use these rights, email help@wotrace.com. If your data is held by one of our Customers (for example, you filled in a form on a business’s website), please contact that business first; we will help them respond. See also our data deletion instructions.

12. Children

The Service is meant for businesses and is not directed to children under 16. We do not knowingly collect their personal data.

13. Cookies and local storage

The Wotrace application uses your browser’s local storage to keep you signed in and remember your preferences. Websites published with Wotrace measure visits without cookies. We do not use advertising or tracking cookies.

14. Changes

We may update this policy. We will change the date at the top and, for significant changes, tell Customers in advance.

15. Contact

MAGIC BOX TECHNOLOGY FZCO, United Arab Emirates — help@wotrace.com