Privacy notice
Status: In force. Last changed: 16 October 2026 (the operator named, and descriptions of notifications and of payment data corrected). Effective from: 21 September 2026.
This notice covers the Wasp Developer Portal, operated by Stratsol Pty Ltd, a payments technology company based in Sydney, Australia. It explains what we collect, what we plan to collect, why, and what we do with it.
It covers the portal only. Payment data processed through Wasp on behalf of a merchant is not covered by this notice. It is governed by the agreements under which that merchant takes payments, and by the merchant's own privacy notice to its customers.
What we collect
When you register
The registration form asks for two things, and collects nothing else:
| What | Why |
|---|---|
| Your email address | To identify your account, verify it, and contact you about your access |
| What to call you | To address you properly when we reply |
We deliberately do not ask at registration for your phone number, your company, or what you intend to build. Those are questions about a relationship that has not been agreed yet, and an answer collected that early tends to be treated later as though something had been granted.
When you ask for access to a merchant
If you ask to be connected to the business you work for, that request is recorded so an administrator there can act on it. It holds:
| What | Why |
|---|---|
| Your account identifier, email address and what to call you | So the administrator can see who is asking, without having to establish it first |
| The merchant identifier you supplied | To route the request to the administrators for that business |
| The status of the request, and when it was made and last changed | So a request that is waiting is visibly waiting, rather than appearing to have just arrived |
Nothing is looked up when you submit it, so the form cannot be used to discover which merchant identifiers exist. Every identifier gets the same acknowledgement.
Stratsol is also notified that a request is waiting, so that it does not sit unnoticed. The notification identifies the request, you and the merchant by identifier only; your name and email address are not in it. The request itself is the record; the notification is only a prompt.
Email verification is performed by Amazon Cognito, our identity provider. Your email address is not treated as verified until you confirm it there. We do not collect or verify a phone number, and the portal does not use multi-factor authentication today.
While you are signed in
Your reading may be recorded. If it is, the record holds only your account, the page, and the time.
We may record the page you requested — not what you typed. We will not record search terms, form contents, or anything else you enter.
We will not use third-party analytics, advertising trackers, or any cookie beyond the one that keeps you signed in. Nothing about your reading will be disclosed outside Stratsol.
Why we would record what you read
- To answer your questions properly. Knowing which integration you have been reading about lets us have a specific conversation with you instead of a generic one.
- To find documentation that is not working. A page many developers read and then get stuck on is a page we need to fix.
- To know what to build. Repeated interest in something Wasp does not support yet is evidence we should.
What you read will never affect what access you are granted. Access is decided by who you are and your relationship with Stratsol — never by your browsing.
We will not sell it, share it with advertisers, or use it to build a profile of you beyond the purposes above.
How long we keep it
| Data | Retention |
|---|---|
| Records of pages you viewed | 12 months, then deleted |
| Your account and registration details | While your account is open, and for a reasonable period afterwards to meet our legal and record-keeping obligations |
| Your merchant access request | While your account is open. There is at most one at a time, and asking again replaces it |
Who else sees it
- Amazon Web Services, including Amazon Cognito, as our hosting and identity provider. Your data is held in AWS's Asia Pacific (Sydney) region.
- Stratsol staff, where they need it to support you or to operate the portal.
- Our email provider, which carries Stratsol's internal notifications about portal accounts: when you register, ask to join a merchant, your access changes, or your account is deleted or closed. Those notifications carry identifiers only: your user ID, the merchant and request concerned, the user ID of an administrator who acted, and, when your access changes, the permissions before and after. Your name and email address are not in them. Nothing else about you is emailed anywhere.
We do not sell your personal information, and we do not disclose it to anyone else except where the law requires it.
Your rights
You may ask us to:
- tell you what personal information we hold about you;
- correct it if it is wrong;
- delete it, and close your account.
You can also close your account yourself, at any time, from your profile in the portal. Closing it deletes your sign-in and your portal account straight away.
Contact us through the support channel. If you are in a place with additional rights — the European Union or the United Kingdom, for example — those rights apply and we will honour them.
If you are unhappy with how we have handled your information, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Changes
If we change what we collect or why, we will update this notice and tell registered users before the change takes effect. We will not start using information we already hold for a new purpose without telling you first.
Contact
Privacy questions go to Stratsol through the support channel.