Privacy Policy

Account Information

When you create an account, we collect your name, email address, and a secure credential that verifies your identity. If you choose to sign in using a third-party authentication provider, we receive only the basic profile information that provider makes available.

Connected Platform Credentials

To enable integrations with sales channels you choose to connect, we store the access credentials you provide. All such credentials are encrypted before storage and are never accessible in plain text.

Business Data

We store the product, order, inventory, and financial records that you create or import through the platform. This data belongs to you and is held on your behalf.

Usage Data

We collect anonymised information about how you interact with the platform — such as pages visited, features used, and error events — to help us improve reliability and user experience.

Payment Data

When you purchase credits, we store the transaction reference, amount, and payment receipt number. We do not store payment PINs or full financial account numbers.

Service Delivery

We use your data solely to operate and deliver the services you have subscribed to, including synchronising your business data and sending notifications on your behalf.

AI-Assisted Features

When you use AI-assisted features, relevant business data is processed to generate the requested output. We do not use your data to train AI models, and processing is subject to appropriate data handling agreements.

Communications

We may send you transactional messages such as account confirmations, billing receipts, and service alerts. Marketing communications are only sent where you have opted in, and you may unsubscribe at any time.

Security & Fraud Prevention

We monitor usage patterns to detect and prevent unauthorised access, abuse, or fraud, and to protect the integrity of accounts on the platform.

Storage

Your data is stored on cloud infrastructure managed by reputable providers operating under appropriate security and compliance frameworks.

Encryption

Sensitive credentials and personal data are encrypted at rest and in transit using industry-standard encryption protocols. Passwords are never stored in recoverable form.

Access Controls

Access to your data is strictly controlled. All platform endpoints require authentication, and data queries are scoped to your account only.

Retention

We retain your data for as long as your account is active. Upon account deletion, your data is purged within 30 days, except where we are required by law to retain certain records.

Payment Processors

We work with licensed payment service providers to process transactions. Only the minimum information necessary to complete a transaction is shared with these providers.

Messaging Services

Where you enable SMS or communication notifications, your contact information is shared with a licensed communications provider solely to deliver those messages.

AI Processing

AI-assisted features are powered by third-party inference services. Data shared for this purpose is governed by data processing agreements and is not used for model training.

Background Processing

Certain automated tasks — such as scheduled alerts and background syncs — are processed by infrastructure service providers under appropriate data agreements.

Access & Portability

You may request a copy of the personal data we hold about you at any time. Contact us at the address below to make a data access or portability request.

Correction

You can update your account information at any time from your account settings.

Deletion

You may request deletion of your account and all associated personal data. We will process such requests within 30 days.

Objection & Restriction

You may object to certain types of processing, such as marketing communications, by adjusting your preferences in your account settings or contacting us directly.

We use session cookies to maintain your authenticated session and preference cookies to remember settings you have chosen. We do not use third-party advertising cookies. You may disable cookies in your browser, but doing so may affect your ability to use the platform.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date and, for material changes, notify you by email or in-platform notice. Continued use of SokoFlow after changes are posted constitutes your acceptance of the updated policy.