Privacy Policy

This Privacy Policy explains how CloudStore ("we", "us", "our") collects, uses, stores, and protects information when you use our cloud store and point-of-sale (POS) platform (the "Service"). We are committed to handling your data in line with the Nigeria Data Protection Act / Regulation (NDPA/NDPR) and applicable data-protection laws.

1. Information We Collect

• Account & business data — business name, contact name, email, phone, address, and the details of the branches, staff, suppliers, and customers you add to your account.
• Operational data you enter — products, prices, stock levels, sales, invoices, receipts, expenses, deposits, and reports generated through the Service.
• Payment data — subscription payments are processed by our payment partner (Paystack). We store transaction references and status, not full card numbers.
• Technical data — IP address, browser/device information, log-in timestamps, and audit records of security-relevant actions (e.g. logins, refunds, user changes).

2. How We Use Your Information

• To provide, operate, secure, and improve the Service and your account.
• To process subscription payments, renewals, and send billing/lifecycle notifications.
• To enforce plan limits, prevent fraud/abuse, and maintain audit trails.
• To provide customer support and respond to your requests.
• To comply with legal, tax, and regulatory obligations.

3. Legal Basis for Processing

We process personal data on the basis of: performance of our contract with you (providing the Service), your consent (where applicable), our legitimate business interests (security, fraud prevention, service improvement), and compliance with legal obligations.

4. How We Share Information

We do not sell your data. As a multi-tenant platform, your business data is logically isolated from other businesses on the platform. We share data only with:

• Service providers that help us run the Service (e.g. payment processing, hosting, email/SMS delivery), under confidentiality obligations.
• Authorities, where required by law or valid legal process.

5. Payments & Card Data

Subscription payments are handled by Paystack, a licensed payment processor. Card details are entered on Paystack's secure, PCI-DSS-compliant systems and are never stored on our servers. We retain only the payment reference, amount, plan, and status needed to manage your subscription.

6. Data Retention

We retain your account and business data for as long as your account is active and as needed to provide the Service. If your subscription lapses, your data is preserved (read-only) so you can export it or reactivate. You may request deletion as described below; we may retain limited records where required for legal, tax, or audit purposes.

7. How We Protect Your Data

• Passwords are stored using strong one-way hashing (bcrypt).
• Per-tenant data isolation, CSRF protection, login-attempt throttling, and audit logging.
• Access controls by staff role (Super Admin, Administrator, Manager, Staff).
• Encrypted connections (HTTPS) are recommended and supported in production.

No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard safeguards.

8. Your Rights

Subject to applicable law, you have the right to access, correct, export, or request deletion of your personal data, to object to or restrict certain processing, and to withdraw consent. As the account owner, you also control the personal data of the staff and customers you add — you are the data controller for that information and are responsible for having a lawful basis to process it. To exercise your rights, contact us using the details below.

9. Cookies & Sessions

We use strictly necessary cookies to keep you signed in and to secure the Service (session and CSRF tokens). These are required for the platform to function; we do not use them for third-party advertising.

10. Changes & Contact

We may update this Policy from time to time; material changes will be posted here with a new "last updated" date. Questions or requests? Contact us at support@cloudstore.com.