Privacy Policy

1. What Information We Collect

InventIQ is a product of Facto Labs. When you use InventIQ, we collect:

• Account information. Your name, email address, and password (which we store hashed — we never see the plain password).
• Business data. Product names, SKUs, prices, stock levels, supplier details, customer names, invoices, expenses, purchase orders, stock count records, and any other information you enter into the platform.
• Team information. Names, email addresses, and roles of people you add to your organization account.
• Usage data. Pages you visit, features you use, and actions you take within the app. This helps us understand what to improve.
• Device and connection data. Browser type, operating system, IP address, and timestamps. This is standard for almost every web service and helps us with security and troubleshooting.

2. What We Do Not Collect

• We do not collect payment card numbers. Payments are handled entirely by Paystack, and we never see your full card details.
• We do not collect biometric data, location data (beyond your IP address), or sensitive personal data like health information or political opinions.
• We do not read the contents of your inventory data, financial reports, or customer lists for any purpose other than providing the service to you.

3. How We Use Your Data

• To run the service — display your products, calculate stock levels, generate invoices, produce financial reports, and everything else the app does.
• To improve the product — we look at aggregate usage patterns to decide which features to build next. We do not look at individual business data for product decisions. Any processing of personal data is carried out in accordance with the Nigerian Data Protection Act (NDPA) 2023 and applicable data protection regulations.
• To communicate with you — send billing receipts, service updates, and (with your permission) occasional product tips. We do not send marketing spam.
• To comply with legal obligations — if a court or regulator requires us to produce data, we will comply within the bounds of the law.

4. Who We Share Data With

We share your data only with service providers that are strictly necessary to run InventIQ:

• Paystack — processes subscription payments. They receive your billing email and payment amount, but not your business data.
• Cloudinary — stores receipt images and files you upload (if you use the receipt upload feature).
• Database and cache infrastructure — your data is stored on our private, encrypted servers. We do not use third-party database providers.
• Anonymized audit logs — stored for compliance and debugging purposes.

We do not share your data with advertising networks, data brokers, or any third party for their independent use.

5. Data Retention

We keep your data for as long as your account is active. If you close your account:

• You can export your data immediately before closure using the built-in export tools.
• We keep your data in cold storage for 90 days after closure in case you change your mind.
• After 90 days, we delete or anonymize all your data from our active systems. Backups may retain encrypted fragments for up to 30 more days before being fully rotated out.

6. Data Security

We take reasonable precautions to protect your data:

• All traffic between your browser and our servers is encrypted using TLS.
• Passwords are hashed using Argon2, not stored in plain text.
• Database connections are encrypted and restricted to specific IP ranges.
• Our team has access to production data only when necessary for debugging, and all access is logged.

That said, no online service is 100% secure. We cannot guarantee that unauthorized access will never happen, but we will notify you promptly if we discover a breach affecting your data.

7. Cookies

We use a small number of cookies to keep you logged in and remember your session preferences. These are strictly functional cookies. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

Specifically, we store your authentication token in a cookie named auth-storage. This is essential for the app to know who you are. You can clear it by logging out.

8. Your Rights

You have the right to:

• Access the data we hold about you and your business — just ask and we will provide it.
• Correct any inaccurate data — you can edit most of it directly in the app.
• Export your data — use the export features in the app or contact us for a full dump.
• Delete your account and data — close your account from the settings page or email us.
• Withdraw consent — if you previously agreed to something (like marketing emails), you can opt out at any time.

9. Children

InventIQ is a business tool. It is not intended for use by anyone under the age of 18. We do not knowingly collect data from children.

10. Changes to This Policy

If we change how we handle your data, we will update this page and let you know through the app or by email. Significant changes will include a summary of what changed and why.

11. Contact

If you have questions about this policy, want to exercise any of your rights, or need to report a concern, email Facto Labs at privacy@inventiq.io.