1. Information We Collect

When you create an account or use our services, we may collect the following information:

Account information — business name, email address, name, and password.
Business data — products, inventory, transactions, and customer records you create within the platform.
Usage data — how you interact with our services, including pages visited and features used.
Device information — browser type, operating system, and IP address.

2. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our services.
Process transactions and manage your account.
Send service-related communications (e.g., verification emails, security alerts).
Monitor and analyse usage to improve performance and user experience.
Detect and prevent fraud or abuse.

3. Data Storage & Security

Your data is stored in isolated, tenant-specific databases. We use industry-standard encryption (TLS in transit, AES-256 at rest) and access controls to protect your information. We do not sell your data to third parties.

4. Your Rights under POPIA

Abosto processes personal information in accordance with South Africa’s Protection of Personal Information Act (POPIA). As a data subject you have the right to access the personal information we hold about you, to request correction or deletion of it, to object to processing, and to lodge a complaint with the Information Regulator (South Africa). To exercise any of these rights, contact us at info@abosto.com.

5. Data Sharing

We do not share your personal or business data with third parties except:

With your explicit consent.
To comply with legal obligations or lawful requests.
With service providers who process data on our behalf (e.g., cloud hosting, email delivery), under strict contractual obligations.

6. Your Rights

You have the right to access, correct, or delete your personal data at any time. You may also request a copy of the data we hold about you. To exercise these rights, contact us at privacy@abosto.com.

7. Cookies

We use essential cookies required for authentication and session management. We do not use third-party tracking or advertising cookies.

8. Data Retention

We retain your data for as long as your account is active. If you close your account, we will delete your data within 90 days, except where retention is required by law.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or through the platform.

10. Contact

If you have questions about this privacy policy, please contact us at privacy@abosto.com.

Privacy Policy