Public information

WERPAK privacy notice

This Release Candidate notice describes the implemented data flows. The legal controller identity, jurisdiction-specific wording and published retention schedule must be approved before public launch.

Data and purpose

WERPAK processes account and verification data to secure identities; profile and community content to provide user-selected services; location only when a nearby, map or directions feature is requested; and immutable order, payment, wallet, tax, ticket and audit evidence to provide and protect commercial services.

Sharing and processors

Data is sent only to a configured provider needed for the selected function, such as payment, email, push, storage, map or streaming delivery. Provider credentials are externalized, and sensitive payment instrument data is not collected by WERPAK application forms.

Control and retention

Users can change optional analytics, personalization and marketing choices, export their account inventory, revoke sessions and request deletion. Deletion anonymizes identity and public content while retaining legally required financial, fraud-prevention, ticket and audit evidence under the published policy version.

Security

Transport encryption, scoped authorization, step-up controls, append-only financial evidence, encrypted push references, rate limits and audited Admin changes protect the service. No system can promise absolute security; suspected incidents should be reported through Support.