Privacy policy

1. What we collect

For every account: the owner’s name, phone number, email address and a scrambled (hashed) form of the password, never the password itself; the shop’s name and details; and the logins of the cashiers the owner adds.

For cloud shops, the shop’s records as described below. For every shop, the payments made to us and basic information about the devices the app is used on.

2. What a cloud shop stores with us

A cloud shop’s products, stock, sales, shifts, customer names typed at checkout, customers and suppliers, expenses, team members, and staff records with attendance, leave and pay, and its product photos, receipt photos and logo, kept in private file storage and shown only through short-lived links.

Staff personal details (Ghana Card and SSNIT numbers, bank and Mobile Money details, emergency contacts) are encrypted before they are stored and are shown only to the shop’s owner.

We keep these records for as long as the shop has an account, and as set out under "How long we keep it".

3. What a local-only shop still sends us

A shop on the local licence sends us only the owner’s sign-in details (name, email, phone and the hashed password), each device’s licence activation (a device identifier, which is how the 3-device limit is kept) and its payment records.

Its sales, stock, customers and everything else it records never leave its devices.

4. What stays on the device

The app keeps the shop’s records on the device so it works without a connection: in the browser’s storage for the web app, which asks the browser to keep it rather than treat it as clearable cache, or in the desktop app’s own folder. The sign-in session is kept in the browser’s local storage, and a PIN, if one is set, only on that device.

5. How we use it

To run the service: signing you in, syncing and backing up a cloud shop, sending the emails the service needs (such as password resets and payment reminders), billing, answering support requests, and keeping accounts and the service secure.

We do not sell your data, and we do not use your shop’s records for advertising.

6. Payments

Payments are processed by Paystack, which has its own privacy policy. We never see or store card numbers or Mobile Money PINs. From Paystack we receive whether a payment succeeded, its amount, its reference and the payment channel used.

7. Customer names

The shop decides what it records about its own customers at checkout, such as a name, and for credit customers a phone number. For a cloud shop we store what it records; for a local-only shop it stays on the shop’s devices. The shop is responsible for having a good reason to record it.

8. Referral partners

For referral partners we keep their name, contact details, referral code, the shops they referred and the Mobile Money or bank account their commission is paid to, and use them only to track and pay commission.

9. Messages sent from this website

The contact form collects your name, a phone number or email address, your shop’s name if you give it, and your message. The partner application collects your name, phone number, email if you give it, town, and how you would find shops. We use them only to reply to you or consider your application, and delete them when they are no longer needed for that.

10. Desktop app updates

Each time it opens, the desktop app checks for a newer version by fetching one small file from our download server. The request carries nothing about your shop, at most the app’s version and that it runs on 64-bit Windows; like any request on the internet, the server sees the computer’s IP address. An update is only downloaded and installed when you choose Update.

11. Who we share it with

Only the service providers we rely on to run TrackShopGh, each only as far as its job needs: hosting and file storage, email delivery, and Paystack for payments. We also share information when the law requires it.

12. How long we keep it

An active account’s records are kept while it is active. A paused account’s records are kept so the shop can carry on when it pays. When an owner asks for a closed shop’s records to be deleted, we delete them, except payment records, which we keep for as long as tax law requires.

13. Your rights

Under Ghana’s Data Protection Act, 2012 (Act 843), you can ask to see the personal data we hold about you, to have it corrected, to have a copy of it, and to have it deleted where we no longer need it. Contact us at the address below and we will reply within the time the law allows.

TrackShopGh is registered with the Data Protection Commission of Ghana. [The registration number is to be added.]

14. Security

Passwords and PINs are stored only in hashed form, every connection to our servers is encrypted, files are kept in private storage and shared only through short-lived links, and staff personal details are encrypted at rest. See the security page for more.

15. Contact

For a privacy question or request, email us at the address below.