← Back to sign in

Privacy Policy

Last updated: May 17, 2026

This policy is aligned with Ghana's Data Protection Act, 2012 (Act 843). For the full statement of your rights and our obligations, see the Act: dataprotection.org.gh.

1. Who we are

VendaPOS ("we", "us") provides a point-of-sale app for shops. This policy explains what we collect, why, and your rights.

2. What we collect

  • Account info: name, email, username, password (stored hashed), role.
  • Shop data you enter: products, prices, orders, customers, staff records.
  • Device & usage: browser/device type, IP, app actions, error logs, approximate location from IP.
  • Offline cache: recent products and pending sales stored on your device so the POS works without internet.

3. How we use it

  • To operate the Service and sync sales between devices.
  • To secure accounts and detect abuse.
  • To provide support when you contact us.
  • To improve features (using aggregated, non-identifying data where possible).
  • To send service-related emails (password resets, security alerts).

4. Legal bases

We process data to perform our contract with you, to comply with legal obligations, and based on our legitimate interest in running a secure, reliable service. Where required, we'll ask for consent.

5. Lawful basis and consent (Ghana)

For users in Ghana, we process personal data in line with the Data Protection Act, 2012 (Act 843). We rely on the following lawful bases:

  • Consent: for optional features like marketing emails, non-essential cookies, and analytics beyond what's needed to run the POS.
  • Performance of a contract: to create your account, sync sales, and deliver the Service you signed up for.
  • Legal obligation: to meet tax, accounting, and lawful requests from authorities.
  • Legitimate interest: to keep the Service secure, prevent fraud, and improve reliability — balanced against your rights.

How we collect consent. Consent is requested through clear, unticked opt-ins at the point of collection — for example, a checkbox during sign-up for marketing, a banner for non-essential cookies, and in-app prompts before enabling features that use additional data (such as camera access for barcode scanning). Consent is freely given, specific, informed, and unambiguous.

How you can withdraw consent. You can withdraw any consent at any time from Account → Privacy, by toggling the relevant setting, or by emailing support@myvendapos.com. Withdrawal takes effect going forward and does not affect processing already carried out on the basis of your earlier consent. Some optional features will stop working once their consent is withdrawn.

How we record consent. Each consent decision is logged with a timestamp, the version of the notice you saw, and the channel used (sign-up form, cookie banner, in-app prompt, or email). These records are retained for the life of your account and a reasonable period afterwards so we can demonstrate compliance with Act 843 if asked by you or the Data Protection Commission.

6. Sharing

We don't sell your data. We share it only with processors that help us run the Service (hosting, email delivery, analytics) under contracts that require them to protect it. We may disclose data if required by law.

7. Security

Data is encrypted in transit (HTTPS) and at rest. Access is scoped by role-based permissions and database row-level security. We support optional two-factor authentication for owners and managers — we strongly recommend enabling it.

8. Cookies and local storage

We use cookies and browser storage to keep you signed in, remember preferences, and cache data for offline POS. You can clear them in your browser settings, but the app may stop working as expected.

9. Retention

We keep your data while your account is active and for a reasonable period after closure to meet legal, tax, and dispute-resolution obligations. You can request earlier deletion where the law permits.

10. Your rights

You can access, correct, export, or delete your data, object to processing, and withdraw consent. Email support@myvendapos.com and we'll respond within a reasonable time.

11. International transfers

Our service providers may process data outside your country. When they do, we rely on appropriate safeguards (such as standard contractual clauses) to protect your data.

12. Children

VendaPOS isn't intended for children under 16. We don't knowingly collect their data.

13. Changes

We may update this policy. Material changes will be announced in-app or by email.

14. Contact

Email support@myvendapos.com with any privacy question.