Privacy Policy

Effective Date: June 21, 2024

QounterPay ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our platform and services.

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, phone number, company name, and password when you register.
• Business Data: Inventory items, sales transactions, customer records, employee information, and financial data you enter into the platform.
• Payment Information: Billing details processed through our payment provider (Paystack). We do not store full card numbers on our servers.

1.2 Information Collected Automatically

• Usage Data: Pages visited, features used, timestamps, and interaction patterns within the platform.
• Device Information: Browser type, operating system, screen resolution, and device identifiers.
• Network Information: IP address, approximate geographic location (city-level), and internet service provider.
• Cookies: Session cookies for authentication and preference cookies for user settings.

1.3 Information from Third Parties

• Payment Provider: Transaction status and payment confirmation from Paystack.
• Authentication Services: If you use social login in the future, we receive basic profile information from the identity provider.

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Process transactions and manage your subscription
• Send service-related communications (account verification, security alerts, billing notices)
• Provide customer support
• Enforce our Terms of Service and prevent fraud
• Generate anonymized, aggregated analytics to improve the platform
• Comply with legal obligations

We do not sell your personal information to third parties.

3. Data Storage and Security

3.1. Isolation. Each tenant's Business Data is stored in a separate, isolated database. No cross-tenant data access is possible through the application layer.

3.2. Encryption. Data is encrypted in transit (TLS 1.2+) and at rest (AES-256).

3.3. Access Controls. Access to production systems is restricted to authorized personnel with multi-factor authentication.

3.4. Backups. Automated daily backups with 30-day retention. Backups are encrypted and stored in a separate geographic region.

3.5. Infrastructure. We host our services on MongoDB Atlas with enterprise-grade security controls, SOC 2 compliance, and regional data residency options.

4. Data Sharing

We may share your information only in these circumstances:

• Service Providers: With trusted vendors who assist in operating the Service (hosting, payment processing, email delivery), bound by data processing agreements.
• Legal Requirements: When required by law, court order, or governmental regulation.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with prior notice to affected users.
• With Your Consent: When you explicitly authorize sharing for a specific purpose.

5. Your Rights

You have the right to:

• Access your personal data stored on our platform
• Correct inaccurate or incomplete data
• Export your Business Data in standard formats (CSV, PDF)
• Delete your account and associated data (subject to the 30-day retention window)
• Withdraw Consent for optional data processing at any time
• Object to processing based on legitimate interests

To exercise these rights, contact us at qounterpay@gmail.com, call +1 614 344 8413 / +233 542 521 836, or use the account settings page.

6. Data Retention

• Active Accounts: Data is retained for the duration of your subscription.
• Closed Accounts: Personal data is deleted 30 days after account closure. Anonymized analytics data may be retained indefinitely.
• Legal Holds: Data subject to legal proceedings is retained as required by law.
• Consent Records: Records of your consent to these policies are retained indefinitely for compliance purposes.

7. Cookies

We use the following types of cookies:

Type	Purpose	Duration
Essential	Authentication, security, session management	Session
Functional	User preferences, theme settings	1 year
Analytics	Usage patterns (anonymized)	90 days

You can manage cookie preferences through your browser settings. Disabling essential cookies will prevent you from using the Service.

8. Children's Privacy

The Service is not intended for individuals under 16 years of age. We do not knowingly collect personal information from children.

9. International Data Transfers

If your data is transferred to servers in a different jurisdiction, we ensure appropriate safeguards are in place, including standard contractual clauses or equivalent mechanisms.

10. Changes to This Policy

We will notify you of material changes to this Privacy Policy by updating the version on the platform and requiring re-acknowledgment. Minor changes take effect upon posting.

11. Contact Us

For privacy-related inquiries:

• Email: qounterpay@gmail.com
• Phone: +1 614 344 8413 / +233 542 521 836
• Subject Line: Privacy Inquiry - [Your Company Name]

We aim to respond to all privacy requests within 30 days.