Privacy Policy
Two different sets of people appear in Stock Sav: the shop using it, and the shop's own customers. This policy covers both, because the rules are not the same for each.
Who is responsible for what
For your shop's account — your name, email, what you pay us — we decide what is collected and why. That makes us the data controller.
For your customers' details — the names, phone numbers and debts you record in the credit book — you decide what to collect and why. You are the controller; we only hold it for you. We do not contact your customers, and we do not use their details for anything but running the shop's account.
That distinction matters: your obligations to your customers under Act 843 are yours, and that includes telling them what you record and letting them see or correct it.
What we store about you
- Your name, email address, and the shop's name, phone number and location
- Your password, stored only as a hash — we cannot read it and cannot tell you what it is
- Which plan you are on, when it runs to, and a record of payments that succeeded or failed
- Who signed in and when, so you can see activity on your own shop
We never see or store your card or mobile-money details. Those go straight to Paystack; we receive only confirmation that a payment worked.
What you store about your customers
Only what you type: a name, optionally a phone number and a note, and the running balance of what they owe. Nothing else is collected about them, and nothing about them leaves your shop's account.
A practical word: you do not need a phone number to record a debt. Collect it only if you will use it.
What stays on the device
So the till keeps selling when the connection drops, a copy of your item list is kept in the browser on that device, along with any sales made offline that have not yet synced.
That copy is erased when you sign out — which is why signing out matters on a shared device, and why staff should have their own logins rather than sharing one.
Who else can see it
We do not sell data, and we do not share it for advertising. It reaches only:
| Who | Why | Where |
|---|---|---|
| Paystack | Takes subscription payments and holds the card or mobile-money details used to pay us. | Nigeria and South Africa |
| Resend | Delivers the emails we send you — verification, password resets, billing notices. | United States and the European Union |
| Vercel | Serves stocksav.com and the app in your browser. | United States, with edge locations worldwide |
Some of these are outside Ghana, so your data is processed abroad. We use them because they are the practical options for taking payments and delivering mail reliably.
We would also disclose data if the law required it — a court order, for instance. If that happens we will tell you unless we are forbidden to.
How long it is kept
- While your account exists: everything is kept, including after a plan lapses. Stopping payment does not delete your records.
- Deleted items and customers: hidden rather than erased, because the sales history that mentions them has to stay explicable.
- Backups: kept for a limited period for recovery. A deletion request is applied to live data at once and works through the backups as they age out.
- Payment records: kept as long as tax and accounting rules require.
Your rights
Under Act 843 you can ask us to:
- show you what we hold about you
- correct anything wrong
- give you a copy in a format you can open
- delete your account and its data, subject to records we must keep by law
- stop processing it, where the Act allows
Ask us and we will do it — free, and within a reasonable time. If you think we have handled your data badly, you can complain to Ghana's Data Protection Commission.
Keeping it safe
- Everything travels over an encrypted connection
- Passwords are hashed, never stored as text
- Each shop's data is separated at the database layer, not just in the screens
- Staff accounts see only what their role allows — cost and profit figures are hidden from sales staff
- We take regular backups
No system is perfectly secure. If a breach affects your data we will tell you and the Data Protection Commission without undue delay.
Cookies and measurement
The app uses cookies to keep you signed in. There are no advertising cookies and no third-party trackers.
We count page visits to see which parts of the site are used, using a measurement tool that does not build a profile of you. Web addresses are stripped of anything after the path before they are recorded.
Children
Stock Sav is for businesses. We do not knowingly collect anything about children, and it should not be used by anyone under 18.
Changes
If we change this policy in a way that matters, we will email you before it takes effect. The version and date at the top always say which one is in force.
Reaching us
For anything about data — a copy, a correction, a deletion — WhatsApp or call 024 693 8074. We are in Accra, Ghana.
See also the Terms of Service.