Privacy policy

KarachiSol is a small software studio based in Karachi, Pakistan, run by its founder Ubaid Hussain as a sole proprietorship. We run this website and publish apps on the Wix App Market and the Shopify App Store. In this policy, “we” and “us” mean KarachiSol, and KarachiSol is the controller of the personal data described here unless we say otherwise.

This policy covers three things: this website, the apps we publish (listed below, each with its own privacy section), and client projects we deliver. For any privacy question, email [email protected].

When you visit karachisol.com we collect only what the site needs to work and to improve:

• Messages you send us. If you email us or use the contact form, we receive your name, email address and whatever you write. We use it only to reply and, if we work together, to run the project.
• Basic technical data. Our hosting provider records standard server logs (IP address, browser type, pages requested, time) to keep the site secure and working.
• Aggregate usage statistics. If we measure visits, we use privacy-friendly analytics that do not track you across other websites and do not build advertising profiles.

We do not run advertising trackers and we do not sell personal data.

When a site owner installs one of our apps, two groups of people are involved: the merchant (the person or business that installs the app) and their visitors (people who use the merchant’s site).

• For the merchant’s own account data, we decide how it is used, so we are responsible for it.
• For visitor data collected through an app on a merchant’s site, the merchant decides why it is collected. We process it only on the merchant’s behalf, to provide the app’s features. Visitors with questions should contact the merchant first; we will help the merchant respond.

Billing for our apps is handled by the marketplace (Wix or Shopify). We never see or store card numbers.

Merchants who need a data processing agreement for our apps can request one at [email protected]. We also act on privacy requests the platforms pass to us, such as a customer asking for their data or asking for it to be deleted.

Details for each app

What each app collects, why and for how long is set out in a privacy section on that app’s page:

• PushPal for Wix
• PushPal for Shopify
• Floating Icons for Wix
• Floating Icons for Shopify

When we build software for a client, we handle any personal data in their systems only as instructed by the client and only for the project. Where needed, we sign a data processing agreement with the client.

This website uses only the cookies and browser storage it needs to work. If we ever add cookies that are not strictly necessary, such as for analytics that require them, we will ask for your consent first where the law requires it.

Our apps use browser storage on merchants’ sites only as described in each app’s privacy section. We honour the Global Privacy Control signal where the law requires it.

Where laws such as the GDPR apply, we rely on:

• Contract: to provide an app or service you signed up for.
• Consent: for push notifications, which only start after a visitor accepts the prompt.
• Legitimate interests: to keep our services secure, fix problems and understand usage in aggregate.
• Legal obligation: to keep records the law requires.

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

We do not sell or rent personal data. We share it only with:

• Service providers that run our infrastructure, under contracts that require them to protect the data and use it only for us. See the list below.
• Platforms our apps run on (Wix, Shopify) and browser push services, as described in each app’s privacy section.
• Authorities, when the law requires it.
• A buyer or successor, if KarachiSol or an app is sold or merged, under the same protections.

Our service providers

• App platforms: Wix and Shopify, where our apps run and are sold.
• Cloud hosting: for this website and our apps.
• Managed databases: to store app settings and push subscriptions.
• Email provider: for our business email.
• Live chat provider (Tawk.to): support chat inside our apps’ admin pages. When a merchant opens the chat, it receives their store name, store address, plan status and what they type.
• Browser push services (Google, Apple, Mozilla, Microsoft): delivery of push notifications sent with our apps.

All of them are established providers bound by data protection terms. Merchants and anyone whose data we hold can ask for the current list of providers by name at [email protected].

KarachiSol is based in Pakistan and our providers may process data in other countries, including outside the European Economic Area and the United Kingdom. When personal data from those regions is transferred, we rely on the safeguards the law provides, such as the European Commission’s standard contractual clauses and the UK addendum to them.

• App data: while the app is installed. After a merchant uninstalls, we delete it within the period given in that app’s privacy section, and sooner on request.
• Emails and contact messages: as long as needed to answer and, for clients, for the length of the relationship plus the period the law requires for business records.
• Server logs: kept for a short period for security, then deleted by the hosting provider.

We use encrypted connections (HTTPS), limit access to data to the people who need it, and use established providers for hosting and storage. No system is perfectly secure. If a breach puts your data at risk, we will notify the relevant authorities within the time the law sets (72 hours under the GDPR), tell affected merchants without undue delay so they can inform their visitors, and tell you directly where required.

Depending on where you live (for example under the GDPR in Europe or privacy laws in California), you can ask us to:

• tell you what personal data we hold about you and give you a copy,
• correct it,
• delete it,
• limit or object to how we use it,
• withdraw consent you have given.

Email [email protected] and we will reply within one month, as the GDPR requires, and within the deadline set by your local law if it is shorter. We may need to confirm your identity first. If you are a visitor of a site that uses our apps, we may pass your request to that site’s owner. You can also complain to your local data protection authority, for example the supervisory authority in your EU country or the UK Information Commissioner’s Office.

If you live in California or another US state with a privacy law, the sections above describe the categories of personal data we collect (identifiers, internet activity on our services, and what you send us), where it comes from, why we use it and who we share it with.

• We do not sell personal data and we do not share it for cross-context behavioural advertising.
• We do not collect sensitive personal data.
• You have the rights listed above, and we will not treat you differently for using them.
• You can use an authorised agent to make a request; we may ask them to prove they act for you.

Our website and apps are not meant for children under 16, and we do not knowingly collect their data.

If we change how we handle data, we will update this page and the date at the top. For significant changes to our apps, we will also tell merchants in the app or by email.

KarachiSol (Ubaid Hussain, sole proprietor), Karachi, Pakistan. Privacy questions: [email protected]. App support: [email protected]. You can also reach us through our contact page.