Privacy Policy

PAYOFF ("we", "us", "our") provides business management software that helps you track sales, stock, expenses, customers, suppliers and payments. This policy explains what data we collect, why, and your rights over it.

1. Data we collect

• Account data: email, display name, password hash (managed by our authentication provider).
• Business data you enter: business profile, products, prices, stock levels, sales, expenses, customers, suppliers, ledger entries.
• Payment data: subscription plan, transaction status, currency, amount. Card numbers are handled by Pesapal — we never see or store full card details.
• Device data: IP address, browser/OS, session tokens, timestamps for security and audit logs.

2. Why we process it

• To provide the service you signed up for (accounting, reporting, receipt sharing).
• To authenticate you and secure your account (2FA, session management, audit logs).
• To process subscription payments via Pesapal.
• To comply with legal and tax obligations.

3. Sharing

We do not sell your data. We share it only with sub-processors required to run the service: our cloud database and authentication provider, and Pesapal for payment processing. All data is encrypted in transit.

4. Retention

Your business data is kept for as long as your account is active. When you delete your account we remove your personal identifiers and business records within 30 days, except where retention is required by law (e.g. tax records).

5. Your rights

You can access, correct, export or delete your data at any time. Account deletion is available in-app at /delete-account or by emailing us.

6. Security

Data is stored with row-level security so only members of your business can read it. Passwords are hashed. We support two-factor authentication and session revocation.

7. Children

PAYOFF is not intended for anyone under 18.

8. Changes

We may update this policy. Material changes will be announced in-app.

9. Contact

Questions? Reach us at support@payoff.app.