Privacy Policy & Data Protection

1. Scope and Commitment

This Privacy Policy governs the collection, processing, storage, and transfer of merchant and end-customer data through Zuriey POS ("we", "our", or "platform"). We respect the privacy of every business entity and individual whose information passes through our point-of-sale software, cloud dashboards, and mobile endpoints across the Republic of Ghana.

Zuriey POS complies strictly with the provisions of the Ghana Data Protection Act, 2012 (Act 843), ensuring that all data processing adheres to principles of lawfulness, fairness, transparency, and data minimisation.

2. Information We Collect

When you register, manage retail locations, or process sales with Zuriey POS, we collect:

• Account & Merchant Profile: Business name, GRA Taxpayer Identification Number (TIN/Ghana Card PIN), business registration details, business addresses, owner full name, email address, and Ghanaian phone numbers.
• Store Operational Data: Inventory SKUs, barcodes, supplier contacts, wholesale costs, retail pricing, employee shifts, and cash drawer reconciliations.
• Transaction & Sales Records: Invoices generated, line items sold, timestamp, store terminal identifiers, payment method (Cash, MTN MoMo, Telecel Cash, Card, Bank Transfer), and tax breakdowns.
• End-Customer Information: Customer name, loyalty phone number, and optional delivery address provided voluntarily by the customer during checkout or loyalty sign-up.

3. How We Use and Process Your Data

Your data is utilized strictly for operational efficiency and statutory adherence:

4. Offline Mode & Local Storage Security

To combat unstable internet and local power fluctuations (Dumsor), Zuriey POS caches active catalog and offline sales in encrypted IndexedDB/WebSQL on the local cashier device.

Local storage is sandboxed to your store domain, ensuring that other browser sessions or local apps cannot inspect sales queues. As soon as connectivity returns, encrypted batches synchronize with the master cloud server via HTTPS/TLS 1.3.

5. Payment Processing & PCI-DSS Adherence

When accepting payments via MTN Mobile Money, Telecel Cash, Hubtel, or Paystack:

• Zuriey POS never stores, logs, or transmits customer Mobile Money PINs or full debit card numbers (PAN) / CVV codes.
• All payment interactions occur via secure tokenized APIs provided directly by licensed payment service providers approved by the Bank of Ghana (BoG).

6. Your Rights Under Ghana Law (Act 843)

Under the Data Protection Act, 2012, merchants and customers have guaranteed rights:

• Right of Access: Request a full export of your sales history, product catalog, and customer contact lists at any time in CSV/Excel format.
• Right of Rectification: Edit or correct inaccurate business information, customer profiles, or stock ledgers via your dashboard.
• Right to Data Portability: Export all business tables freely without proprietary vendor lock-in.
• Right of Erasure: Close your account and request permanent cryptographic destruction of stored cloud backups after fulfilling statutory GRA record retention periods.