Privacy Policy

Last updated: August 2026

We collect only what's needed to run your store's point-of-sale system and keep your account secure. We don't sell your data, ever.

1. Information we collect

Category	Examples
Account info	Name, email, phone number, password (hashed, never stored in plain text)
Business info	Store name, address, currency, VAT rate, branches
Transaction data	Products, inventory levels, sales, orders, discounts
Billing info	Subscription plan, billing cycle, card brand/last 4 digits (full card details are held by Paystack, not us)
Usage data	Login times, device/browser info, general product analytics

2. How we use this information

To provide and operate the Cravida POS service for your business
To process subscription payments and send billing-related emails
To send account-related notifications (password resets, trial reminders, low-stock alerts)
To provide customer support when you contact us
To improve the product and understand how it's used
To detect and prevent fraud or abuse

3. Payment processing

Card payments are handled entirely by Paystack, a licensed payment processor. We never see or store your full card number, expiry date, or CVV. We only retain a payment authorization reference and limited card metadata (last 4 digits, card brand) needed to manage your subscription.

4. Who we share data with

We don't sell your personal data to anyone. We share limited data only with service providers who help us run Cravida POS, under agreements that require them to protect it:

Paystack — payment processing
Supabase — database hosting and authentication
Resend — transactional email delivery
Railway — application hosting infrastructure

We may also disclose information if required by law, or to protect the rights, safety, or property of Cravida POS, our users, or the public.

5. Data storage and security

Your data is stored on encrypted infrastructure via Supabase (PostgreSQL). Passwords are hashed and never stored in readable form. We use industry-standard measures to protect your information, but no system is 100% secure if you believe your account has been compromised, contact us immediately.

6. Data retention

We keep your data for as long as your account is active. If you close your account, we retain your business records for a reasonable period afterward (for legal, tax, and dispute-resolution purposes), then delete or anonymize it, unless you request earlier deletion and we have no legal obligation to retain it.

7. Your rights

Under the Nigeria Data Protection Act (and similar data protection laws), you have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data, subject to legal/tax retention requirements
Object to certain uses of your data
Withdraw consent where processing is based on consent

To exercise any of these rights, email us at support@cravidapos.com.

8. Cookies

We use essential cookies to keep you logged in and remember your session. We may use limited analytics cookies to understand product usage and improve the Service.

9. Children's privacy

Cravida POS is intended for business use by adults. We don't knowingly collect data from children under 18.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or in-app notice before they take effect.

11. Contact

Questions about this policy or how your data is handled? Email support@cravidapos.com.