Privacy Policy

1. Information We Collect

We collect the following categories of information:

1.1 Account Information

• Full name, email address, phone number, and username
• Business name, address, and description (provided during registration)
• Password (stored only as a one-way cryptographic hash, never in plain text)

1.2 Business Data

• Product catalogues, categories, supplier information, and pricing
• Sales transactions, order history, and customer records
• Stock levels, purchase orders, stock transfers, and receiving records
• Shift records, discount configurations, and loyalty programmes

1.3 Payment Information

• Subscription billing details are processed by our payment provider (Paystack). We do not store credit or debit card numbers on our servers.
• Payment history, plan details, and billing cycle information are retained for invoicing.

1.4 Usage and Technical Data

• Browser type, operating system, IP address, and device information
• Pages visited, features used, and session duration
• Error logs and performance metrics

2. How We Use Your Information

We use collected information to:

• Provide, operate, and maintain the Fluxvend platform and its features
• Process subscriptions, payments, and generate invoices
• Send transactional notifications (order confirmations, stock alerts, password resets, invitation emails)
• Improve platform performance, diagnose technical issues, and develop new features
• Enforce our Terms and Conditions and protect against fraud or misuse
• Comply with applicable legal obligations and respond to lawful requests

3. Cookies and Local Storage

Fluxvend uses browser local storage and cookies to maintain authentication sessions and store user interface preferences. We do not use third-party advertising or tracking cookies. Essential cookies are required for the platform to function correctly.

4. Data Sharing and Third Parties

We do not sell, rent, or trade your personal information. We may share data with:

• Payment processors (Paystack) to handle subscription billing securely
• Email service providers to deliver transactional emails (order receipts, alerts, invitations)
• Cloud infrastructure providers (Microsoft Azure) for hosting and data storage
• Law enforcement or regulators when required by applicable law

All third-party providers are contractually bound to protect your data and use it only for the purposes specified.

5. Data Security

We implement the following security measures:

• Passwords are hashed using industry-standard one-way algorithms
• All data is transmitted over HTTPS/TLS encryption
• Access to production systems is restricted and monitored
• Payment card details are never stored on Fluxvend servers; they are processed directly by PCI-DSS compliant payment providers
• Authentication tokens have configurable expiration and can be revoked

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Business data (products, orders, stock history) is retained for the lifetime of your subscription. If you close your account, we will delete or anonymise your personal data within 90 days, unless retention is required by law.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct inaccurate information through your account settings
• Deletion: Request deletion of your personal data by contacting our support team
• Portability: Request an export of your data in a machine-readable format
• Objection: Object to certain processing activities where applicable

To exercise any of these rights, contact us at contact@fluxvend.com.

8. Regulatory Compliance

Fluxvend is committed to compliance with applicable data protection regulations, including:

• NDPR (Nigeria Data Protection Regulation) for Nigerian users
• GDPR (General Data Protection Regulation) for European users
• CCPA / CPRA (California Consumer Privacy Act / California Privacy Rights Act) for California residents

9. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you promptly via email and through in-app notifications. We will also notify the relevant supervisory authorities as required by law.

10. Children's Privacy

Fluxvend is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or through a notice on the platform. The "Last updated" date at the top of this page indicates the most recent revision.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

• Email: contact@fluxvend.com
• Website: fluxvend.com