Privacy Policy

1. Scope

This policy applies to personal data processed through our Inventory Application and related services, including web, mobile, and API interfaces, support channels, and billing.

2. Data We Collect

We collect the following categories of data depending on how you interact with the Service and your role (e.g., admin, warehouse staff, supplier contact):

• Account & Identity Data: name, role, email, phone number, organization, login credentials, user IDs.
• Operational Data: inventory items, SKUs, batches/lot numbers, stock movements, purchase orders, sales orders, supplier and customer contact details.
• Device & Usage Data: log files, IP address, timestamps, features used, crash reports, performance data.
• Billing Data:billing contact, invoices, and transaction history.
• Support Data: content of messages, attachments, and feedback submitted to support.

3. How We Use Data

• Provide, operate, and maintain the Inventory Application.
• Authenticate users, manage roles/permissions, and secure access.
• Process stock movements, orders, and supplier/customer records.
• Send service communications (e.g., low-stock alerts, updates).
• Improve features, monitor performance, and fix bugs.
• Analyze usage trends to enhance user experience.
• Comply with legal obligations under the NDPR and other laws.
• With consent, send optional updates or surveys.

4. Legal Bases (NDPR, GDPR, CCPA)

We rely on several legal grounds depending on context:

• NDPR Principles: lawful processing, consent, legitimate interest, contract necessity, and legal obligation.
• GDPR/UK GDPR (if applicable): contract, consent, legitimate interest, or legal obligation.
• CCPA/CPRA (if applicable): transparency, consumer rights, and no sale of personal information.

5. Retention

We retain personal data only as long as necessary for business purposes, legal, or regulatory requirements. When no longer needed, data may be anonymized or securely deleted.

6. Sharing & Processors

We do not sell personal data. Data may be shared with trusted service providers (processors) who support our operations, such as cloud hosting, analytics, or payments, under confidentiality and security agreements.

7. International Transfers

If data is transferred outside Nigeria, the EU, or your local jurisdiction, we ensure adequate safeguards, such as standard contractual clauses or equivalent mechanisms, to protect your data.

8. Security

We implement technical and organizational measures to protect data, including encryption, role-based access, and audit logs. No system is 100% secure, but we take commercially reasonable steps to reduce risks.

9. Your Rights

Under the NDPR, you have rights to access, correct, delete, or object to processing of your personal data. If GDPR/CCPA applies, you may also have rights to portability, restriction, or to opt out of certain sharing.

To exercise these rights, contact us at appnovia.dev@gmail.com.

10. Cookies & Tracking

We use cookies and similar technologies to operate and improve the Service. Where legally required, we request your consent.

11. Children’s Privacy

The Service is not intended for children under 16. We do not knowingly collect data from them.

12. Third-Party Links

Links to third-party sites are provided for convenience. We are not responsible for their privacy practices.

13. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be communicated through the Service or via email where appropriate.

14. Contact Us

For privacy concerns or data rights requests, please contact:

15. Definitions

• “Personal Data” means information relating to an identified or identifiable person.
• “Processor” means a third party who processes data on behalf of the company.
• “Controller” means the entity that determines the purposes and means of processing data.