Privacy Policy

1. Purpose & Scope

This Privacy Policy describes how DAVA Technology Ltd ("RetailOne", "we", "our") collects, uses, protects, and stores information when you use our point of sale, stock management, and invoicing software.

We comply strictly with the provisions of Law N° 058/2021 of 13/10/2021 relating to the protection of personal data and privacy in the Republic of Rwanda.

2. What Information We Process

We process only data essential for running your store operations smoothly:

• Account & Onboarding Data: Business name, shop owner/manager name, WhatsApp phone number, shop location/district, and subscription tier.
• Inventory & Store Records: Product names, barcodes, purchase prices, retail prices, stock counts, and supplier listings entered by your staff.
• Transaction Records: Cash and Mobile Money sales, receipt numbers, timestamps, and customer debt ledger balances.
• System Audit Logs: Staff login records, till opening/closing balances, and timestamped transaction logs to prevent internal shrinkage.

3. Absolute Data Confidentiality & No Commercial Exploitation

In retail, your inventory costs and client debts are confidential trade secrets. We maintain strict safeguards:

• Zero Ad Targeting: We will never sell, lease, or monetize your store data to third-party ad networks or aggregators.
• No Cross-Merchant Data Leakage: Each merchant operates in a strictly isolated tenant environment. Other shops or competitors can never view your prices, volume, or suppliers.
• Strict Staff Access Protocols: DAVA Technology support personnel only inspect store records when specifically invited by you to resolve a technical support ticket.

4. Automated Daily Backups & Data Portability

Your data is continuously safeguarded so your business never stops:

• Automated Daily Backups: Cloud databases are snapshotted daily with off-site redundancy.
• On-Demand Export: Shop owners may export complete stock, sales, and client ledgers in standard Excel/CSV formats at any time from their dashboard.
• Account Deletion: If you close your subscription, you may request permanent deletion of your store database in accordance with Rwanda data protection laws.

5. Data Security Standards

We use modern enterprise security controls including:

• Transport Security: 256-bit SSL/TLS encryption for all communications between your browser, phones, and our cloud servers.
• Role-Based Staff Permissions: Granular access controls so cashiers cannot view purchase costs, gross margins, or overall profit reports without owner permission.
• Encrypted Passwords: Strong cryptographic hashing algorithms for user credentials.

6. Jurisdiction & Data Privacy Inquiries

For data protection inquiries or to exercise your rights under Rwanda Law N° 058/2021, contact our data protection team: