How does Pelicart use your data?
This page lists the data Pelicart collects and each service category that processes it. It also states Pelicart’s current retention periods and explains how to delete your data.
Last updated 2026-07-22.
Read the security guide for Pelicart’s technical safeguards and account permissions. That guide also explains how you can verify its claims.
What Pelicart collects
Pelicart collects information needed to run your account, shop for you, and support the service. The categories below form the complete list:
- WhatsApp profile: phone number, display name, and the first name you provide
- Messages: text, images, and replies exchanged with Pelicart
- Store access: an encrypted session token that proves you signed in
- Shopping data: order history, carts, and delivery addresses
- Account data: an internal identifier and Pelicart Pro subscription status
- Billing data: the name and email address Stripe uses to manage a subscription
- Operational records: audit logs and execution traces that record model decisions, tool calls, and errors
Pelicart encrypts each store token before storage. It uses 256-bit Advanced Encryption Standard in Galois/Counter Mode (AES-256-GCM).
What Pelicart never collects
Pelicart never stores your Woolworths or Checkers password. It never receives your credit card or bank account details. You review and pay for the cart inside the store’s app. The security guide explains the safeguards that enforce these limits.
Who else processes your data
These service categories process part of your data to deliver Pelicart. Each entry states what the service receives:
- Meta through the WhatsApp Business Application Programming Interface (API): messages you send and replies Pelicart returns
- Artificial intelligence (AI) model providers: recent conversation needed to generate a reply
- Database: account data, encrypted store tokens, shopping data, and messages
- Hosting provider: website requests and Pelicart server traffic
- Observability service: message text and execution traces that record model decisions, tool calls, and errors
- Stripe: name, email address, subscription status, and card details entered in Stripe’s checkout
- Google Maps: a new delivery address when you ask Pelicart to add it
- Woolworths and Checkers: carts and orders associated with your linked store account
How long Pelicart keeps your data
Retention depends on the type of data. These are Pelicart’s current retention periods:
- Recent chat memory: one day, followed by automatic deletion
- Audit log: no automatic deletion date at present
- Account and shopping data: until you ask Pelicart to delete it
Delete your data
Message “delete me” on WhatsApp. We then remove your account, store token, addresses, audit log, and chat memory.
Ask about privacy or security
The security guide explains the threat model: the risks Pelicart considers and the safeguard for each one.