Legal

Privacy policy

Draft for review. This outline describes what the ShelfSense app actually collects. Have it checked against Botswana's Data Protection Act, 2018 (and the laws of any other country you sell into) and fill in the bracketed details before the apps are submitted to the stores.

Last updated: [date]

Who we are

ShelfSense is operated by [legal company name], [registration number], [registered address], Botswana. Questions about this policy or your information: privacy@shelfsensebw.tech.

Whose information this covers

ShelfSense is used by companies (our customers) and their staff. Each customer decides who uses ShelfSense and what is recorded in it, and is responsible for that information. We process it on their behalf. This policy also covers people who contact us through this website.

What we collect

• Account details: name, work email address, role and team.
• Location: the phone's location when a user checks in to a store, takes a shelf photo or places an order, to confirm the visit happened at the store. The app doesn't track location at any other time.
• Photos: shelf photos the user takes during a visit. The app only uses the camera when the user chooses to take a photo.
• Work records: store visits, shelf audits, stock counts, expiry dates, orders, scores and targets.
• Demo requests: name, company, email, phone number and message entered on this website.
• Technical data: basic logs needed to run and secure the service, such as sign-in times and errors.

How we use it

To provide the service to our customers, keep it secure, send invitations and service emails, connect to the customer's accounting system when they ask us to, invoice customers, and reply to demo requests. We don't sell personal information or use it for advertising.

Where it is stored and who can see it

Data is stored with our hosting providers [Supabase (database and file storage, region: [region]) and Cloudflare (website)]. Each customer's data is kept separate from every other customer's, and within a customer, people only see what their role allows. Data sent to a customer's accounting system (for example QuickBooks or Sage) is then held under that provider's terms.

How long we keep it

[For as long as the customer's subscription is active, and for [period] afterwards, unless the customer asks us to delete it sooner or the law requires us to keep it longer.]

Security

Data is encrypted in transit and at rest. On phones, data saved for offline use is encrypted with a key held in the phone's secure storage. Access rules are enforced in the database, not just in the app.

Your rights

You can ask to see, correct or delete your personal information, or object to how it is used. If you use ShelfSense through your employer, contact them first; we will help them respond. You can also contact us at privacy@shelfsensebw.tech, or complain to the Information and Data Protection Commission of Botswana.

Deleting your ShelfSense account

To delete your ShelfSense account and the personal information linked to it:

1. Ask your company's ShelfSense administrator to remove you from the team, or
2. Email privacy@shelfsensebw.tech from the address you sign in with, with the subject "Delete my ShelfSense account".

We delete your sign-in, name, email address and the location and photos linked only to you within 30 days. Records your company needs to keep, such as orders and invoices, stay with the company without your name. [Confirm these periods before publishing.]

Changes

We will post any change to this policy here and tell customers about significant changes before they take effect.