Who operates Wasil
Wasil is an independent third-party application operated through aramb.dev. Wasil is not affiliated with or endorsed by Vercel.
Information Wasil handles
- Vercel identity: account ID, email address, name or username, and connected team information returned by Vercel.
- Vercel metadata: workspace, project, deployment, domain, environment-key coverage, deployment-event, commit, and status information needed to display the app.
- Credentials: a Vercel personal access token (PAT) in Default Mode, or a PAT stored on the device in Private Mode. Wasil does not fetch environment-variable secret values.
- Wasil session data: an opaque session token in Default Mode, plus session and connection records on the backend.
- Preferences: favorite projects, connection-mode selection, and notification preferences.
- Operational information: the backend may process request timing, error, and security information needed to operate the service. Review the production logging configuration before launch.
Default Mode
When you choose Default Mode, your PAT is sent to the Wasil backend for validation. The backend stores the Vercel credential encrypted at rest and uses it to make Vercel API requests. The app receives an opaque Wasil session token and stores that token in the iOS Keychain; the PAT is not returned in the session response.
Default Mode is the mode that uses the Wasil relay. It should not be described as zero-knowledge or as a mode where the PAT never leaves your device.
Private Mode
In Private Mode, the PAT is stored in the iOS Keychain and Vercel requests go directly from the iPhone to api.vercel.com. The relay is not used for those Vercel requests. Private Mode keeps the PAT on the device, but it has reduced relay-backed functionality and does not provide remote push delivery.
How information is used
Wasil uses this information to authenticate your connection, retrieve and display Vercel resources, show deployment events, request redeploys, report domain and environment coverage, save preferences, secure the service, and respond to support requests.
Sharing and third parties
Wasil sends requests to Vercel because Vercel is the service being monitored and managed. Default Mode also uses the Wasil backend, its database, and its hosting infrastructure. Private Mode sends Vercel requests directly from the device. Wasil does not sell personal information. Vercel and infrastructure providers process information under their own terms and policies.
Security
Wasil uses the iOS Keychain for locally stored credentials, opaque hashed session tokens on the backend, encrypted storage for Default Mode credentials, HTTPS requests, and redaction of deployment-event content before it is returned to the client. No method of transmission or storage is completely secure, and Wasil cannot guarantee absolute security.
Retention and deletion
Signing out clears the locally stored app credential and revokes the active Wasil session. Deleting a Vercel PAT in Vercel’s token settings revokes that token’s access. The current preview does not yet provide self-service account deletion or a published retention schedule.
To request removal of a Wasil account, stored Default Mode credential, cached metadata, sessions, alerts, or preferences, use the support page. Do not include a PAT or other secret in your request. You may also need to revoke your Vercel token directly in Vercel.
Children’s privacy
Wasil is an operational tool for account owners and is not directed to children. We do not knowingly collect personal information from children.
Changes to this policy
We may update this policy as Wasil’s features, hosting, or data practices change. The “Last updated” date above will change when we publish a material revision.
Contact
For privacy questions or deletion requests, visit Wasil Support. Please include the account email associated with Wasil and never send credentials, passwords, or secret values.