Wasta
اردوBack to the site

Privacy policy

Last updated: 17 September 2026

Wasta brings Pakistan's creators, businesses and agencies into one place. To do that we have to hold some information about you. This page says plainly what we keep, why we keep it, who can see it, and how you can have it deleted. No fine print, no vague language.

What we collect

What you type in yourself

  • When you create an account: your name, email, password, WhatsApp number and city.
  • Your password is never stored as is. We keep only a one way hash of it, which cannot be read back. Nobody at Wasta can see your password.
  • Creator profile: Instagram handle, niche, bio, your rates, barter preference and, until Instagram is connected, a self declared follower count.
  • Business or agency profile: organisation name, category, description and website.

What your activity creates

  • Campaigns you post, with their details and budget.
  • Applications: which campaign you applied to, the rate you quoted, and what happened next.
  • In app chat between a business and a creator, which starts once an application is unlocked.

From Instagram, only when you say so

Connecting Instagram is optional. The whole portal works without it. If you do connect, Instagram gives us:

  • Your Instagram username, account type and profile picture.
  • Follower, following and post counts.
  • Your account insights: reach, views, profile views and engagement.
  • An aggregated breakdown of your followers by age, gender and city. These are totals, never an individual follower's name or details.
  • Basic metadata for your recent posts: link, time, like and comment counts.
  • The access token Instagram issues, which stays on Wasta's server and is never shown to anyone.

Your Instagram password never reaches Wasta. Permission is granted on Instagram's own page, and you can revoke it from your Instagram settings whenever you like.

Technical

  • One session cookie, so you do not have to log in on every page. It lasts 30 days.
  • There are no advertising trackers, no Facebook pixel and no analytics on Wasta. We do not follow you around the internet.
  • Our hosting provider keeps ordinary server logs (such as IP address and time), as every website does, purely for security.

What we do with it

  • Run your account.
  • Match creators with the campaigns they qualify for.
  • Show businesses real numbers, so nobody wastes money on invented ones.
  • Run the chat.
  • Prevent fraud and abuse, such as one person creating account after account to game the system.
  • Contact you about your account or a campaign.

We do not sell, rent or share your data for advertising.

Who can see what

  • Your email and WhatsApp number are not public. A business only sees them after you apply to its campaign and it spends a credit to unlock your application.
  • Your name, handle, niche, city, bio, rates and follower count are visible to businesses and agencies in the creator directory.
  • A follower count that has not been verified through Instagram is clearly labelled as self declared.
  • Other creators cannot see your applications, your quotes or your chat.
  • A small part of Wasta's own team can view records for support and to stop abuse.

Who it is shared with

  • Meta (Instagram): only when you connect. We receive your data from Instagram. We send none of your Wasta data to Instagram.
  • Hosting: the website and database run on a hosting company's servers, like every website.
  • Law: if a Pakistani authority makes a lawful request, we comply.
  • Nobody else.

Your rights

  • See your data: log in to the portal, or ask us.
  • Correct anything wrong: from your profile page.
  • Disconnect Instagram: revoke permission in your Instagram settings.
  • Delete your whole account and data: see the data deletion page.

How long we keep it

For as long as your account is active. After deletion, your personal details are removed. A minimal record of completed work (which campaign, at what rate) may be kept for accounting, with your name and contact stripped out.

The Instagram access token is deleted when you revoke permission on Instagram or delete your account.

Age

Wasta is not for anyone under 18. If we learn that an account belongs to someone underage, we close it.

Security

Passwords are stored as hashes, the site runs on HTTPS, and the database cannot be opened from the web. Even so, no system can promise to be one hundred percent secure. If your data is ever at risk we will tell you, not hide it.

Changes

This policy may change over time. The date is at the top. For any significant change, registered users will be told by email.

Contact

Any question, write to salam@wasta.pk. We work from Karachi, Pakistan.